openskills.info
← Chief Data Officer career guide

Executive and leadership

Chief Data Officer timeline

How the field of a Chief Data Officer got here: the sourced milestones from every published course of this career, on one axis.

1786 to 2025

185 milestones across 20 courses

  • Core
  • Supporting
  • Specialization

The axis stretches toward recent years, where most milestones fall. Bars count milestones per year; dots are single milestones.

Before 1990

21 milestones

  1. 1786

    Playfair publishes The Commercial and Political Atlas

    William Playfair used statistical graphics to present commercial and political data. The work established charts as a form for comparing quantitative change and magnitude.

  2. 1855

    Snow's cholera map appears in the St James report

    The report included a map of cholera cases around the Broad Street pump. It made spatial distribution part of an argument about a public-health question.

  3. 1869

    Minard publishes the map of Napoleon's Russian campaign

    Charles Joseph Minard combined geographic position, army size, direction, and temperature in one statistical graphic. It remains a reference for combining several variables without treating a chart as decoration.

  4. 1924 May

    Shewhart proposes the control chart

    Walter Shewhart's Bell Laboratories memorandum introduced a chart for separating stable process variation from signals of special causes.

  6. 1950 Oct

    Turing publishes Computing Machinery and Intelligence

    Turing proposed the imitation game as a way to discuss machine intelligence. The paper framed a long-running question about machine behavior rather than a specific implementation method.

  8. 1958

    Luhn publishes A Business Intelligence System

    Hans Peter Luhn published A Business Intelligence System. It explored using technology to gather intelligence and provided an early technical framing for information that guides action.

  9. 1967

    Bertin publishes Semiology of Graphics

    Jacques Bertin described visual variables and their use in graphic representation. The work gave later visualization practice a vocabulary for marks and visual encodings.

  10. 1970

    Codd defines the relational model

    E. F. Codd published A Relational Model of Data for Large Shared Data Banks. The model established the relational structures and operations that later became the basis for analytical data storage and SQL querying.

  11. 1970

    Codd publishes the relational model

    Edgar F. Codd proposed organizing shared data as relations and separating logical structure from physical storage concerns. The work made declarative relationships and constraints central design ideas.

  12. 1971

    CODASYL publishes the DBTG report

    The Database Task Group documented the network database approach, which made record and set relationships explicit in navigational designs. It became an important contrast for later relational modeling.

  13. 1976

    Chen formalizes entity-relationship modeling

    Peter Chen published the entity-relationship model as a way to represent entities and their relationships at a conceptual level. ER notation gave modeling a domain-facing design language before physical implementation.

  15. 1977

    Tukey publishes Exploratory Data Analysis

    John Tukey presented exploratory data analysis as a way to use displays to investigate data before formal conclusions. This reinforced the distinction between exploratory and communicative views.

  16. 1979

    Oracle V2 commercializes SQL

    Relational Software, Inc. introduced Oracle V2 as the first commercial SQL implementation. Commercial relational databases made a standardized storage and query foundation available to enterprise analytical systems.

  17. 1980

    OECD Privacy Guidelines adopted

    The OECD issued privacy principles for personal-data protection and transborder data flows. The principles gave later engineering and regulatory work a shared vocabulary for collection, use, safeguards, openness, participation, and accountability.

  18. 1983

    Tufte publishes The Visual Display of Quantitative Information

    Edward Tufte collected principles and examples for displaying quantitative information. The book made graphical integrity and information-dense displays central topics in visualization design.

  19. 1986

    ANSI publishes the first SQL standard

    SQL became a published standard for relational database language. Modeling decisions about tables, keys, and constraints could increasingly be expressed across vendor implementations.

  20. 1986 Oct

    Back-propagation paper describes learning representations

    Rumelhart, Hinton, and Williams described back-propagation for networks of neuron-like units. The method adjusted connection weights to reduce output error.

