AI privacy deadlines keep sliding while agents already transact

The EU pushed high-risk AI obligations from August 2026 to December 2027, Colorado moved its AI law to January 1, 2027, HHS delayed its HIPAA Security Rule overhaul to July 2027, and the CFPB open banking rule remains under a court order. Meanwhile AI agents already place orders and payments, and Mastercard, Visa and Ant International are drafting standards to identify them.

• EU deferred high-risk AI obligations to December 2027
• Colorado moved its AI law start date to January 1, 2027
• HHS pushed final HIPAA Security Rule action to July 2027
• Mastercard and Alchemy roll out agentic payments via virtual cards