Activity Tracker

The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.

22 events advancing 21 policy or regulatory changes:

Most active jurisdictions Number of policy changes

Graph

Table

Most active policy areas Number of policy changes
Targeted economic activity Number of policy changes
Reset filters
22 events advancing 21 policy or regulatory changes:
in grace period

Right of customisation of the media offer in European Media Freedom Act

Latest event Date: 2027-05-08 law implementation

European Media Freedom Act including the right of customisation of the media offer enters into force

On 8 May 2027, the European Media Freedom Act (EMFA) enters into force. The EMFA aims to increase and promote transparency regarding media ownership and establish safeguards for editorial independence and media pluralism. The EMFA introduces the rig…

Implementer
European Union
Policy area Consumer protection
Policy or regulatory element User/subject right
Economic activity other service provider, technological consumer goods
in force

Consumer Financial Protection Bureau Personal Financial Data Rights Rule

Latest event Date: 2027-04-01 order implementation

Implemented obligations for depository institutions that hold at least USD 10 billion in total assets outlined in Rule on Personal Financial Data Rights

On 1 April 2027, the final rule on personal financial data rights came into force for depository institutions that hold at least USD 10 billion in total assets but less than USD 250 billion or non-depository institutions that did not generate USD 10…

Implementer
United States of America
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity digital payment provider (incl. cryptocurrencies), other service provider
adopted

Guidance on operational incident reporting (FG26/3)

Latest event Date: 2027-03-18 order implementation

Guidance on operational incident reporting enters into force

On 18 March 2027, the guidance on operational incident reporting for firms with Part 4A permission, payment service providers (PSPs), credit rating agencies, and other financial firms enters into force. The guidelines establish a standardised proces…

Implementer
United Kingdom
Policy area Data governance
Policy or regulatory element Cybersecurity regulation
Economic activity other service provider
adopted

Guidance on material third party arrangements (FG26/4)

Latest event Date: 2027-03-18 order implementation

Guidance on material third party arrangements enters into force

On 18 March 2027, the guidance on material third-party arrangements (FG26/4) comes into force. It applies to designated investment firms, authorised electronic money or payment institutions, and other financial institutions. The guidance requires fi…

Implementer
United Kingdom
Policy area Data governance
Policy or regulatory element Cybersecurity regulation
Economic activity digital payment provider (incl. cryptocurrencies), other service provider
under deliberation

Consumer protection authority governance in Partial Amendment to Act on Consumer Protection in Electronic Commerce (Act No. 21312)

Latest event Date: 2027-02-07 law implementation

Partial Amendment to the Act on Consumer Protection in Electronic Commerce (Law No. 21312) including consumer protection authority governance enters into force

On 7 February 2027, the amendment to Article 39(3) of the Act on Consumer Protection in Electronic Commerce (Law No. 21312) enters into force. The Act applies to businesses under investigation or review by the Korea Fair Trade Commission (KFTC) for …

Implementer
Republic of Korea
Policy area Consumer protection
Policy or regulatory element Consumer protection authority governance
Economic activity platform intermediary: e-commerce, other service provider, platform intermediary: other
in grace period

Privacy Protection Act (A6309)

Latest event Date: 2027-02-01 law implementation

Section 6 of the Privacy Protection Act (A6309) enters into force

On 1 February 2027, Section 6 of the Privacy Protection Act (A6309) enters into force, regulating the collection and sharing of personal information by health care facilities. The provisions prohibit health care facilities from requesting or collect…

Implementer
United States of America
Policy area Data governance
Policy or regulatory element Government access to data
Economic activity other service provider
in force

Presidential Decree No. 10767 re-determining digital services tax rate

Latest event Date: 2027-01-01 order implementation

President Decree No. 10767 re-determining digital services tax rate applies reduced rate of 2.5%

On 1 January 2027, Presidential Decree No. 10767 setting the digital services tax rate at 2.5% for revenue earned from the start of the year enters into force. The Decree, published in the Official Gazette on 25 December 2025, followed the adjustmen…

Implementer
Turkiye
Policy area Taxation
Policy or regulatory element Direct taxes including Digital Service Taxes
Economic activity online advertising provider, platform intermediary: user-generated content, streaming service provider, other service provider
in grace period

Data protection measures in Directive on consumer credits

Latest event Date: 2026-11-20 law implementation

Implemented Consumer Credit Directive including data protection measures

On 20 November 2026, the Consumer Credit Directive, including data protection measures, was implemented. The Directive outlines the data that covered entities, including creditors, credit intermediaries and providers of crowdfunding credit services,…

Implementer
European Union
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity digital payment provider (incl. cryptocurrencies), other service provider
in grace period

Consumer protection regulation in Directive on consumer credits

Latest event Date: 2026-11-20 law implementation

Implemented Credit Directive including consumer protection regulations

On 20 November 2026, the Consumer Credit Directive, including consumer protection measures, was implemented. The Directive aims to ensure that consumers can make an informed choice when applying for credit and have easy access to necessary informati…

Implementer
European Union
Policy area Other operating conditions
Policy or regulatory element User/subject right
Economic activity digital payment provider (incl. cryptocurrencies), other service provider
under deliberation

Fair marketing and advertising practices in Partial Amendment to the Act on Consumer Protection in Electronic Commerce (Act No. 21312)

Latest event Date: 2026-07-21 law implementation

Partial Amendment to Act on Consumer Protection in Electronic Commerce (Bill No. 14874) including fair marketing and advertising practices enters into force

On 21 July 2026, the Act on Consumer Protection in Electronic Commerce (Law No. 21312) entered into force, 6 months after promulgation on 20 January 2026. The Act applies to e-commerce operators and mail-order businesses that publish consumer review…

Implementer
Republic of Korea
Policy area Consumer protection
Policy or regulatory element Fair marketing and advertising practice requirement
Economic activity platform intermediary: e-commerce, other service provider, platform intermediary: other
Page
1
2
3