  21. 1989

    Business intelligence becomes a decision-support umbrella term

    Howard Dresner used business intelligence for concepts and methods that improve business decisions with fact-based support systems. The term brought data warehousing, reporting, and analysis into a recognizable practice area.

1990s

15 milestones

  1. 1990

    Codd publishes The Relational Model for Database Management

    Codd's later book brought relational concepts and their interpretation together for database management practice. It reinforced the distinction between the model's meaning and a particular storage implementation.

  2. 1992

    Building the Data Warehouse frames the discipline

    Bill Inmon's book established a named body of warehouse architecture and historical decision-support practice.

  3. 1992 Jan

    Balanced Scorecard introduced in Harvard Business Review

    Kaplan and Norton presented a framework that balanced financial measures with customer, internal-process, and learning perspectives. Executive reporting gained a broader structure than financial results alone.

  4. 1993

    Armstrong case exposes federal electronic-records scale

    The electronic records produced for the Executive Office of the President lawsuit sharply increased the volume NARA had to handle. It demonstrated that archival custody of digital records could not be treated as an edge case.

  6. 1995 Oct

    EU Data Protection Directive adopted

    Directive 95/46/EC established a European legal framework for personal-data processing. It made system processing practices a sustained regulatory concern rather than a policy-only topic.

  8. 1996

    Internet Archive begins preserving the Web

    The Internet Archive began collecting Web material, creating a prominent public example of preserving content whose original environment changes continuously. Web archiving made capture, storage, and later access a recurring operational problem.

  9. 1996

    The Data Warehouse Toolkit advances dimensional modeling

    Ralph Kimball published The Data Warehouse Toolkit. Its dimensional-design techniques gave practitioners a practical structure for facts, dimensions, grain, and query-centered decision support.

  10. 1996

    The Data Warehouse Toolkit popularizes dimensional modeling

    Ralph Kimball's toolkit put fact tables, dimensions, and star schemas at the center of a practical modeling approach.

  11. 1996 Aug 21

    HIPAA becomes United States law

    HIPAA established a statutory basis for standards governing electronic health information. Its later Security Rule made information-system activity controls relevant to databases containing electronic protected health information.

  12. 1997

    Kimball describes dimensional modeling for warehouses

    Ralph Kimball contrasted entity-relationship models for transaction capture with dimensional models for end-user analysis. Facts, dimensions, and grain became a practical vocabulary for analytical design.

  15. 1999 May

    OAIS reference model is released

    The Open Archival Information System reference model supplied a shared vocabulary for long-term digital archives. Its model separated functions such as ingest, archival storage, data management, preservation planning, and access.

2000s

28 milestones

  1. 2000

    Data Vault modeling is released publicly

    Dan Linstedt released Data Vault as another approach to historical, auditable integration from changing source systems.

  3. 2001

    Vontu founded to build policy-based leak prevention

    Vontu launched in San Francisco to detect and block disclosure of sensitive data by policy. Its product was later described as the first to combine endpoint and network coverage for data at rest, in motion, and in use, the three-state framing DLP still uses.

  4. 2002

    OAIS becomes ISO 14721

    The OAIS reference model was adopted as ISO 14721, taking a space-data model into libraries, archives, government agencies, and private organizations. It made lifecycle functions and representation information common design references.

  5. 2002 Jul 30

    Sarbanes-Oxley Act enacted

    The Act strengthened corporate responsibility and financial disclosure requirements. Database change and access evidence became part of how many organizations support internal-control assessments over financial reporting systems.

  6. 2003

    Google File System paper published

    Google documented a distributed file system designed for large data-intensive applications. The paper made storage behavior a first-class concern in large-scale data processing designs.

  8. 2003

    Tableau turns visual querying into a commercial BI product

    Tableau was founded to turn the Polaris research prototype into Tableau Desktop. Its VizQL approach translated drag-and-drop visual interactions into data queries, widening access to interactive analysis.

