Updated 21 October 2026
Reference ToolQHSE Compliance Calendar 2026–2027
This page has two parts. The first is a table of 31 dated regulatory and standards milestones between November 2026 and December 2027, each re-opened at its primary source on 21 October 2026 and labelled by status. The second is an illustrative internal planning rhythm, with suggested months for reviews and audits, which you replace with your own dates.
How to read the dates
- Enacted and applicablemeans the provision already applies, and the date is a deadline or a step within it.
- Adopted, not yet applicablemeans the act or requirement is published, and this is the date it starts to apply.
- Proposedmeans the rule is still a proposal, so any date attached to it is a projection.
- Expected, not officialmeans a planned or expected date that no legal text fixes.
Confirm locally. Each row says what the named source states. Whether it binds your organisation depends on the entity, its sites, thresholds and contracts, and for an EU directive on the national law that transposes it. Accreditation and certification dates bind the bodies named, and reach certified organisations through their certification body.
TekmonAd
Explore its published safety, quality and maintenance workflows. Confirm modules and pricing in a scoped proposal.
Dated regulatory and standards milestones, November 2026 to December 2027
Rows run in date order. Where two instruments share a date, each has its own row. The last column names the source each row was read from on 21 October 2026; on narrow screens the table scrolls sideways.
| Date | Instrument | What the source states | Status | Who and where | Records or software check | Source and date checked |
|---|---|---|---|---|---|---|
| November and December 2026 | ||||||
| 1 November 2026 | ISO 9001:2026 transition, UKAS arrangements | UKAS says it will be ready to begin transition assessment of the certification bodies it accredits. Until UKAS has decided a body's transition, that body may not present ISO 9001:2026 certificates as accredited. | Adopted, not yet applicableUKAS schedule | UKAS-accredited certification bodies, UK; their certified clients plan around it | Ask your certification body when it will send its gap analysis to UKAS, and do not count on an accredited 2026-edition certificate from it before UKAS has decided its transition. | Read 21 October 2026On this site: ISO 9001:2026 guide |
| 10 November 2026 | Revised ESRS, Delegated Regulation (EU) 2026/1563 | Article 3: the regulation enters into force on this date and applies to financial years beginning on or after 1 January 2027. Under Article 2, for financial years beginning in 2026 an undertaking may use the earlier standards, the revised ones, or the earlier ones with listed reliefs, and must state in its sustainability statement which version it used. | Adopted, not yet applicable | Undertakings reporting under the CSRD, EU | Write down which ESRS version the 2026 sustainability statement follows, and keep that choice in the reporting file next to the datapoint list. | Read 21 October 2026On this site: CSRD guide |
| 10 November 2026 | California SB 253 (Health and Safety Code § 38532) and CARB's Initial Regulation | CARB's notice says the Office of Administrative Law approved the Initial Regulation on 12 October 2026, effective that day, and that it sets 10 November 2026 as the first deadline for Scope 1 and 2 emissions reports. CARB's intake platform is voluntary; reports can also go to CARB by email. Reports from 2027 onward must also cover Scope 3. | Enacted and applicable | US business entities with total annual revenue above USD 1 billion that do business in California | Keep the Scope 1 and 2 totals, the boundary and method used, and CARB's acknowledgement of receipt together in one record. |
|
| 2 December 2026 | EU AI Act as amended by the AI Omnibus, Regulation (EU) 2026/1744 | The points the Omnibus inserted into Article 5 apply from this date; the Commission describes the added prohibition as covering AI systems that generate non-consensual intimate content or child sexual abuse material. Providers of systems that generate synthetic audio, images, video or text and that were placed on the market before 2 August 2026 must meet the Article 50(2) marking duty by the same date. | Adopted, not yet applicable | Providers and deployers of AI systems on the EU market | If a QHSE tool drafts reports or images with generative AI, ask the vendor how its output is marked under Article 50(2) and from which release. |
|
