Regulatory and protocol clock

1 Jan 2030 in 3 years Upcoming

FuelEU Maritime: GHG intensity limit tightens to 6%

6% reduction period 2030 to 2034 begins · Regulation (EU) 2023/1805 Article 4 · European Commission and EMSA

Maritime EU Law

From 1 January 2030 the yearly average GHG intensity of energy used on board must be at least 6% below the 2020 reference value, up from 2% in 2025 to 2029. It stays at 6% until 2034, then 14.5% from 2035, 31% from 2040, 62% from 2045 and 80% from 2050. Ships on conventional fuel will need biofuel blends, e-fuels, LNG with low methane slip or pooling to stay in balance. The Commission has to review the regulation by 31 December 2028.

EUR-Lex · European Commission (DG MOVE)

What to do (4 items)

• Model each ship's compliance balance at the 6% limit with current fuels
• Secure supply contracts for low-GHG fuels or pooling partners before 2030
• Check the reward factor for renewable fuels of non-biological origin (RFNBO) in the fleet plan
• Keep the 2035 step to 14.5% in newbuild and retrofit decisions

Open this entry to tick items off

1 Jan 2030 in 3 years Upcoming

FuelEU: shore power for container and passenger ships at berth

Onshore power supply obligation at berth · Regulation (EU) 2023/1805 Article 6; Regulation (EU) 2023/1804 (AFIR) Article 9 · European Commission and Member State port authorities

MaritimeInfrastructure EU Law

From 1 January 2030 container ships and passenger ships above 5,000 GT moored at the quayside in TEN-T ports covered by AFIR must connect to onshore power supply, or use a zero-emission technology, for all electricity needs at berth, with limited exceptions such as stays under two hours. From 1 January 2035 the same applies in any EU port where OPS is available. Ports must have the shore-side installations ready under AFIR by the same date.

EUR-Lex · European Commission (DG MOVE)

What to do (4 items)

• List container and passenger ships that call at TEN-T core and comprehensive ports
• Fit or retrofit ship-side OPS connections (IEC/IEEE 80005 series) before 2030
• Ports: plan OPS capacity for the berths that meet the AFIR call thresholds
• Set up the procedure to record OPS use and exceptions in the FuelEU monitoring data

Open this entry to tick items off

26 Jun 2030 in 4 years Upcoming

Hong Kong Convention: IHM deadline for existing ships

Existing ships must hold a verified IHM · Hong Kong Convention, regulation 5 (Inventory of Hazardous Materials) · IMO and flag State administrations

Maritime International Law

Existing ships of 500 GT and above on international voyages under a Party's flag must comply with the Inventory of Hazardous Materials requirement within five years of the Convention's entry into force, so by 26 June 2030, or before recycling if that comes first. The IHM Part I (materials in structure and equipment) has to be prepared with sampling, verified by the flag State or a recognised organisation, and covered by an International Certificate on IHM. Ships without it face detention or refusal in Party ports and cannot be recycled at an authorised yard.

IMO HKC FAQ · IMO

What to do (4 items)

• Schedule IHM preparation across the fleet so surveys finish before 26 June 2030
• Book the initial survey and the International Certificate on IHM with the flag or recognised organisation
• Appoint a person responsible for maintaining each ship's IHM and the supporting material declarations
• Check whether ships expected to be sold for recycling before 2030 need the IHM sooner

Open this entry to tick items off

2030 in 4 years Upcoming

NIST: quantum-vulnerable algorithms deprecated after 2030

112-bit security RSA and ECC deprecated · NIST IR 8547 (draft, November 2024) · NIST

MaritimeIndustryInfrastructure United States Standard or protocol

NIST's transition plan deprecates RSA and elliptic-curve algorithms at 112-bit security after 2030 and disallows all quantum-vulnerable public-key algorithms after 2035. The post-quantum standards FIPS 203, 204 and 205 were published in August 2024. US federal systems and their suppliers follow this timeline, and it is becoming the reference for vendors worldwide.