  9. 2003 Feb 20

    HIPAA Security Rule finalized

    HHS finalized technical safeguards that include audit controls. The rule requires mechanisms to record and examine activity in systems that contain or use electronic protected health information.

  10. 2004

    MapReduce paper published

    Google described a programming model and implementation for processing large datasets on clusters. It separated map and reduce work into a reusable distributed processing pattern.

  11. 2005

    PREMIS Data Dictionary 1.0 publishes

    PREMIS provided a practical preservation-metadata data model covering intellectual entities, objects, events, rights, and agents. Archival systems could use this vocabulary to record the evidence surrounding content and preservation actions.

  12. 2005

    Wilkinson publishes The Grammar of Graphics

    Leland Wilkinson described graphics as composable elements rather than a fixed menu of chart types. This model informed declarative charting systems that separate data, transformations, marks, scales, and guides.

  13. 2005 Apr 20

    HIPAA Security Rule compliance begins

    The main compliance date arrived for covered entities, with small health plans receiving one additional year. Audit controls moved from a published requirement into an operating obligation for covered systems.

  14. 2006

    Bigtable paper published

    Google described a distributed storage system for structured data. The design connected large-scale storage with tables, schemas, and application-facing access patterns.

  15. 2006

    Google publishes Bigtable

    Bigtable described a distributed system for structured data organized around a sparse, multidimensional sorted map. It showed how large-scale storage designs could use a data model unlike conventional relational tables.

  16. 2006

    Information Dashboard Design published

    Stephen Few's book formalized dashboard design around rapid monitoring and effective visual communication. It gave practitioners a focused reference for reducing clutter and strengthening comparisons.

  17. 2006 Mar 14

    Amazon S3 launches

    Amazon S3 made web-scale object storage available through an API. Object storage later became a common durable layer beneath cloud data lakes.

  18. 2006 Sep

    NIST SP 800-92 finalized

    NIST published enterprise guidance for building log-management infrastructure and processes. Database audit records could now be placed in a broader collection, analysis, storage, and operational model.

  19. 2007

    Amazon publishes Dynamo

    Dynamo described a highly available key-value store built around partitioning and replication. Its design highlighted how access patterns and failure behavior shape data structure choices in distributed systems.

  20. 2007 Nov

    Symantec acquires Vontu for 350 million dollars

    Symantec announced the purchase of Vontu for 350 million dollars and completed it at the end of the month. The deal moved DLP from a niche category into the portfolios of mainstream enterprise security vendors.

  21. 2008 Jan

    Hadoop became an Apache top-level project

    Apache created the Hadoop Project Management Committee when Hadoop moved out of Lucene. Hadoop became an independently governed open-source platform for distributed storage and processing.

  22. 2008 Jan

    Hadoop becomes an Apache top-level project

    Apache Hadoop moved from Lucene to become an Apache top-level project. Its distributed storage and batch-processing ecosystem shaped early large-scale data-lake practice.

  23. 2008 Aug

    McAfee completes its Reconnex acquisition

    McAfee closed its 46 million dollar acquisition of Reconnex, a network DLP and data-at-rest discovery vendor, and folded the technology into ePolicy Orchestrator. Consolidation ran in parallel, with EMC buying Tablus and Websense buying PortAuthority.

  24. 2008 Dec

    Isolation Forest reframes anomaly detection

    Isolation Forest isolated anomalies with random feature splits rather than first constructing a profile of normal observations.

  25. 2008 Dec 11

    WCAG 2.0 becomes a W3C Recommendation

    WCAG 2.0 established durable web accessibility requirements that also apply to browser-delivered reports, controls, charts, and status cues.

  26. 2009

    Privacy by Design principles published

    Ontario's Privacy by Design framework set out seven foundational principles, including proactive design and privacy as the default setting. It helped frame privacy as something built into systems and business practices.

  28. 2009 Aug

    NIST SP 800-53 Revision 3 published

    Revision 3 included Audit and Accountability as a security-control family in a catalog for federal information systems and organizations. It reinforced the separation of event generation, review, protection, and related control activities.