| December 2026 (agenda projection) | OSHA heat injury and illness prevention rule, RIN 1218-AD39 | The current Unified Agenda on reginfo.gov, headed 2026 Regulatory Plan and Unified Agenda, lists a supplemental proposed rule for December 2026 and final action for October 2027. reginfo.gov listed no Spring 2026 edition, so no newer agenda has moved these dates. OSHA's rulemaking page shows the August 2024 proposal and the hearing record, and no supplemental proposal yet. | Proposed | Employers under federal OSHA jurisdiction, US; state heat rules apply separately | Keep heat plans, acclimatisation and water-rest-shade records that hold up under the general duty clause and any state rule; watch the Federal Register for the supplemental proposal. | Read 21 October 2026On this site: Heat stress guide |
| 30 December 2026 | EUDR, Regulation (EU) 2023/1115 as amended | The Commission gives this as the date of application for large and medium operators, and for micro and small operators that were already covered by the EU Timber Regulation. Article 38(2) of the consolidated text applies the main articles from this date, subject only to the later date in Article 38(3), so a micro or small operator established after 31 December 2024 also starts on this date. | Adopted, not yet applicable | Operators and traders placing cattle, cocoa, coffee, oil palm, rubber, soy or wood products on the EU market, or exporting them | For each consignment, link the plot geolocation, the risk assessment and the due diligence statement reference, and test that a missing plot stops the statement. |
|
| January to March 2027 | ||||||
| 1 January 2027 | Revised ESRS apply, Delegated Regulation (EU) 2026/1563 | The revised standards apply to financial years beginning on or after this date. Which undertakings report, and from when, is set separately by Directive (EU) 2026/470 and the national law that transposes it. | Adopted, not yet applicable | CSRD reporters with financial years starting on or after 1 January 2027, EU | Start collecting data for that first financial year against the revised datapoints rather than the 2023 list, beginning with the first month. | Read 21 October 2026On this site: ESRS glossary entry |
| 1 January 2027 | UK CBAM, Finance Act 2026 | HMRC's policy summary says the UK CBAM starts on this date for specified aluminium, cement, fertiliser, hydrogen and iron and steel goods imported into the UK, Northern Ireland included. The first accounting period runs to 31 December 2027. Registration opens on 1 January 2028, with 31 January 2028 as the first-year deadline, and the first return and payment are due by 31 May 2028. The registration threshold is GBP 50,000 of CBAM goods. HMRC says the details may still change, and its three force of law notices are published as drafts that take effect only when commenced on 1 January 2027. | Adopted, not yet applicable | Importers of CBAM goods into the UK | From the first 2027 import, keep commodity code, weight, customs value and embedded emissions per shipment; in the first year the backward-looking threshold test counts only from 1 January 2027. |
|
| 1 January 2027 | UK digital waste tracking, receiving sites in Scotland and Northern Ireland | GOV.UK says reporting to the Report receipt of waste service comes into effect in Northern Ireland and Scotland on this date; in England and Wales it has applied since 1 October 2026. The Scottish regulations, SSI 2026/145, come into force on 1 January 2027, and Defra's policy paper also gives January 2027 for Northern Ireland. | Adopted, not yet applicableNo Northern Ireland regulations found | Operators of permitted or licensed sites receiving waste, Scotland and Northern Ireland | Decide whether your waste software will send each load through Defra's Receipt of Waste API or whether you will use Defra's spreadsheet, and name who submits. |
|
| 12 January 2027 | EU Data Act, Regulation (EU) 2023/2854, Article 29 | From this date providers of data processing services may not charge customers for switching. Until then they may charge reduced switching fees, limited to costs directly linked to the switch. EUR-Lex lists corrigenda and a proposed amendment, COM(2025) 837, but no amending act. | Adopted, not yet applicableRegulation applies since 12 September 2025 | Providers of cloud and other data processing services and their customers, EU | Read the exit and data-return clauses of your QHSE software contract; a switch carried out from this date should carry no switching charge, while cost-based egress fees for running two services in parallel are a separate case (Article 34(2)). | Read 21 October 2026On this site: RFP template |
