Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
22 events advancing 22 policy or regulatory changes:
Graph
Table
Data protection regulation in Age-Appropriate Design Code Act (SB 69)
Age-Appropriate Design Code Act (S. 69) enters into force
On 1 January 2027, the Age-Appropriate Design Code Act (S. 69) enters into force. The Act stipulates that violations of its provisions will be treated as unfair and deceptive acts in commerce, with enforcement overseen by the Attorney General. Speci…
Bill amending Civil Code including age verification requirements for online services and software applications (AB 1043)
Law on Age Verification Signals in Software Applications and Online Services (AB 1043) enters into force
On 1 January 2027, the Law on Age Verification Signals in Software Applications and Online Services (AB 1043) enters into force, codified under Title 1.81.9 (commencing with Section 1798.500) of Part 4 of Division 3 of the Civil Code and cited as th…
Bill amending California Consumer Privacy Act of 2018 to include mandatory opt-out preference signal in browsers (AB No. 566)
California Opt Me Out Act introducing opt-out preference signal in browsers enters into force
On 1 January 2027, the California Opt Me Out Act enters into force, amending the California Consumer Privacy Act of 2018 to mandate that internet browsers include a consumer-configurable function to send an opt-out preference signal to businesses wi…
VAT exemptions for certain internet access and web hosting services in Law No. 23-22
Terminated Article 70 of Law No. 23-22 relating to the finance law for 2024 including VAT exemptions for certain internet access and web hosting services
On 1 January 2027, the applicability of Article 70 of Law No. 23-22 relating to the finance law for 2024 expires. The tax exemption is no longer in effect. Article 70 amended Article 32 of Ordinance No. 10-01, relating to the supplementary finance l…
Department of Commerce Rule on Securing the Information and Communications Technology and Services Supply Chain Concerning Connected Vehicles
Bureau of Industry and Security prohibition on sales under the connected vehicles and vehicle communication system hardware rule enters into force
From model year 2027, the prohibition established by the final rule of the United States Department of Commerce (DOC), through the Bureau of Industry and Security (BIS), enters into force under the Information and Communications Technology and Servi…
Copyright protection regulation in amendment to Copyright Act (Act No. 21336 / Bill No. 2215125)
Amendment to Copyright Act including copyright protection regulation enters into force
On 11 August 2026, the Partial Amendment to the Copyright Act (Act No. 21336) enters into force. The Amendment applies to online service providers and telecommunications business operators. On definitions, the Amendment expands the definition of onl…
Guidance for age assurance developers on designing age assurance to be privacy-protective
Office of the Privacy Commissioner closes consultation on draft guidance on designing age assurance to be privacy-protective
On 4 August 2026, the Office of the Privacy Commissioner closes the consultation on draft guidance on designing age assurance to be privacy protective. The draft guidance applies to age assurance service providers, developers of applications such as…
Government access to data in Decree No. 12,975 amending implementation decree of Civil Rights Framework for the Internet
Decree No. 12,975 amending implementation decree of Civil Rights Framework for the Internet including government access to data enters into force
On 19 July 2026, Decree No. 12,975 amending Decree No. 8,771 of 2016 regulating Law No. 12,965 of 2014 (Civil Rights Framework for the Internet), enters into force. The Decree requires internet application providers (IAPs) to forward content and inf…
Data protection regulation in Decree No. 12,975 amending implementation decree of Civil Rights Framework for the Internet
Decree No. 12,975 amending implementation decree of Civil Rights Framework for the Internet including data protection regulation enters into force
On 19 July 2026, Decree No. 12,975 amending Decree No. 8,771 of 2016 regulating Law No. 12,965 of 2014 (Civil Rights Framework for the Internet), enters into force. The Decree requires connection providers and internet application providers (IAPs) t…
Data protection authority governance in Decree No. 12,975 amending implementation decree of Civil Rights Framework for the Internet
Decree No. 12,975 amending implementation decree of Civil Rights Framework for the Internet including data protection authority governance enters into force
On 19 July 2026, Decree No. 12,975 amending Decree No. 8,771 of 2016 regulating Law No. 12,965 of 2014 (Civil Rights Framework for the Internet), enters into force. The Decree designates the National Data Protection Agency (ANPD) as the competent au…