Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
16 events advancing 15 policy or regulatory changes:
Graph
Table
Bill amending Network Act including incident response obligations and enforcement measures (Bill No. 2214896/Law No. 21500)
Information Security Level Evaluation obligations in Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force
On 1 April 2027, the Information Security Level Evaluation obligations in the Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force. The Korea Ministry of Science and ICT m…
VAT exemptions for certain internet access and web hosting services in Law No. 23-22
Terminated Article 70 of Law No. 23-22 relating to the finance law for 2024 including VAT exemptions for certain internet access and web hosting services
On 1 January 2027, the applicability of Article 70 of Law No. 23-22 relating to the finance law for 2024 expires. The tax exemption is no longer in effect. Article 70 amended Article 32 of Ordinance No. 10-01, relating to the supplementary finance l…
Cyber Trust Mark requirements in critical information infrastructure and cybersecurity industries
Obligation for auditors of critical information infrastructure to obtain Cyber Trust Mark Level 5 certification enters into force
On 31 December 2026, the window for compliance with the Cyber Security Agency (CSA) obligation directing Critical Information Infrastructure Auditors to have obtained the Cyber Trust Mark (CTM) Level 5 certification ends. This mandate, announced dur…
Organisational requirements in Internet Code of Practice 2025
Internet Code of Practice, including organisational requirements, enters into force with grace period
On 13 August 2026, the Internet Code of Practice, including organisational requirements, enters into force. The Code requires online and digital communications platforms to establish and maintain a dedicated engagement channel with the Designated On…
Design requirements in Internet Code of Practice 2025
Internet Code of Practice, including design requirements, enters into force
On 13 August 2026, the Internet Code of Practice, including design requirements, enters into force. The Code requires internet access service providers to offer optional parental control measures, including content filters and monitoring tools, eith…
Data protection regulation in Internet Code of Practice 2025
Internet Code of Practice, including data protection regulation, enters into force
On 13 August 2026, the Internet Code of Practice, including data protection regulation, enters into force. The Code provides that internet access service providers must not permit the harvesting or third-party access to transactional data on their n…
Non-discrimination requirements in Internet Code of Practice 2025
Internet Code of Practice, including non-discrimination requirements, enters into force
On 13 August 2026, the Internet Code of Practice, including non-discrimination requirements, enters into force. The Code requires internet access service providers to treat all lawful traffic within the same service category equally and must not dis…
User rights in Internet Code of Practice 2025
Internet Code of Practice, including user rights, enters into force
On 13 August 2026, the Internet Code of Practice, including user rights, enters into force. The Code guarantees consumers the right to access and share lawful content, use applications and services of their choice, and connect appropriate devices wi…
Rules regarding deployment of AI and emerging technologies in Internet Code of Practice 2025
Internet Code of Practice including rules regarding deployment of AI and emerging technologies, enters into force
On 13 August 2026, the Internet Code of Practice, including rules regarding the deployment of Artificial Intelligence (AI) and emerging technologies, enters into force. The Code requires Internet Access Service Providers to notify the Commission bef…
Cybersecurity regulation in Internet Code of Practice 2025
Internet Code of Practice including cybersecurity regulation enters into force
On 13 August 2026, the Internet Code of Practice, including cybersecurity regulation, enters into force. The Code requires internet access service providers to implement the cybersecurity framework issued by the Commission as the operational baselin…