| 20 January 2027 | Machinery Regulation (EU) 2023/1230 | The Commission says the regulation applies on a mandatory basis from this date, replacing Directive 2006/42/EC; machinery placed on the market before then must comply with the Directive. EUR-Lex's record gives the same date. The text first published in 2023 said 14 January 2027, which a corrigendum corrected. The record also lists a pending proposal, COM(2025) 504, under which the EU declaration of conformity would be drawn up only in electronic form. | Adopted, not yet applicable | Manufacturers, importers and distributors of machinery and related products, EU | For machinery bought after this date, file the EU declaration of conformity citing Regulation (EU) 2023/1230 with the asset record, and check whether it was supplied digitally. |
|
| 31 January 2027 | ISO 9001:2026 transition, UKAS first tranche | UKAS completes its first tranche of transition decisions for certification bodies that are ready. Later decisions follow from 1 February 2027, and UKAS plans to complete all of them by 30 September 2027. | Adopted, not yet applicableUKAS schedule | UKAS-accredited certification bodies, UK | Ask whether your certification body expects to be in the first tranche before you plan a transition audit for early 2027. | Read 21 October 2026 |
| 31 January 2027 | ISO 14001:2026 transition, Global ACI | Accredited certification bodies must submit their transition declaration and supporting information by this date. Accreditation bodies were to be ready to assess by 31 October 2026 and are to complete their transition decisions by 30 April 2027. | Adopted, not yet applicable | Certification bodies accredited by Global ACI MRA signatories, worldwide | Ask your certification body for the date of its accreditation body's decision; after 30 April 2027, ask to see its accreditation scope for ISO 14001:2026. | Read 21 October 2026On this site: ISO 14001 implementation article |
| 1 February 2027 | EU CBAM, Regulation (EU) 2023/956 as amended by Regulation (EU) 2025/2083 | Member States begin selling CBAM certificates to authorised declarants on the common central platform. From 2027 a declarant must also hold, at the end of each quarter, certificates for at least 50% of the embedded emissions of goods imported since the start of that year. Certificates are priced quarterly for 2026 imports and weekly from 2027; the Commission schedules the fourth-quarter 2026 price for 4 January 2027. | Adopted, not yet applicable | Authorised CBAM declarants, required for importers above the 50-tonne threshold for CBAM goods, EU | Reconcile import volumes with the certificates on the registry account each quarter, starting with the quarter that ends on 31 March 2027. |
|
| 1 February to 30 April 2027 | OSHA annual summary, 29 CFR 1904.32 | Covered employers post the summary of the previous year's injuries and illnesses no later than 1 February and keep it posted until 30 April. Before posting, they review the 300 log for completeness, total it, and have a company executive certify the summary. | Enacted and applicableRecurs every year | US establishments required to keep OSHA injury and illness records | Close the 2026 log review in January so the certified 300A can go up by 1 February; record where and when it was posted. | Read 21 October 2026On this site: OSHA 300 glossary entry |
| 2 March 2027 | OSHA electronic submission, 29 CFR 1904.41 | Establishments in the covered groups submit last year's data through OSHA's Injury Tracking Application by 2 March: Form 300A data for establishments with 20 to 249 employees in the industries of appendix A and for all establishments with 250 or more that keep records; establishments with 100 or more employees in the industries of appendix B also submit Forms 300 and 301. OSHA's ITA page notes that the last deadline was 2 March 2026. | Enacted and applicableRecurs every year | US establishments meeting the size and industry criteria | Run OSHA's coverage check for each establishment, confirm the EIN, and keep the ITA confirmation with that year's log. | Read 21 October 2026On this site: OSHA recordkeeping article |
| 19 March 2027 | Directive (EU) 2026/470, transposition of Articles 1 to 3 | Member States must bring into force the laws needed to comply with Articles 1, 2 and 3 by this date. The deadline for Article 4, which amends the corporate sustainability due diligence directive, is 26 July 2028. | Adopted, not yet applicable | EU Member States, then the undertakings their national law brings into scope | For each country where a group entity reports, note the national act and the thresholds it adopts; scope can differ until every country has transposed. | Read 21 October 2026On this site: CSRD guide |
| April to June 2027 | ||||||
| First half of 2027 (expected) | ISO 45001, second edition (ISO/DIS 45001) | ISO's page for the draft expects the new edition to replace ISO 45001:2018 in the first half of 2027. The draft stood at stage 40.60, close of voting, with no ballot result recorded. No certificate transition has started. | Expected, not official | Organisations certified to ISO 45001:2018 and their certification bodies | Keep auditing to ISO 45001:2018 with Amendment 1:2024; our glossary entry carries the dated stage history. | Read 21 October 2026On this site: ISO 45001 glossary entry |