2010s

76 milestones

  1. 2010

    Dremel demonstrates interactive analysis at web scale

    Google's Dremel paper described a distributed system for interactive analysis of nested data, influencing later large-scale SQL services.

  2. 2010 Oct

    Library of Congress forms the NDSA

    The National Digital Stewardship Alliance brought institutions together around preserving and providing access to selected digital content with enduring value. It connected stewardship work to standards, preservation infrastructure, and technology research.

  3. 2010 Nov 4

    Commission outlines a comprehensive reform

    The Commission presented its comprehensive approach to personal-data protection, beginning the policy path toward a new regulation.

  4. 2011

    BigQuery becomes generally available

    BigQuery made a serverless cloud warehouse available, moving capacity management away from the team submitting analytical SQL.

  5. 2011 Feb

    D3 version 1.0 is released

    D3 made data-driven document manipulation available as a web visualization library. It enabled authors to bind data to web standards while retaining direct control over marks and interaction.

  6. 2011 Dec

    ISO/IEC 29100 privacy framework published

    ISO/IEC 29100 provided a privacy framework and privacy principles for personally identifiable information processing. It supplied a standards-oriented reference for integrating privacy into information and communication technology systems.

  7. 2012

    AlexNet wins the ImageNet classification competition

    A deep convolutional network achieved a top-five error rate of 15.3 percent in ILSVRC-2012. The result demonstrated the value of large labeled datasets, GPUs, and deep neural networks for image classification.

  8. 2012

    ISO publishes the revised OAIS reference model

    ISO 14721:2012 updated the OAIS reference model. The revision retained the model's role as a common framework for systems responsible for long-term information preservation and access.

  10. 2012 Mar

    FTC privacy report calls for privacy by design

    The FTC's final report made privacy by design, simplified choice, and greater transparency central recommendations. It connected privacy expectations to product development and data practices.

  11. 2013

    Exchange Server 2013 ships built-in DLP policies

    Microsoft added DLP policy templates, transport-rule conditions, and policy tips to Exchange Server 2013. Content inspection for email moved into the mail server itself rather than a separate appliance or gateway.

  12. 2013

    NDSA Levels offers staged preservation targets

    The NDSA Levels of Digital Preservation introduced an assessment-oriented set of targets for managing preservation risks. It helped organizations prioritize operational capabilities rather than treating preservation as a single storage purchase.

  13. 2013

    Spark moved to Apache

    Spark moved to the Apache Software Foundation after its early open-source development. This placed the processing engine in the same open-source governance ecosystem as many data infrastructure projects.

  14. 2013 Feb

    Amazon Redshift becomes broadly available

    Redshift made a managed, petabyte-scale AWS warehouse broadly available for SQL analysis through existing BI tools.

  15. 2013 Apr

    PROV-O becomes a W3C Recommendation

    PROV-O standardized a vocabulary for representing provenance. It gave governance implementations a common model for entities, activities, and agents behind data.

  16. 2013 Jul 8

    Microsoft details Power BI for Office 365

    Microsoft described browser and mobile access to reports built from Excel-based modeling and visualization components. Cloud distribution became part of the mainstream BI design path.

  17. 2014

    DCAT is standardized by W3C

    The first Data Catalog Vocabulary recommendation established a shared vocabulary for dataset and data-service metadata. Catalog interoperability became a standards concern rather than a local schema choice.

  18. 2014 Jan

    DCAT becomes a W3C Recommendation

    The first Data Catalog Vocabulary Recommendation standardized how catalogs describe datasets for Web publishing and aggregation.

  19. 2014 May

    Spark 1.0 released

    Apache training material records Spark 1.0 in May 2014. A production-ready Spark release broadened the practical choice of engines for batch and stream-oriented workloads.