NIST Date reported, not yet checked against the official text.

What to do (3 items)

• Find where RSA-2048 and P-256 are used for signing and key exchange
• Ask vendors of firmware signing and VPN products when they support ML-KEM and ML-DSA
• Plan certificate authority and code signing changes ahead of 2030

Open this entry to tick items off

2030 in 4 years Upcoming

Post-quantum cryptography: high-risk systems migrated

High-risk use cases migrated · Coordinated implementation roadmap of 23 June 2025 · European Commission, NIS Cooperation Group

MaritimeIndustryInfrastructure EU Guidance

The roadmap's second milestone: high-risk use cases, meaning systems whose data must stay confidential for many years or whose integrity is critical, should be running post-quantum or hybrid cryptography by the end of 2030. Long-lived infrastructure such as substation gear, vessel systems and industrial controllers is the hard part because it is bought years ahead.

European Commission Date reported, not yet checked against the official text.

What to do (4 items)

• Decide which of your systems count as high-risk for long-term confidentiality or integrity
• Put post-quantum readiness into purchasing requirements for equipment bought from now on
• Plan certificate and key renewals so a swap to new algorithms fits in
• Test hybrid TLS and VPN options with your suppliers

Open this entry to tick items off

2035 in 9 years Upcoming

NIST: quantum-vulnerable algorithms disallowed after 2035

Quantum-vulnerable public-key algorithms disallowed · NIST IR 8547 (draft, November 2024) · NIST

MaritimeIndustryInfrastructure United States Standard or protocol

The end point of the NIST transition: after 2035 quantum-vulnerable public-key algorithms are disallowed for US federal use. Equipment bought now for a 10 to 15 year service life will still be running then, so the algorithm agility of what you buy today decides how painful this is.

NIST Date reported, not yet checked against the official text.

What to do (3 items)

• Add algorithm agility to purchasing requirements for long-lived equipment
• Keep a cryptography inventory current so the migration can be planned
• Retire hardware that cannot be updated well before 2035

Open this entry to tick items off

11 Oct 2026 10 days ago Already applies

Energy Efficiency Directive: energy audits for consumers above 10 TJ

Energy audit deadline · Directive (EU) 2023/1791, Article 11 · European Commission

IndustryInfrastructureMaritime EU Law

The recast Energy Efficiency Directive ties audit duties to consumption instead of company size. Enterprises with an average annual consumption above 10 TJ over the previous three years must carry out an energy audit by 11 October 2026 and every four years after. Those above 85 TJ must run a certified energy management system by 11 October 2027 instead. The national law sets the details.

EUR-Lex · European Commission Date reported, not yet checked against the official text.

What to do (4 items)

• Add up energy use across sites, vessels and vehicles for the last three years
• If above 10 TJ, book a qualified auditor before October 2026
• If above 85 TJ, start an ISO 50001 or equivalent energy management system
• Keep the audit report; the national authority can ask for it

Open this entry to tick items off

Oct 2026 20 days ago Already applies

Python 3.10 end of life

End of security updates · Python release schedule · Python Software Foundation

IndustryInfrastructure International Standard or protocol

Python 3.10 stops receiving security fixes in October 2026; Python 3.9 stopped in October 2025. Scripts and tools that run on plant, monitoring and integration servers often pin an old interpreter.

Python Developer's Guide

What to do (3 items)

• Find servers and tools running Python 3.9 or 3.10
• Test the code on Python 3.12 or 3.13 and upgrade
• Pin dependencies so the upgrade is repeatable

Open this entry to tick items off

30 Sep 2026 21 days ago Already applies

EU ETS shipping: surrender 70% of 2025 emissions

Surrender deadline for 2025 emissions · Directive 2003/87/EC as amended by Directive (EU) 2023/959 · European Commission and Member State administering authorities

Maritime EU Law

Shipping companies with ships of 5,000 GT and above calling at EU/EEA ports must surrender EU allowances for their verified 2025 emissions by 30 September 2026. The phase-in means 70% of 2025 emissions; 40% applied to 2024 and 100% applies from 2026 emissions. Half of the emissions on voyages to or from non-EU ports count, and all emissions between EU ports and at berth. Missing the deadline costs EUR 100 per tonne on top of the surrender.