| 30 June 2027 | EUDR, micro and small operators | The Commission gives this as the date of application for micro and small operators not already covered by the EU Timber Regulation. Article 38(3) of the consolidated text is narrower: the later date covers operators that are natural persons or micro or small undertakings established by 31 December 2024, and never the products listed in the EU Timber Regulation's annex. | Adopted, not yet applicableOperators only; see the EUDR guide | Qualifying micro and small operators, EU | If you sell to a larger operator, agree now which geolocation and statement data you will hand over and in what format. |
|
| 30 June 2027 | ISO 9001:2026 transition, Global ACI | Accredited certification bodies submit their transition declaration and supporting information by this date. Accreditation bodies must be ready to assess against ISO 9001:2026 as soon as possible and by 31 March 2027 at the latest. | Adopted, not yet applicable | Certification bodies accredited by Global ACI MRA signatories, worldwide | Ask your certification body to confirm in writing that its declaration went in, and when it expects the decision. | Read 21 October 2026On this site: ISO 9001:2026 guide |
| July to September 2027 | ||||||
| 1 July 2027 | Limited assurance standards, Directive 2006/43/EC Article 26a(3) as replaced by Directive (EU) 2026/470 | The Commission must adopt, by delegated act, limited assurance standards for sustainability reporting no later than this date; the earlier deadline was 1 October 2026. This is the Commission's deadline to adopt standards, not a date by which companies must obtain assurance. | Adopted, not yet applicableA duty on the Commission | European Commission; then statutory auditors and assurance providers | Ask your assurance provider which standard it applies until the EU one is adopted, and which evidence it will sample. | Read 21 October 2026On this site: ESRS disclosures article |
| 26 July 2027 | CSDDD, Directive (EU) 2024/1760 as amended by Directive (EU) 2026/470 | The Commission must adopt the guidelines in Article 19(2), points (a), (d) and (e), and guidance on voluntary model contract clauses by this date; further guidelines follow by 26 July 2028. Member States transpose by 26 July 2028 and apply the rules from 26 July 2029. | Adopted, not yet applicableA duty on the Commission | European Commission; companies in scope prepare under national law later | Add the guidelines to the legal register when they appear; nothing falls due for companies on this date. | Read 21 October 2026On this site: Supply chain due diligence guide |
| 30 September 2027 | EU CBAM, first annual declaration and surrender | By 30 September each year, starting in 2027 for 2026 imports, the authorised declarant submits the CBAM declaration in the registry and surrenders certificates matching the verified embedded emissions. A shortfall triggers a penalty. | Enacted and applicableArticle 6 applies since 1 January 2026 | Authorised CBAM declarants, EU | Freeze the 2026 import list, the verified emissions per installation and the evidence for any carbon price paid abroad well before the declaration. | Read 21 October 2026On this site: CBAM glossary entry |
| 30 September 2027 | ISO 9001:2026 transition, Global ACI and UKAS | Accreditation bodies complete their transition decisions (Global ACI); UKAS plans to have completed all of its decisions. | Adopted, not yet applicable | Accreditation bodies and the certification bodies they accredit | Before booking a transition audit, check that your certification body's accreditation scope now names ISO 9001:2026. |
|
| October to December 2027 | ||||||
| October 2027 (agenda projection) | OSHA heat rule, final action, RIN 1218-AD39 | The same Unified Agenda entry lists final action for October 2027. An agenda date is a projection, not a deadline, and it follows the supplemental proposal listed for December 2026. | Proposed | Employers under federal OSHA jurisdiction, US | Re-plan once a supplemental proposal is published; any compliance dates would be set in the final rule itself. | Read 21 October 2026 |
| October 2027 (planned) | UK digital waste tracking, phase 2 | Defra's policy paper plans the service to become mandatory for waste carriers, brokers and dealers from October 2027, after a public beta from spring 2027. It expects the spreadsheet route for receiving sites to stay until at least October 2027. | Expected, not official | Waste carriers, brokers and dealers, UK | Carriers and brokers: ask your transport or waste system provider whether it is in the beta and how it will send movements. | Read 21 October 2026On this site: Waste management guide |