  20. 2014 Oct

    Snowflake describes a warehouse built for the cloud

    Snowflake documented a cloud-built warehouse architecture with independently sized virtual warehouses for different workloads.

  21. 2015

    Vega presents a declarative visualization grammar

    Vega defined a JSON-based grammar for describing visual appearance and interactive behavior. It made data, transformations, scales, guides, and marks explicit parts of a specification.

  22. 2015 Apr

    Office 365 DLP extends to SharePoint Online and OneDrive

    Microsoft began previewing DLP for SharePoint Online and OneDrive for Business, adding policy evaluation to cloud content stores. Enforcement started to follow data into hosted repositories, not just mail flow.

  24. 2015 Jul 24

    The new Power BI service and Desktop reach general availability

    Microsoft released the new Power BI service and Power BI Desktop. The release combined cloud-hosted distribution with a desktop authoring tool for reports and dashboards.

  25. 2015 Jul 24

    The new Power BI service reaches general availability

    Microsoft released the redesigned service and Power BI Desktop for general use. Reports, dashboards, semantic models, and custom visuals formed a broadly available reporting stack.

  26. 2015 Sep

    DLP rolls out in OneDrive, SharePoint Online, and Office 2016

    Microsoft began the general rollout of DLP across OneDrive for Business, SharePoint Online, and the Office 2016 desktop apps. Policy tips inside the editing applications brought data-in-use feedback to end users.

  27. 2016

    Uber develops Hudi

    Uber developed Hudi to address inefficient snapshot-and-reload processing and to support incremental updates in its data lake.

  28. 2016 Jan

    AlphaGo combines deep networks with search

    The AlphaGo paper described policy and value networks trained with supervised and reinforcement learning, combined with search. It showed a system that joined learned models with an explicit decision procedure.

  29. 2016 Feb

    Apache Beam entered incubation

    Google and partners moved Cloud Dataflow SDKs and runners into the Apache Beam Incubator. The project centered one programming model across batch and streaming pipelines.

  30. 2016 Feb

    LIME proposes local surrogate explanations

    LIME introduced an approach that learns an interpretable model around an individual prediction. It made model-agnostic local explanation a practical pattern for classifiers.

  33. 2016 Apr

    GDPR adopted with design and default duties

    The GDPR was adopted with Article 25 requiring data protection by design and by default. It made technical and organizational measures part of the legal expectation for processing systems.

  34. 2016 Apr

    GDPR is adopted

    Regulation EU 2016/679 set a common European framework for personal-data processing. Governance programs needed to connect processing decisions to accountable roles and controls.

  35. 2016 Apr 27

    General Data Protection Regulation adopted

    The European Parliament and Council adopted Regulation 2016 slash 679. Its accountability and security framework increased the need to demonstrate controlled processing of personal data, including activity in database systems.

  38. 2016 Jul

    dbt development begins

    dbt development began in 2016, bringing versioned SQL modeling, testing, and documentation practices into warehouse transformation.

  39. 2016 Oct

    US National AI Research and Development Strategic Plan published

    The plan set a national strategic framing for AI research and development priorities. It made AI planning a cross-cutting policy and investment concern rather than only a technical research topic.

  40. 2016 Dec

    Apache Beam graduated as a top-level project

    Apache Beam graduated from incubation in December 2016. The project established a community-governed model for engine-independent pipeline definitions.

  41. 2017

    Delta Lake reaches Databricks customers

    Databricks began providing Delta Lake to customers as an ACID table-storage layer over cloud object stores. Its design used table metadata to identify the objects in a table.

  42. 2017

    Gartner publishes its last Enterprise DLP Magic Quadrant

    Gartner issued its final Magic Quadrant for Enterprise Data Loss Prevention and replaced it the next year with a Market Guide. The change reflected a market Gartner viewed as mature and increasingly delivered inside email, endpoint, and cloud-access platforms.

  43. 2017

    Uber open-sources Hudi

    Uber released Hudi as open source after developing it for incremental data processing. The project introduced a table-oriented approach to lake data before the lakehouse label became widespread.

