Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
21 events advancing 21 policy or regulatory changes:
Graph
Table
VAT exemptions for certain internet access and web hosting services in Law No. 23-22
Terminated Article 70 of Law No. 23-22 relating to the finance law for 2024 including VAT exemptions for certain internet access and web hosting services
On 1 January 2027, the applicability of Article 70 of Law No. 23-22 relating to the finance law for 2024 expires. The tax exemption is no longer in effect. Article 70 amended Article 32 of Ordinance No. 10-01, relating to the supplementary finance l…
Cyber Trust Mark requirements in critical information infrastructure and cybersecurity industries
Obligation for auditors of critical information infrastructure to obtain Cyber Trust Mark Level 5 certification enters into force
On 31 December 2026, the window for compliance with the Cyber Security Agency (CSA) obligation directing Critical Information Infrastructure Auditors to have obtained the Cyber Trust Mark (CTM) Level 5 certification ends. This mandate, announced dur…
Data Localisation Requirements in NCSC Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023)
Implemented NCSC Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023) including data localisation requirements
On 10 September 2026, the National Cyber Security Committee’s (NCSC) standards for the maintenance of cybersecurity in cloud computing systems B.E. 2566 (2023) enter into force. The standards mandate “high” impact information systems, which can have…
Cybersecurity regulation in NCSC Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023)
Implemented NCSC Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023) including cybersecurity regulations
On 10 September 2026, the National Cyber Security Committee’s (NCSC) standards for the maintenance of cybersecurity in cloud computing systems B.E. 2566 (2023) enter into force. The standards specify that Cloud Service Providers (CSPs) must implemen…
Content moderation regulation in Internet Code of Practice
Internet Code of Practice 2026, including content moderation regulation, enters into force
On 13 August 2026, the Internet Code of Practice 2026, including content moderation regulation, enters into force. The Code seeks to balance an open Internet with safeguards on privacy, child protection, harmful content, traffic management, and emer…
Fair marketing and advertising practices in Law on Digital Transformation, 2025
Law on Digital Transformation including fair marketing and advertising practices enters into force
On 1 July 2026, the Law on Digital Transformation enters into force. The Law sets out rules regarding marketing and advertising conduct for organisations operating digital systems and platforms. Article 38(1) requires the public and transparent disc…
Design requirements in Law on Digital Transformation, 2025
Law on Digital Transformation including design requirements enters into force
On 1 July 2026, the Law on Digital Transformation enters into force. The Law establishes design requirements for digital systems under Article 7. Article 7(1) requires systems to be designed based on digital platforms and shared components. Article …
Performance monitoring requirements in Law on Digital Transformation, 2025
Law on Digital Transformation including performance monitoring requirements enters into force
The Law on Digital Transformation includes performance monitoring requirements applicable to organisations operating digital systems and digital platforms. Article 4(1) confirms obligations to manage, measure, monitor, and audit digital transformati…
Testing requirement in Law on Digital Transformation, 2025
Law on Digital Transformation including testing requirement enters into force
On 1 July 2026, the Law on Digital Transformation enters into force. The Law includes testing-related provisions applicable to organisations participating in digital transformation. Article 4(6) establishes activities to research, test, pilot, evalu…
Government access to data in Law on Digital Transformation, 2025
Law on Digital Transformation including government access to data enters into force
On 1 July 2026, the Law on Digital Transformation enters into force. The Law establishes the obligation of organisations to coordinate with state agencies in verifying and sharing data and fulfilling obligations serving digital transformation as pre…