Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
16446 events advancing 9109 policy or regulatory changes:
Graph
Table
Excel
CSV
Excel
CSV
Excel
CSV
Public Accounts Committee inquiry into use of AI in government
Public Accounts Committee issued report on use of AI in government including public procurement access
On 26 March 2025, the Public Accounts Committee (PAC) in the House of Commons issued a report titled Government’s Use of Artificial Intelligence, which examined the ability of public sector procurement systems to support a competitive and innovative…
Act on protection of minors against access to harmful content on the Internet
Ministry of Digitalisation closes consultation on draft Act on protection of minors against access to harmful content on the Internet
On 26 March 2025, the Ministry of Digitalisation closes its public consultation on the draft Act on the protection of minors against access to harmful content on the Internet. The draft Act aims to limit minors' access to pornographic content and in…
National Commission on Informatics and Liberty recommendation on use of location data from connected vehicles
National Commission on Informatics and Liberty opened consultation on draft recommendation on use of location data from connected vehicles
On 25 March 2025, the National Commission on Informatics and Liberty (CNIL) initiated a public consultation, set to close on 20 May 2025, on a draft recommendation focused on location data usage by connected vehicles in the technological consumer go…
Regulation (EU) 2025/327 establishing a European Health Data Space (EHDS) including rules for portability and sharing of health data
European Health Data Space (EHDS) Regulation (2025/327) enters into force with grace period
On 25 March 2025, the European Health Data Space (EHDS) Regulation (2025/327) entered into force with a grace period. The Regulation facilitates access to electronic health data for primary use in healthcare and secondary use for research, policy ma…
Privacy Protection Authority statement on implementation of consent principle
Privacy Protection Authority closes consultation on statement on implementation of consent principle
On 24 March 2025, the Privacy Protection Authority of Israel closes a public consultation on the statement clarifying the application of the consent principle under national data protection laws. The statement reflects the legal interpretation that …
Testing requirements in Act on the development, deployment and use of high-risk artificial intelligence (HB 2094)
High-Risk Artificial Intelligence Developer and Deployer Act including testing requirements (HB 2094) was vetoed by Governor
On 24 March 2025, the Virginia Governor vetoed the Act on the development, deployment, and use of high-risk artificial intelligence (AI). The Act would have outlined the responsibilities of developers and deployers of AI. In particular, it would hav…
Design requirements in Act on development, deployment and use of high-risk artificial intelligence (HB 2094)
Act on the development, deployment and use of high-risk artificial intelligence including design requirements (HB 2094) was vetoed by Governor
On 24 March 2025, the Virginia Governor vetoed the Act on the development, deployment, and use of high-risk artificial intelligence (AI). The Act would have applied to developers and deployers of high-risk AI systems in Virginia. It would have requi…
Prudential Regulation Authority inquiry into firms' exposure to cryptoassets
Closed consultation on Prudential Regulation Authority inquiry into firms' exposure to cryptoassets
On 24 March 2025, the Prudential Regulation Authority (PRA) closes its data request to gather information on firms' current expected future crypto-asset exposures and their application of the Basel framework for the prudential treatment of cryptoass…
Office of the Privacy Commissioner of Canada and UK Information Commissioner's Office joint investigation into 23andMe's compliance with cybersecurity regulations
UK Information Commissioner’s Office issued provisional findings and proposed fine to 23andMe following joint investigation with Office of the Privacy Commissioner of Canada regarding compliance with cybersecurity regulations
On 24 March 2025, the UK Information Commissioner’s Office (ICO) issued provisional findings, a notice of intent to impose a fine of £4.59 million, and a preliminary enforcement notice to 23andMe. This action followed a joint investigation with the …
National Institute of Standards and Technology's Guidance on Adversarial Machine Learning Threats
Published updated NIST Guidance on Adversarial Machine Learning Threats (NIST.AI.100-2 E2025)
On 24 March 2025, the National Institute of Standards and Technology (NIST) published an updated version of Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations (NIST.AI.100-2 E2025). This provides an update from the i…