  44. 2017

    Vega-Lite research paper is published

    Vega-Lite introduced a higher-level grammar for interactive graphics. It showed how encoding rules and composition can express layered and multi-view displays concisely.

  45. 2017 May

    Apache Beam 2.0 became the first stable release

    Apache Beam published version 2.0.0 as its first stable release. The release signaled API stability for teams building portable batch and streaming pipelines.

  46. 2017 May

    SHAP unifies additive feature attribution

    The SHAP paper defined a unified additive feature-attribution framework based on Shapley values. It gave practitioners a common vocabulary for assigning feature contributions to one prediction.

  48. 2017 Jun

    Integrated Gradients introduces an axiomatic method

    Integrated Gradients proposed a gradient-based attribution method for deep networks. It made a model-specific route available for explaining differentiable models.

  49. 2017 Jun

    Transformer architecture is proposed

    Attention Is All You Need proposed a Transformer architecture based on attention mechanisms rather than recurrence or convolution. The paper reported machine-translation results and a more parallelizable training design.

  50. 2017 Jul

    DARPA launches its Explainable AI program

    DARPA's program organized research around explainable models and human-computer interfaces for explanation. It highlighted the trade-off between learning performance and explanation.

  51. 2017 Aug

    AWS Glue Data Catalog generally available

    AWS Glue GA included a managed Data Catalog that crawlers populate for search, ETL, and AWS analytics services.

  52. 2017 Sep

    NISTIR 8062 defines privacy engineering objectives

    NISTIR 8062 introduced predictability, manageability, and disassociability together with a privacy-risk model based on problematic data actions. It gave engineers a way to translate privacy concerns into system objectives.

  57. 2018 Jun 5

    WCAG 2.1 becomes a W3C Recommendation

    WCAG 2.1 added guidance addressing more mobile, low-vision, and cognitive accessibility needs. Dashboard testing expanded beyond a desktop mouse-and-screen workflow.

  58. 2018 Jul

    The GDPR becomes applicable

    The General Data Protection Regulation became applicable across the European Union. Its provisions on automated decision-making made transparency and human safeguards an operational concern for affected decisions.

  59. 2018 Aug

    Large-scale declarative data verification is demonstrated

    A production-oriented system translated reusable data quality constraints into aggregate queries and supported incremental validation.

  60. 2018 Sep

    BagIt is published as RFC 8493

    RFC 8493 standardized the BagIt packaging format for transferring arbitrary digital content with payload manifests and tag files. It gave archive transfers a documented, checksum-oriented package convention.

  61. 2018 Sep

    Google releases the What-If Tool

    The What-If Tool made visual model inspection and counterfactual-style exploration accessible in TensorBoard. It brought inspection of individual predictions and dataset slices into a developer workflow.

  63. 2018 Oct 23

    EU data-protection rules for institutions adopted

    Parliament and Council adopted the EUDPR, extending the reformed framework to EU institutions, bodies, offices, and agencies.

  65. 2019

    NDSA Levels 2.0 updates its preservation matrix

    The revised Levels framework reorganized preservation assessment around storage, file formats, information security, and metadata. It kept maturity assessment tied to observable operational practices.

  66. 2019 Jan

    Hudi enters the Apache Incubator

    Uber submitted Hudi to the Apache Incubator. The move placed a transactional data-lake project under Apache community governance.

  67. 2019 Apr

    Delta Lake is announced as open source

    Databricks announced the Delta Lake open-source project. The table layer became available outside its original managed platform context.

  68. 2019 May

    OECD AI Principles adopted

    OECD members adopted principles for innovative and trustworthy AI. The principles gave organizations a widely recognized reference for accountability, transparency, robustness, safety, and human-rights considerations.

  69. 2019 May

    OECD countries adopt the AI Principles

    OECD countries adopted the Recommendation on Artificial Intelligence. The principles provided an intergovernmental reference point for trustworthy-AI policy and governance work.