European Commission (DG CLIMA) · EUR-Lex

What to do (5 items)

• Confirm the verified 2025 emissions report was filed in THETIS-MRV by 31 March 2026
• Move enough EUAs into the maritime operator holding account in the Union Registry before 30 September
• Surrender 70% of verified 2025 emissions in the registry and keep the confirmation
• Agree in charter parties who pays for allowances (the Directive gives a right to recover costs from the operator)
• Prepare for 100% surrender of 2026 emissions by 30 September 2027

Open this entry to tick items off

12 Sep 2026 39 days ago Already applies

Data Act: data access by design for new products

Design obligation for products placed on the market after this date · Regulation (EU) 2023/2854, Article 3(1) · European Commission

IndustryMaritime EU Law

Connected products placed on the market after 12 September 2026 must be designed so that the product data is accessible to the user by default, directly where relevant and free of charge. This pushes the Data Act into product design rather than only into contracts.

EUR-Lex · European Commission Date reported, not yet checked against the official text.

What to do (4 items)

• Add data access to the requirements of any product now in development
• Decide the access route: on-device, through an app, or via an API
• Document what data is generated and how a user gets it, before launch
• Check that access does not expose trade secrets you need to protect

Open this entry to tick items off

11 Sep 2026 40 days ago Already applies

Cyber Resilience Act: vulnerability and incident reporting starts

Reporting obligations apply · Regulation (EU) 2024/2847 (CRA), Article 14 · European Commission

IndustryInfrastructure EU Law

From 11 September 2026 a manufacturer of a product with digital elements must report an actively exploited vulnerability and any severe incident affecting the product's security to ENISA and the national CSIRT: early warning within 24 hours, notification within 72 hours, final report within 14 days. This applies before the rest of the Act does.

EUR-Lex · European Commission

What to do (5 items)

• List every product you place on the EU market that contains software or firmware
• Name the person who files reports on the ENISA single reporting platform
• Write the internal path from a vulnerability report to a filed early warning within 24 hours
• Set up a public point of contact for vulnerability reports and a disclosure policy
• Tell users about an exploited vulnerability and the fix without undue delay

Open this entry to tick items off

7 Sep 2026 44 days ago Already applies

OpenSSL 3.0 LTS end of life

End of support · OpenSSL release strategy · OpenSSL Project

MaritimeIndustryInfrastructure International Standard or protocol

OpenSSL 3.0, the long-term support release that shipped in many 2022 to 2024 products, reached end of life on 7 September 2026. OpenSSL 3.5 is the current LTS, supported until April 2030. Software that bundles its own OpenSSL copy will not be fixed by an operating system update.

OpenSSL Project Date reported, not yet checked against the official text.

What to do (3 items)

• Ask vendors of appliances and applications which OpenSSL version they bundle
• Update or replace products stuck on 3.0
• Add the OpenSSL version to the software bill of materials you keep

Open this entry to tick items off

1 Sep 2026 2 months ago Already applies

Port State control CIC 2026: cargo securing (1 Sep to 30 Nov)

Campaign runs 1 September to 30 November 2026 · Joint Concentrated Inspection Campaign 2026 on cargo securing (SOLAS chapters VI and VII, CSS Code) · Paris MoU and Tokyo MOU port State control

Maritime International Law

Paris MoU and Tokyo MOU port State control officers run a joint Concentrated Inspection Campaign on the securing of cargo units and cargo transport units from 1 September to 30 November 2026. During routine inspections they apply a questionnaire on compliance with SOLAS loading, stowage and securing requirements and the Cargo Securing Manual. Deficiencies can lead to detention. The 2025 campaign covered ballast water management.