| 11 October 2027 | Energy Efficiency Directive (EU) 2023/1791, Article 11 | Enterprises whose average annual energy consumption over the previous three years exceeds 85 TJ must have an energy management system in place by this date. It must be certified by an independent body, though the Commission's guidance notes that the Directive gives the certificate no separate date. Enterprises above 10 TJ without one had to complete a first energy audit by 11 October 2026 and repeat it at least every four years, with an action plan. | Enacted and applicableA directive: applies through national law | Enterprises above the 85 TJ or 10 TJ thresholds, EU | Calculate the three-year average across all energy carriers and keep the workings; the result decides whether a certified system or an audit applies. |
|
| 31 October 2027 | ISO 14001:2026 transition, Global ACI | From this date new and initial accredited certifications are issued only to ISO 14001:2026. Organisations already certified to ISO 14001:2015 have until 30 April 2029 to transition. | Adopted, not yet applicable | Organisations seeking or holding accredited ISO 14001 certification, worldwide | An organisation certifying for the first time after this date should build its system and internal audits on the 2026 edition. | Read 21 October 2026 |
| 2 December 2027 | EU AI Act, high-risk systems in Annex III | Chapter III, Sections 1 to 3, apply from this date to high-risk systems classified under Article 6(2) and Annex III, which the Commission says include uses in employment and critical infrastructure. For high-risk systems in products covered by Annex I, the date is 2 August 2028. | Adopted, not yet applicable | Providers and deployers of Annex III high-risk AI systems, EU | If an AI feature ranks or assesses workers, or acts as a safety component of critical infrastructure, ask the vendor for its Annex III assessment and conformity plan. |
|
| 30 December 2027 | EUDR, products added by Delegated Regulation (EU) 2026/2102 | The added products become subject to the EUDR from this date; the Commission names soluble coffee, certain palm oil derivatives and frozen cattle tongues among them. The new Annex I entries we read in the delegated regulation carry the same date. | Adopted, not yet applicable | Operators and traders handling the added products, EU | Compare your product master data with the new customs codes in the delegated regulation before this date. | Read 21 October 2026 |
| 2027, no deadline set | California SB 253, second reporting year | CARB's notice says reports from 2027 onward must include Scope 3 emissions. CARB's programme page gave no 2027 reporting date. | Expected, not official | Entities in scope of SB 253 | Choose the Scope 3 categories you will report and the data each needs, so the work does not wait for CARB's date. |
|
Not in the table: no date applies
California SB 253's companion law, SB 261, requires biennial climate-related financial risk reports. In its enforcement advisory of 1 December 2025, CARB said a Ninth Circuit injunction pending appeal meant it would not enforce the 1 January 2026 deadline, that it would announce any alternate reporting date after the appeal, and that it would open a docket for companies choosing to report voluntarily. CARB's programme page, read on 21 October 2026, still lists that advisory and the docket, and gives no new date.
Later dates the same sources fix
- 1 and 31 January 2028: UK CBAM registration opens, and first-year registration closes. HMRC policy summary
- 16 and 31 March 2028: ISO 9001: UKAS-accredited certification bodies stop taking new applications to the previous edition (16 March); under Global ACI, new and initial accredited certificates are issued only to the 2026 edition (31 March). UKAS bulletin · Global ACI, ISO 9001
- 31 May 2028: First UK CBAM return and payment, for 2027. HMRC policy summary
- 26 July 2028: Transposition of the CSDDD amendments in Directive (EU) 2026/470. Directive (EU) 2026/470
- 2 August 2028: AI Act rules for high-risk systems in products under Annex I. Regulation (EU) 2026/1744
- 30 April 2029: End of the ISO 14001:2026 transition for certified organisations. Global ACI, ISO 14001
- 26 July 2029: Member States apply the amended CSDDD. Directive (EU) 2026/470
- 30 September 2029: End of the ISO 9001:2026 transition for certified organisations. Global ACI, ISO 9001
What we could not verify (21 October 2026)
- A title search of legislation.gov.uk for digital waste tracking returned regulations for England, Scotland and Wales but none for Northern Ireland, so the 1 January 2027 date for Northern Ireland rests on GOV.UK's software provider page and Defra's policy paper. The Scottish regulations were read.