  70. 2019 Jun

    Federal Data Strategy framework is issued

    The United States issued a government-wide framework for managing federal data. It placed ethical governance, accountability, and implementation practices in a long-term strategy.

  72. 2019 Sep

    AI Explainability 360 documents a toolkit

    IBM researchers documented AI Explainability 360 as an open-source toolkit with multiple explanation algorithms and metrics. The toolkit helped turn a growing research catalog into reusable evaluation components.

  73. 2019 Sep

    Federal agencies establish Data Governance Bodies

    The Federal Data Strategy required inclusive and empowered governance bodies. Authority, chartering, and senior participation became concrete operating requirements.

  75. 2019 Nov

    Azure Synapse unifies warehouse and big-data analytics

    Microsoft introduced Azure Synapse as the next evolution of Azure SQL Data Warehouse, combining warehouse and broader analytics workloads.

  76. 2019 Nov

    Broadcom acquires Symantec's enterprise security business

    Broadcom completed its 10.7 billion dollar purchase of Symantec's enterprise security business, including Symantec DLP. The former parent renamed itself NortonLifeLock and kept the consumer products.

2020s

45 milestones

  1. 2020 Jan

    NIST Privacy Framework 1.0 released

    NIST released a voluntary privacy risk-management framework with a Core and Profiles. Teams could express current and target privacy outcomes and prioritize gaps in a form that fits enterprise risk management.

  2. 2020 Jan

    NIST publishes Privacy Framework version 1.0

    NIST released a privacy-risk framework for enterprise risk management. It connected data-processing decisions with privacy risk.

  3. 2020 Feb

    DCAT 2 becomes a W3C Recommendation

    DCAT 2 revised the catalog vocabulary after implementation experience and new use cases. It extended the standards path for metadata exchange.

  4. 2020 Feb

    DCAT 2 Recommendation published

    DCAT 2 expanded the vocabulary for data services and broader catalog resource patterns beyond the original dataset-focused model.

  5. 2020 Feb

    European Commission AI white paper published

    The white paper set out a European approach organized around excellence and trust. It connected AI uptake with a future policy framework for risk and accountability.

  6. 2020 Feb 19

    European Commission publishes its AI White Paper

    The White Paper set out a European approach to excellence and trust in AI. It put options for a legislative framework for trustworthy AI into the policy path that led to the AI Act.

  8. 2020 Jun 4

    Apache Hudi becomes a top-level project

    The Apache Software Foundation announced Hudi as a top-level project. Its maturation reflected sustained adoption of transactional capabilities over data-lake storage.

  9. 2020 Jun 24

    Commission publishes first GDPR application report

    The Commission published its first report on applying the GDPR, shifting attention from preparation to implementation experience.

  10. 2020 Sep

    Microsoft announces Endpoint DLP at Ignite

    Microsoft added native endpoint enforcement to Microsoft 365 DLP, covering USB copy, network shares, cloud uploads, printing, and clipboard on Windows 10 without a separate agent. Endpoint coverage became part of the same policy set as email and SharePoint.

  11. 2020 Dec

    The UK Government Data Quality Framework is published

    The framework organized operational data quality around completeness, uniqueness, consistency, timeliness, validity, accuracy, and user needs.

  12. 2021 Jan

    The lakehouse architecture is published at CIDR

    The CIDR paper defined a lakehouse as data-lake files plus a metadata, caching, and indexing layer. It connected transaction and versioning mechanisms with SQL, data-science, and machine-learning workloads.

  14. 2021 Jul

    NIST requests input for an AI Risk Management Framework

    NIST opened a request for information that began a public development process for an AI risk framework. The process focused organizational risk management on design, development, use, and evaluation of AI systems.

  16. 2021 Sep

    NIST publishes four principles of explainable AI

    NISTIR 8312 set out Explanation, Meaningful, Explanation Accuracy, and Knowledge Limits. It separated the quality of an explanation from the accuracy of the model decision.