Paris MoU · Paris MoU CIC library

What to do (4 items)

• Check the approved Cargo Securing Manual is on board and matches the lashing gear in use
• Inspect lashing equipment and record inspections and replacements
• Brief masters and chief officers on the CIC questionnaire topics before calling at Paris or Tokyo MoU ports
• Review stowage and securing procedures for ro-ro, container and general cargo operations

Open this entry to tick items off

31 Aug 2026 2 months ago Already applies

Debian 11 (bullseye) long-term support ended

End of long-term support · Debian LTS · Debian Project

MaritimeIndustryInfrastructure International Standard or protocol

Debian 11 received its last long-term support updates on 31 August 2026. Debian 12 (bookworm) moved from regular security support to the LTS team on 11 June 2026 and is supported until June 2028. Many appliances and industrial gateways run Debian derivatives without saying so.

Debian Wiki

What to do (3 items)

• Check the Debian version on servers, appliances and single-board computers
• Upgrade Debian 11 systems to 12 or 13
• Note June 2028 for Debian 12 in the lifecycle plan

Open this entry to tick items off

12 Aug 2026 2 months ago Already applies

Packaging and Packaging Waste Regulation applies

Applies · Regulation (EU) 2025/40 (PPWR) · European Commission

Industry EU Law

The Packaging Regulation has applied since 12 August 2026 and replaces the old directive with directly applicable rules: minimum recycled content, recyclability grades, labelling, limits on empty space and bans on some single-use formats, with dates staggered to 2030 and beyond. Anyone who packs goods for the EU market is a producer with extended responsibility.

EUR-Lex Date reported, not yet checked against the official text.

What to do (4 items)

• Register as a producer in each Member State where you place packaged goods
• Check packaging against the recyclability and labelling rules and their dates
• Ask packaging suppliers for recycled content documentation
• Review the empty-space and reusable packaging rules for transport packaging

Open this entry to tick items off

2 Aug 2026 3 months ago Already applies

AI Act: most obligations apply

General application · Regulation (EU) 2024/1689 (AI Act) · European Commission

MaritimeIndustryInfrastructure EU Law

The AI Act became applicable on 2 August 2026. Prohibited practices and the AI literacy duty have applied since February 2025, and the rules for general-purpose AI models since August 2025. From August 2026 the transparency rules apply: people must be told when they interact with an AI system, and generated content has to be marked. The Commission's AI Omnibus, in force since 27 July 2026, moved the high-risk deadlines back.

EUR-Lex · European Commission

What to do (5 items)

• Inventory every AI system in use, including features inside bought software
• Check none of the uses is prohibited (for example emotion recognition at work)
• Run short AI literacy training for staff who operate or rely on AI tools
• Add disclosure where staff or customers talk to a chatbot
• Check the vendor's documentation for any system that could be high-risk

Open this entry to tick items off

31 Jul 2026 3 months ago Already applies

Right to Repair Directive: national laws in place

Transposition deadline · Directive (EU) 2024/1799 · European Commission

Industry EU Law

Member States had until 31 July 2026 to transpose the right to repair. Manufacturers of products with EU repairability requirements must repair them within a reasonable time at a reasonable price, provide spare parts and information, and may not block independent repair through software. The legal guarantee is extended after a repair.

EUR-Lex Date reported, not yet checked against the official text.

What to do (4 items)

• Check which of your products carry ecodesign repairability requirements
• Set up a repair service or a repair partner and publish the price list
• Make spare parts and repair information available to independent repairers
• Remove software locks that stop the use of compatible spare parts

Open this entry to tick items off

17 Jul 2026 3 months ago Already applies

CER Directive: Member States identify critical entities

Identification deadline · Directive (EU) 2022/2557, Article 6 · European Commission

InfrastructureMaritime EU Law

Member States had to finish their national risk assessment by 17 January 2026 and identify the critical entities in their territory by 17 July 2026. An entity that is notified has ten months from the notification to meet the resilience obligations: a risk assessment of its own, resilience measures, incident reporting and background checks for certain staff.