- Global ACI's transition-requirement PDFs were not opened for this page; the ISO 9001 and ISO 14001 dates come from Global ACI's own announcements, and UKAS's dates from its bulletin.
- National transposition was not checked country by country, for Directive (EU) 2026/470 or for Article 11 of the Energy Efficiency Directive.
- The UK CBAM rows rest on HMRC's policy summary, which says details may still change. We did not read the 2026 CBAM regulations that HMRC's guidance collection lists, or the text of the draft force of law notices.
- Whether CARB received the first SB 253 reports on time, and how it will treat late ones, cannot be known before 10 November 2026.
- The OSHA heat-rule dates are agenda projections. reginfo.gov offered no Spring 2026 edition of the Unified Agenda, so a later edition could move them.
- The Data Act and Energy Efficiency Directive dates come from the acts as published, read with EUR-Lex's record of later acts. For the Data Act it lists corrigenda and one pending proposal, COM(2025) 837. For the directive it lists one amending act, Directive (EU) 2024/1788, which from 5 August 2026 deletes the natural gas billing provisions (Articles 17 and 19 and Annex VIII) and replaces Article 39(2), leaving Article 11 unchanged, and a pending proposal, COM(2026) 590, which would delete the public procurement article, Article 7.
- The record also lists Poland's action to annul the whole Energy Efficiency Directive. InfoCuria showed Case C-771/23 as pending, with Advocate General Emiliou and a delivery date of 12 November 2026; we cannot know the outcome. Bringing such an action does not by itself suspend the directive (Article 278 TFEU).
Illustrative internal planning rhythm
These are not regulatory dates. The months below suggest when reviews, audits and checks could fall in a typical year; replace them with your actual obligations, permit dates, certification schedule and internal decisions. The two OSHA lines repeat a recurring duty: 29 CFR 1904.32 requires covered establishments to review the log, certify the annual summary and post it from 1 February to 30 April, and the dated row above gives the 2027 instance.
For CSRD, the April materiality prompt is ours, not a legal deadline. Verify the entity, financial year and national implementation using the Commission's overview, opened on 21 October 2026, and the dated rows above.
RegulatoryCertificationInternalOperationalAwareness
This chart puts selected entries from the four quarterly lists on a single twelve-month axis, so you can see where the busy months fall before reading each list.
- Regulatory
- Certification
- Internal
- Operational
Text version of this diagram
- OSHA 300A summary: prepare. Month 1. Owner: Covered US establishments. Group: Regulatory.
- OSHA 300A summary: posting. Months 2 to 4. Owner: 1 February to 30 April. Group: Regulatory.
- OSHA 300 log review, annual summary. Month 12. Owner: Covered US establishments. Group: Regulatory.
- Surveillance audit preparation. Month 2. Owner: If scheduled. Group: Certification.
- ISO 14001 objectives review. Month 6. Owner: Mid-year. Group: Certification.
- Recertification audit preparation. Month 9. Owner: If on a 3-year cycle. Group: Certification.
- Management review, KPI targets. Month 1. Group: Internal.
- Annual risk assessment review. Month 10. Group: Internal.
- Budget for next year's programme. Month 11. Group: Internal.
- Legal register review. Month 12. Group: Internal.
- Emergency drills and exercises. Month 5. Group: Operational.
- Training completion check. Month 11. Owner: Year-end deadline. Group: Operational.
Dependencies
- OSHA 300A summary: posting starts only after OSHA 300A summary: prepare finishes.
