Activity Tracker

The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.

20 events advancing 19 policy or regulatory changes:

Most active jurisdictions Number of policy changes

Graph

Table

Most active policy areas Number of policy changes
Targeted economic activity Number of policy changes
Reset filters
20 events advancing 19 policy or regulatory changes:
in force

Consumer Financial Protection Bureau Personal Financial Data Rights Rule

Latest event Date: 2026-04-01 order implementation

Implemented obligations for depository institutions with at least USD 250 billion in total assets outlined in Rule on Personal Financial Data Rights

On 1 April 2026, the final rule on personal financial data rights came into force for depository institutions with at least USD 250 billion in total assets and non-depository institutions with at least USD 10 billion in revenue. The rule mandates fi…

Implementer
United States of America
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity digital payment provider (incl. cryptocurrencies), other service provider
under deliberation

Guidance on automated decision-making in recruitment

Latest event Date: 2026-03-31 outline drafting

Information Commissioner's Office published report and draft guidance on automated decision making in recruitment

On 31 March 2026, the Information Commissioner's Office (ICO) published a report and draft guidance on the use of automated decision-making (ADM) in recruitment. The guidance would apply to employers that use automated tools to process job applicati…

Implementer
United Kingdom
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity other service provider, software provider: other software
adopted

Guidance on operational incident reporting (FG26/3)

Latest event Date: 2026-03-18 order adoption

Financial Conduct Authority adopted guidance on operational incident reporting (FG26/3)

On 18 March 2026, the Financial Conduct Authority (FCA) adopted the guidance on operational incident reporting for firms with Part 4A permission, payment service providers (PSPs), credit rating agencies, and other financial firms. The policy aims to…

Implementer
United Kingdom
Policy area Data governance
Policy or regulatory element Cybersecurity regulation
Economic activity other service provider
adopted

Guidance on material third party arrangements (FG26/4)

Latest event Date: 2026-03-18 order adoption

Financial Conduct Authority adopted guidance on material third party arrangements (FG26/4)

On 18 March 2026, the Financial Conduct Authority (FCA) adopted the guidance on material third-party arrangements (FG26/4). It applies to designated investment firms, authorised electronic money institutions or authorised payment institutions, and o…

Implementer
United Kingdom
Policy area Data governance
Policy or regulatory element Cybersecurity regulation
Economic activity digital payment provider (incl. cryptocurrencies), other service provider
in consultation

Authorisation requirements in Virtual Asset Service Providers Regulations, 2026

Latest event Date: 2026-03-17 order consultation opened

National Treasury opened consultation on Virtual Asset Service Providers Regulations including authorisation requirements

On 17 March 2026, the Cabinet Secretary for the National Treasury opened a consultation on the draft Virtual Asset Service Providers Regulations until 10 April 2026. The Regulations implement Section 49 of the Virtual Asset Service Providers Act, 20…

Implementer
Kenya
Policy area Authorisation, registration and licensing
Policy or regulatory element Authorisation of goods or services
Economic activity digital payment provider (incl. cryptocurrencies), other service provider
in consultation

Consumer review disclosure in amendments to Enforcement Decree of Act on Consumer Protection in E-Commerce

Latest event Date: 2026-03-11 order consultation opened

Fair Trade Commission opened consultation on amendments to the Enforcement Decree of the Act on Consumer Protection in E-Commerce including consumer review disclosure

On 11 March 2026, the Fair Trade Commission opened a public consultation on proposed amendments to the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce (Law No. 21312) until 20 March 2026. The amendments follow the Act pro…

Implementer
Republic of Korea
Policy area Consumer protection
Policy or regulatory element Fair marketing and advertising practice requirement
Economic activity platform intermediary: e-commerce, other service provider, platform intermediary: other
in consultation

User identification requirement in amendments to Enforcement Decree of Act on Consumer Protection in E-Commerce

Latest event Date: 2026-03-11 order consultation opened

Fair Trade Commission opened consultation on amendments to the Enforcement Decree of the Act on Consumer Protection in E-Commerce (Law No. 21312) including user identification requirement

On 11 March 2026, the Korea Fair Trade Commission (KFTC) opened a public consultation on proposed amendments to the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce (Law No. 21312) until 20 April 2026. The amendments follo…

Implementer
Republic of Korea
Policy area Consumer protection
Policy or regulatory element User identification requirement
Economic activity platform intermediary: e-commerce, other service provider, platform intermediary: other
in consultation

Standard on capability requirements for personal information protection compliance audit institutions

Latest event Date: 2026-02-11 order consultation opened

National Cybersecurity Standardisation Technical Committee opened consultation on draft standard on capability requirements for personal information protection compliance audit institutions

On 11 February 2026, the Secretariat of the National Cybersecurity Standardisation Technical Committee (TC 260) opened a public consultation on the draft national standard Data Security Technology — Capability Requirements for Professional Instituti…

Implementer
China
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity other service provider
under deliberation

Consumer protection authority governance in Partial Amendment to Act on Consumer Protection in Electronic Commerce (Act No. 21312)

Latest event Date: 2025-12-30 law adoption

National Assembly adopted Partial Amendment to Act on Consumer Protection in Electronic Commerce (Bill No. 14874) including consumer protection authority governance

On 30 December 2025, the National Assembly adopted the Act on Consumer Protection in Electronic Commerce (Law No. 21312). The Act applies to businesses under investigation or review by the Korea Fair Trade Commission (KFTC) for violations of the Act…

Implementer
Republic of Korea
Policy area Consumer protection
Policy or regulatory element Consumer protection authority governance
Economic activity platform intermediary: e-commerce, other service provider, platform intermediary: other
under deliberation

Fair marketing and advertising practices in Partial Amendment to the Act on Consumer Protection in Electronic Commerce (Act No. 21312)

Latest event Date: 2025-12-30 law adoption

National Assembly adopted Partial Amendment to Act on Consumer Protection in Electronic Commerce (Bill No. 14874) including fair marketing and advertising practices

On 30 December 2025, the National Assembly adopted the Act on Consumer Protection in Electronic Commerce (Law No. 21312). The Act applies to e-commerce operators and mail-order businesses that publish consumer reviews on cyber malls and similar onli…

Implementer
Republic of Korea
Policy area Consumer protection
Policy or regulatory element Fair marketing and advertising practice requirement
Economic activity platform intermediary: e-commerce, other service provider, platform intermediary: other
Page
1
2