EUR-Lex · European Commission

What to do (5 items)

• Ask the national authority whether the company has been, or will be, identified
• If notified, note the date: the obligations apply ten months later
• Draft the entity risk assessment covering natural hazards, sabotage and supply failure
• Check who can do background checks on staff in sensitive roles under national law
• Prepare incident reporting to the authority within 24 hours of a significant incident

Open this entry to tick items off

14 Jul 2026 3 months ago Already applies

SQL Server 2016 end of extended support

End of extended support · SQL Server 2016 lifecycle · Microsoft

MaritimeIndustryInfrastructure International Standard or protocol

SQL Server 2016 left extended support on 14 July 2026. Extended Security Updates are sold for up to three more years. Databases behind ERP, maintenance and monitoring systems often sit on old SQL Server versions nobody looks at.

Microsoft Learn

What to do (3 items)

• Find SQL Server 2016 instances, including Express editions bundled with applications
• Upgrade or buy ESU for each instance
• Check backups and restore tests before any upgrade

Open this entry to tick items off

1 Jul 2026 4 months ago Already applies

IMO MASS Code: non-mandatory code for autonomous ships takes effect

Non-mandatory MASS Code takes effect · International Code of Safety for Maritime Autonomous Surface Ships (non-mandatory MASS Code), adopted at MSC 111 · IMO

Maritime International Guidance

MSC 111 (13 to 22 May 2026) adopted the first IMO Code for remotely controlled and autonomous ships, applying on a voluntary basis from 1 July 2026 to cargo ships under SOLAS chapter I. It is goal-based and covers design, remote operation centres, connectivity and cyber security, and crewing. An experience-building phase follows; work on a mandatory code is planned from 2028, with adoption expected by 1 July 2030 and entry into force on 1 January 2032.

IMO MSC 111 · IMO autonomous shipping FAQ

What to do (4 items)

• Operators of remotely operated or autonomous vessels: map current designs to the Code's goals and functional requirements
• Flag State approvals for MASS trials should now reference the Code
• Feed operational experience into the IMO experience-building phase through the flag administration
• Watch MSC 112 (December 2026) for the experience-building phase framework

Open this entry to tick items off

1 Jul 2026 4 months ago Already applies

Industrial Emissions Directive 2.0: national laws in place

Transposition deadline · Directive (EU) 2024/1785 · European Commission

Industry EU Law

The revised Industrial Emissions Directive had to be transposed by 1 July 2026. It widens the permit regime to more installations, requires environmental management systems with transformation plans for installations covered, tightens the use of best available techniques, and adds an industrial emissions portal. Existing permits are updated over the following years.

EUR-Lex Date reported, not yet checked against the official text.

What to do (4 items)

• Check whether your installation falls under the widened Annex I thresholds
• Prepare an environmental management system with the required content
• Plan the transformation plan for 2030 to 2050 if the installation is covered
• Watch for the permit review from the competent authority

Open this entry to tick items off

11 Jun 2026 4 months ago Already applies

Cyber Resilience Act: notified body rules apply

Conformity assessment body provisions apply · Regulation (EU) 2024/2847 (CRA), Chapter IV · European Commission

Industry EU Law

The rules on notifying and running conformity assessment bodies applied from 11 June 2026, eighteen months ahead of the main obligations. That is when Member States could start designating the bodies that will assess important and critical products. If your product is in one of those classes, this is when the queue for assessments opened.

EUR-Lex · European Commission Date reported, not yet checked against the official text.