Q1 — January to March
JanuaryAnnual QHSE management review and KPI target settingInternal
JanuaryCovered US establishments: prepare the prior-year OSHA 300A summary for posting February 1–April 30Regulatory
FebruaryISO surveillance audit preparation (if scheduled)Certification
FebruaryAnnual training needs assessment and plan approvalInternal
MarchQ1 internal safety audit cycle beginsInternal
MarchReview actual environmental permit expiry datesInternal
Q2 — April to June
AprilWorld Day for Safety and Health at Work (April 28)Awareness
AprilPlan any required materiality work against the entity’s reporting timetableInternal
MayEmergency preparedness drills and evacuation exercisesInternal
MayContractor safety pre-qualification for summer projectsOperational
JuneNational Safety Month activities (US)Awareness
JuneMid-year QHSE performance review and trend analysisInternal
JuneISO 14001 environmental objectives mid-year reviewCertification
Q3 — July to September
JulyReview heat controls before relevant local exposure conditionsOperational
JulyQ2 incident trend analysis and corrective action reviewInternal
AugustSample chemical inventory and SDS currency; act on changes when identifiedInternal
AugustReview health-surveillance appointments against the applicable programmeOperational
SeptemberISO recertification audit preparation (if 3-year cycle)Certification
SeptemberReview sustainability-data readiness for the applicable reporting periodInternal
Q4 — October to December
OctoberEuropean Week for Safety and Health at WorkAwareness
OctoberAnnual risk assessment review and updateInternal
NovemberBudget preparation for next year's QHSE programInternal
NovemberTraining completion verification — year-end deadlineOperational
DecemberReview the legal register and assign follow-up for changed obligationsInternal
DecemberYear-end QHSE data freeze for annual reportingInternal
DecemberCovered US establishments: review the year’s OSHA 300 log and prepare the annual summaryRegulatory
Automate Your Compliance Calendar
Test scheduled tasks, escalation and completion evidence using your own calendar. Assign responsibility for maintaining dates and confirming receipt of required submissions; software reminders do not guarantee completion.
The dated table can seed that calendar: one task for each row that applies to you, a named owner, the source link stored in the task, and a review date shortly before the milestone so a moved date is caught.
Find Compliance SoftwareChanges to this page
- 21 October 2026: retitled from QHSE Compliance Calendar 2026; added the dated table of 31 milestones from November 2026 to December 2027, each re-opened at its primary source that day, with the later dates and what could not be verified; labelled the quarterly lists as an illustrative planning rhythm.
- 27 September 2026: added the OSHA 1904.32 source check for the posting example and the note that the calendar sets no April materiality deadline.
Related Guides
More related guides
- Regulatory Change: Cority vs Enhesa vs Intelex
Software guide on regulatory change.
- US OSHA 2026: Electronic Recordkeeping and PSM Changes
Article on US OSHA recordkeeping and PSM changes.
- Compliance Fine Scenario Calculator | Your Own Assumptions
Calculator for a compliance cost scenario.
- OSHA 300 (Injury and Illness Log) — definition, software & FAQs
Definition of the OSHA 300 injury and illness log.
- OSHA NEP (National Emphasis Program) — definition, software & FAQs
Definition of an OSHA National Emphasis Program.
Frequently Asked Questions
How do I build a compliance calendar for my organization?
Start with: (1) regulatory obligations from your legal register, (2) ISO certification audit cycles, (3) internal audit schedule, (4) training due dates, and (5) permit renewal deadlines. Map these into your QHSE software's task scheduler for automated reminders.
Is 1 July 2027 the date by which companies need limited assurance on their sustainability statement?
No. Directive (EU) 2026/470 moved the Commission's own deadline for adopting limited assurance standards from 1 October 2026 to 1 July 2027. When an undertaking needs assurance, and from whom, follows from the national law that applies to it. Checked on EUR-Lex on 21 October 2026.
Do ISO 9001 and ISO 14001 certificates have to move to the 2026 editions during 2027?
Not existing certificates. Global ACI gives certified organisations until 30 April 2029 for ISO 14001 and 30 September 2029 for ISO 9001. What changes sooner is new certification: from 31 October 2027 new and initial accredited ISO 14001 certificates are issued only to the 2026 edition, and for ISO 9001 the same applies from 31 March 2028. Checked on Global ACI's announcements on 21 October 2026.
What happens if we miss a compliance deadline?
Consequences depend on the obligation, jurisdiction and facts. Confirm the applicable deadline and escalation owner with the responsible team. A reminder or dashboard does not establish that a submission was received or that the obligation was met.
How often should we update our compliance calendar?
Set review intervals according to the obligations and change risk. Assign an owner for legal updates, permit conditions and reporting dates, and revise the calendar when a relevant requirement or operating condition changes.
Can QHSE software automate compliance reminders?
Ask each vendor to demonstrate a scheduled task, reminder, overdue escalation and completion evidence in the proposed plan. Test missed notifications, a changed due date and any connection to your calendar service.