  17. 2021 Oct

    Fortra acquires Digital Guardian

    HelpSystems, later renamed Fortra, acquired Digital Guardian, one of the last large independent enterprise DLP vendors. Standalone DLP suites kept being absorbed into broader data-security portfolios.

  18. 2021 Dec

    Databricks SQL reaches general availability

    Databricks SQL reached general availability, placing governed SQL analytics within a lakehouse platform alongside other workloads.

  19. 2021 Dec

    NIST publishes the AI RMF concept paper

    The concept paper made the proposed framework available for public review. It established the early structure that later drafts and workshops refined.

  20. 2022 Mar

    NIST releases the first AI RMF draft

    The first complete draft moved the framework from concept into a reviewable operating model. Organizations could begin relating AI governance work to a common risk-management structure.

  21. 2022 Mar 31

    PCI DSS version 4.0 published

    PCI Security Standards Council published version 4.0 with logging and monitoring retained as a core requirement area. The revision continued the operational focus on defining, protecting, reviewing, and responding to security events affecting account data environments.

  23. 2022 Aug

    ISO 31700 privacy by design standard published

    ISO 31700 established consumer-protection privacy-by-design requirements and guidance for consumer goods and services. It extended the design focus into organizational processes and product development.

  26. 2022 Nov 30

    ChatGPT launches as a research preview

    OpenAI introduced ChatGPT as a conversational model in a public research preview. The release brought a large-language-model interface to a broad public audience.

  27. 2023 Jan

    NIST releases AI RMF 1.0

    NIST released the voluntary framework and companion playbook. Govern, Map, Measure, and Manage became a practical lifecycle structure for organizing AI risk work.

  30. 2023 Jan 26

    NIST releases AI RMF 1.0

    NIST released the voluntary AI Risk Management Framework 1.0. Its Govern, Map, Measure, and Manage functions gave organizations a repeatable structure for lifecycle risk work.

  31. 2023 Oct 5

    WCAG 2.2 becomes a W3C Recommendation

    WCAG 2.2 added success criteria while retaining backward compatibility with earlier WCAG 2 versions. Report and dashboard teams gained a new current accessibility target for web delivery.

  32. 2023 Dec

    EU co-legislators reach political agreement on the AI Act

    The European Parliament and Council reached political agreement on the AI Act. Organizations could begin turning the emerging requirements into inventories, controls, and evidence plans before final adoption.

  33. 2023 Dec

    ISO/IEC 42001 is published

    The standard defined requirements for an AI management system. It placed AI risks and opportunities within a continual-improvement system of organizational policies and processes.

  35. 2024 Mar

    European Parliament adopts the AI Act at first reading

    The Parliament adopted the final legislative text at first reading. The Act established a role- and risk-based regulatory approach for AI systems in the European Union.

  36. 2024 Mar 13

    European Parliament adopts the AI Act

    Parliament adopted the Artificial Intelligence Act. The legislative text established the risk-based framework and obligations that governance programs would need to operationalize.

  39. 2024 Aug

    EU AI Act enters into force

    The AI Act entered into force on 1 August 2024. Organizations developing or deploying relevant systems need to map obligations to their role and the system's risk context.

  40. 2024 Aug

    The EU AI Act enters into force

    Regulation (EU) 2024/1689 entered into force and established a risk-based framework for AI systems. Its transparency and information requirements made explainability relevant to high-risk-system operations.

  44. 2025 Feb 2

    Prohibited-practices and AI-literacy obligations begin to apply

    The first AI Act application date brought prohibited AI practices and AI-literacy obligations into application. Governance teams needed an inventory capable of identifying affected uses.

  45. 2025 Aug 2

    GPAI-model obligations begin to apply

    Governance rules and obligations for general-purpose AI models became applicable. Organizations using or providing these models needed evidence appropriate to their role in the value chain.