What to do (4 items)

• Check Annex III and IV of the Act to see whether your product is important or critical
• If third-party assessment is needed, contact a notified body early; capacity is limited
• Decide whether a harmonised standard route or an EU-type examination fits the product
• Budget for the assessment before the December 2027 deadline

Open this entry to tick items off

13 May 2026 5 months ago Already applies

Let's Encrypt certificates no longer valid for client authentication

Client authentication EKU removed from all certificates · Let's Encrypt announcement of 14 May 2025 · Let's Encrypt (ISRG)

MaritimeIndustryInfrastructure International Standard or protocol

Let's Encrypt removed the TLS client authentication extended key usage from its certificates: from an opt-in chain on 11 February 2026 and from every certificate on 13 May 2026. Systems that used a Let's Encrypt certificate to authenticate a client to a server (mutual TLS between sites, devices or services) need certificates from another source.

Let's Encrypt

What to do (3 items)

• Search for Let's Encrypt certificates used as client certificates in VPNs, MQTT, APIs or mail relays
• Move client authentication to a private CA or a vendor that issues client certificates
• Watch server logs for handshake failures after renewal

Open this entry to tick items off

15 Mar 2026 7 months ago Already applies

TLS certificates: maximum lifetime 200 days

Maximum validity 200 days · Ballot SC-081v3 (Baseline Requirements) · CA/Browser Forum

MaritimeIndustryInfrastructure International Standard or protocol

Public TLS certificates issued from 15 March 2026 can be valid for at most 200 days, down from 398. Domain validation results can also be reused for at most 200 days. The schedule then drops to 100 days in 2027 and 47 days in 2029. Manual renewal stops being practical.

CA/Browser Forum Date reported, not yet checked against the official text.

What to do (4 items)

• Inventory every public certificate and where it is installed, including appliances and vessel gateways
• Automate issuance with ACME or your CA's API
• Monitor expiry with an alert well before the end date
• Check that devices which pin a certificate can take a new one

Open this entry to tick items off

13 Feb 2026 8 months ago Already applies

Bulgaria: NIS2 written into the Cybersecurity Act

Promulgated in the State Gazette · Закон за изменение и допълнение на Закона за киберсигурност, ДВ бр. 17 от 13.02.2026 · National Assembly of Bulgaria

MaritimeIndustryInfrastructure Bulgaria Law

Bulgaria transposed NIS2 through amendments to the Cybersecurity Act, published in State Gazette issue 17 of 13 February 2026. Essential and important entities must register their details with the competent authority, report changes within two weeks, send an early warning of a significant incident within 24 hours, and have their managing bodies trained every two years.

State Gazette (dv.parliament.bg) · lex.bg (consolidated text)

What to do (5 items)

• Read the amended Закон за киберсигурност and the transitional provisions for existing entities
• Register the company and its contact details with the national competent authority
• Set up the 24-hour early warning and the follow-up incident reports
• Book cybersecurity training for the management board and keep the certificate
• Review contracts with suppliers for the security clauses the law expects

Open this entry to tick items off

12 Jan 2026 9 months ago Already applies

US Coast Guard cyber rule: training and cyber officer

Training complete; cybersecurity officer designated · 33 CFR part 101, subpart F (final rule of 17 January 2025) · US Coast Guard

Maritime United States Law

The Coast Guard's maritime cybersecurity rule took effect on 16 July 2025 for US-flagged vessels, facilities and outer continental shelf facilities regulated under MTSA. All personnel had to complete cybersecurity training by 12 January 2026 and yearly after that, and each owner or operator must have designated a Cybersecurity Officer. Reportable cyber incidents go to the National Response Center without delay.

Federal Register (govinfo)

What to do (4 items)

• Confirm a Cybersecurity Officer is named for each vessel or facility
• Keep training records for all personnel, with the yearly refresh dated
• Make sure the crew knows how to report a cyber incident to the NRC
• Include the cyber items in the existing security plan drills

Open this entry to tick items off

1 Jan 2026 10 months ago Already applies

CBAM: definitive period starts for imports

Definitive regime applies · Regulation (EU) 2023/956 as simplified by Regulation (EU) 2025/2083 · European Commission

Industry EU Law

Since 1 January 2026 the Carbon Border Adjustment Mechanism is in its definitive regime. Importers of iron and steel, aluminium, cement, fertilisers, hydrogen and electricity above the 50-tonne yearly threshold must be authorised CBAM declarants, report embedded emissions and, from 2027, buy and surrender certificates. Certificate sales for 2026 imports start in February 2027 and the first surrender is due by 30 September 2027.

