Activity Tracker

The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.

4527 events advancing 2535 policy or regulatory changes:

Most active jurisdictions Number of policy changes

Graph

Table

Most active policy areas Number of policy changes
Targeted economic activity Number of policy changes
Reset filters
4527 events advancing 2535 policy or regulatory changes:
in consultation

METI guide on methods for managing software vulnerabilities using SBOM

Latest event Date: 2024-04-26 outline consultation opened

Opened consultation on revised METI guide on methods for managing software vulnerabilities using SBOM

On 26 April 2024, the Ministry of Economy, Trade and Industry (METI) opened a public consultation on the revised draft of the guide for managing software vulnerabilities using the Software Bill of Materials (SBOM). The consultation remains open unti…

Implementer
Japan
Policy area Data governance
Policy or regulatory element Cybersecurity regulation
Economic activity cross-cutting
concluded

CNIL notice regarding data minimisation in the recruitment process

Latest event Date: 2024-04-25 investigation closure

Issued CNIL notice regarding data minimisation in the recruitment process

On 25 April 2024, the French Commission Nationale de l’Informatique et des Libertés (CNIL) issued a notice after receiving complaints about excessive data collection in the context of a recruitment process. The unknown company in question asked appl…

Implementer
France
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity cross-cutting
under deliberation

Lawsuit concerning the processing and analysis of personal data for targeted advertising (Case C-446/21)

Latest event Date: 2024-04-25 public lawsuit opinion

Issued Advocate General's Opinion on processing and analysis of personal data for targeted advertising (Case C-446/21)

On 25 April 2024, the Advocate General (AG) delivered an opinion on case C-446/21, addressing the processing of personal data for targeted advertising under the General Data Protection Regulation (GDPR). The case, based on a preliminary reference fi…

Implementer
EU-28
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity platform intermediary: user-generated content
under deliberation

Mandatory data sharing requirements in EU Directive on improving working conditions in platform work

Latest event Date: 2024-04-25 law passage

Passed by Parliament Platform Work Directive including mandatory data sharing requirements

On 25 April 2024, the European Parliament passed the Directive on improving working conditions in platform work ^Platform Work Directive"), including mandatory data sharing requirements. In particular, digital labour platforms will be required to pr…

Implementer
European Union
Policy area Data governance
Policy or regulatory element Data protection authority governance
Economic activity platform intermediary: other
under deliberation

Data protection for workers in EU Directive on improving working conditions in platform work

Latest event Date: 2024-04-25 law passage

Passed by Parliament Platform Work Directive including data protection for workers

On 25 April 2024, the European Parliament passed the Directive on improving working conditions in platform work (Platform Work Directive), including data protection for workers. Under the Directive, digital platforms will be prohibited from processi…

Implementer
European Union
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity platform intermediary: other
in consultation

Act on National Cybersecurity System

Latest event Date: 2024-04-24 law consultation opened

Opened Consultation on National Cybersecurity System Act

On 24 April 2024, the Poland Ministry of Digital Affairs published a draft of an Amendment to the Act on the National Cybersecurity System, and opened a consultation on it. The Act incorporates a requirement for an information security management sy…

Implementer
Poland
Policy area Data governance
Policy or regulatory element Cybersecurity regulation
Economic activity cross-cutting
under deliberation

US-Kenya Joint Statement on Cross-Border Data Flows, AI, and Upskilling

Latest event Date: 2024-04-24 declaration announcement

Issued US-Kenya Joint Statement on Cross-Border Data Flows, AI, and Upskilling

On 24 April 2024, the United States Department of Commerce and the Kenyan Ministry of Information, Communication and the Digital Economy announced the Joint Statement on Cross-Border Data Flows, AI, and Upskilling. According to the Joint Statement, …

Implementer
KenyaUnited States of America
Policy area Data governance
Policy or regulatory element Cross-border data transfer regulation
Economic activity cross-cutting
adopted

Protecting Americans' Data from Foreign Adversaries Act of 2024 (HR 8038)

Latest event Date: 2024-04-24 law signing

Signed Protecting Americans' Data from Foreign Adversaries Act of 2024 (HR 8038) as incorporated in Bill making emergency supplemental appropriations (HR 815)

On 24 April 2024, the Protecting Americans' Data from Foreign Adversaries Act of 2024 (HR 8038) was signed by the US President as part of the Bill making emergency supplemental appropriations (HR 815) to incorporate the 21st Century Peace through St…

Implementer
United States of America
Policy area Data governance
Policy or regulatory element Cross-border data transfer regulation
Economic activity platform intermediary: user-generated content
processing consultation

BEREC Report on Cloud and Edge Computing Services

Latest event Date: 2024-04-24 inquiry consultation closed

Closed consultation on BEREC Report on Cloud and Edge Computing Services

On 24 April 2024, the consultation on the Body of European Regulators for Electronic Communications (BEREC) Report on Cloud and Edge Computing Services closed. The BEREC gathered information related to the impact of cloud and edge computing developm…

Implementer
European Union
Policy area Data governance
Policy or regulatory element Cybersecurity regulation
Economic activity infrastructure provider: cloud computing, storage and databases
concluded

Lawsuit against the implementation of the California Privacy Rights Act Regulations (California Privacy Protection Agency v California Chamber of Commerce)

Latest event Date: 2024-04-24 public lawsuit closure

Issued California Supreme Court colosure Chamber of Commerce's petition to overturn court decision regarding the enforcement of California Consumer Privacy Act Regulations (S283856)

On 24 April 2024, the California Supreme Court denied the California Chamber of Commerce's petition for review. This follows the California Third District Court of Appeal's ruling in favour of the California Privacy Protection Agency (CPPA) and Cali…

Implementer
United States of America
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity cross-cutting
Page
1
2
...
254