Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
24 events advancing 23 policy or regulatory changes:
Graph
Table
Order establishing consumer notification and transparency obligations (Telecom Regulatory Policy CRTC 2026-67)
Order on telecom consumer notification and transparency obligations enters into force
On 13 April 2027, the regulatory order issued by the Canadian Radio-television and Telecommunications Commission introducing consumer notification and information requirements for telecommunications service providers in Canada enters into force. The…
Bill amending Network Act including incident response obligations and enforcement measures (Bill No. 2214896/Law No. 21500)
Information Security Level Evaluation obligations in Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force
On 1 April 2027, the Information Security Level Evaluation obligations in the Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force. The Korea Ministry of Science and ICT m…
VAT exemptions for certain internet access and web hosting services in Law No. 23-22
Terminated Article 70 of Law No. 23-22 relating to the finance law for 2024 including VAT exemptions for certain internet access and web hosting services
On 1 January 2027, the applicability of Article 70 of Law No. 23-22 relating to the finance law for 2024 expires. The tax exemption is no longer in effect. Article 70 amended Article 32 of Ordinance No. 10-01, relating to the supplementary finance l…
Cyber Trust Mark requirements in critical information infrastructure and cybersecurity industries
Obligation for auditors of critical information infrastructure to obtain Cyber Trust Mark Level 5 certification enters into force
On 31 December 2026, the window for compliance with the Cyber Security Agency (CSA) obligation directing Critical Information Infrastructure Auditors to have obtained the Cyber Trust Mark (CTM) Level 5 certification ends. This mandate, announced dur…
Competition authority governance in Electronic Communications Amendment Bill, 2026 (B12-2026)
Portfolio Committee on Communications and Digital Technologies closes consultation on Electronic Communications Amendment Bill 2026 including competition authority governance
On 21 August 2026, the Portfolio Committee on Communications and Digital Technologies closes the consultation for the Electronic Communications Amendment Bill. The Bill would expand the Independent Communications Authority of South Africa's (ICASA) …
Access obligations in Electronic Communications Amendment Bill, 2026 (B12-2026)
Portfolio Committee on Communications and Digital Technologies closes consultation on Electronic Communications Amendment Bill including access obligations
On 21 August 2026, the Portfolio Committee on Communications and Digital Technologies closes the consultation for the Electronic Communications Amendment Bill. The Bill addresses unilateral conduct by establishing mandatory access obligations. Under…
Cybersecurity Act (No. 36764) implementing Directive on measures for a high common level of cybersecurity across the Union (NIS/2 Directive No. 2022/2555)
Cybersecurity Act (No. 36764) implementing Directive on measures for a high common level of cybersecurity across the Union (NIS 2 Directive No. 2022/2555) enters into force
On 15 August 2026, the Cybersecurity Act (No. 36764) implementing Directive on measures for a high common level of cybersecurity across the Union (Directive No. 2022/2555) enters into force. The Act lays down rules on managing risks to the security …
Critical Entities Resilience Act (No. 36765) implementing Directive on resilience of critical entities (Directive No. 2022/2557)
Critical Entities Resilience Act (No. 36765) implementing Directive on resilience of critical entities (Directive No. 2022/2557) enters into force
On 15 August 2026, the Critical Entities Resilience Act (No. 36765) implementing Directive on resilience of critical entities (Directive No. 2022/2557) enters into force. Under the Act, relevant ministers designate critical entities based on criteri…
Organisational requirements in Internet Code of Practice 2026
Internet Code of Practice, including organisational requirements, enters into force with grace period
On 13 August 2026, the Internet Code of Practice, including organisational requirements, enters into force. The Code requires online and digital communications platforms to establish and maintain a dedicated engagement channel with the Designated On…
Design requirements in Internet Code of Practice 2026
Internet Code of Practice, including design requirements, enters into force
On 13 August 2026, the Internet Code of Practice, including design requirements, enters into force. The Code requires internet access service providers to offer optional parental control measures, including content filters and monitoring tools, eith…