European Commission · EUR-Lex

What to do (4 items)

• Check whether your imports of CBAM goods exceed 50 tonnes a year in total
• Apply for authorised CBAM declarant status with the national authority
• Get emissions data from non-EU suppliers or use the default values
• Budget for certificates against 2026 import volumes

Open this entry to tick items off

1 Jan 2026 10 months ago Already applies

ECDIS: S-100 systems may be installed (dual-fuel S-57/S-101)

S-100 ECDIS accepted on a voluntary basis · Resolution MSC.530(106)/Rev.1 (ECDIS performance standards); IHO S-100, S-101, S-98 · IMO and IHO

Maritime International Standard or protocol

The revised ECDIS performance standards allow S-100 based ECDIS from 1 January 2026. These systems read both today's S-57 ENCs and the new S-101 ENCs plus other S-100 products such as bathymetry (S-102), water levels (S-104) and navigational warnings (S-124). Installation is voluntary until 1 January 2029, when all new ECDIS installations must meet the revised standard. Existing S-57 ECDIS can stay in service.

IMO · IHO ENC and ECDIS

What to do (4 items)

• Ask ECDIS suppliers for the S-100 upgrade path and type approval status of installed models
• Plan bridge equipment renewals so units installed from 2029 are S-100 compliant
• Check chart distribution contracts cover S-101 ENC supply and updating
• Include S-100 ECDIS familiarisation in officer training once units are installed

Open this entry to tick items off

1 Jan 2026 10 months ago Already applies

SOLAS II-1/3-13: lifting appliances and anchor handling winches

New lifting appliance regulation in force · Resolution MSC.532(107); SOLAS regulation II-1/3-13 · IMO

Maritime International Law

A new SOLAS regulation II-1/3-13 on onboard lifting appliances and anchor handling winches entered into force on 1 January 2026. It covers design and construction (for appliances installed on or after that date) and operation, inspection, testing and maintenance, supported by IMO guidelines. Cranes, davits used for cargo and stores, and anchor handling winches now sit inside the SOLAS survey regime instead of company or flag practice alone.

IMO · IMO amendments in force

What to do (4 items)

• List every lifting appliance and anchor handling winch on each ship with its safe working load
• Set up the inspection, thorough examination and load test schedule required by the regulation and guidelines
• Keep test certificates and maintenance records on board for surveyors and port State control
• Check newbuild specifications for appliances installed on or after 1 January 2026

Open this entry to tick items off

1 Jan 2026 10 months ago Already applies

SOLAS II-2: ro-ro fire safety, PFOS ban and fuel flashpoint

Fire safety amendments in force · Resolution MSC.550(108); SOLAS chapter II-2 · IMO

Maritime International Law

Amendments to SOLAS chapter II-2 entered into force on 1 January 2026. Ships constructed on or after that date must have improved fire detection, alarm, patrol and video monitoring in vehicle, special category and ro-ro spaces. Fire-extinguishing media containing PFOS are banned; ships built before 2026 have to remove them by the first survey on or after 1 January 2026. Bunker suppliers must declare the flashpoint of oil fuel on the delivery note, and ships of 3,000 GT and above built from 2026 need an electronic inclinometer.

IMO · IMO amendments in force

What to do (4 items)

• Check all portable and fixed fire-fighting media for PFOS and replace them before the next survey
• Update the bunkering checklist so the delivery note flashpoint declaration is checked and filed
• Ro-ro and vehicle carriers: review fire patrol and detection arrangements against the new chapter II-2 text
• Newbuilds: confirm the yard specification includes the ro-ro space monitoring and the inclinometer

Open this entry to tick items off