Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
14 events advancing 14 policy or regulatory changes:
Graph
Table
VAT exemptions for certain internet access and web hosting services in Law No. 23-22
Terminated Article 70 of Law No. 23-22 relating to the finance law for 2024 including VAT exemptions for certain internet access and web hosting services
On 1 January 2027, the applicability of Article 70 of Law No. 23-22 relating to the finance law for 2024 expires. The tax exemption is no longer in effect. Article 70 amended Article 32 of Ordinance No. 10-01, relating to the supplementary finance l…
Cyber Trust Mark requirements in critical information infrastructure and cybersecurity industries
Obligation for auditors of critical information infrastructure to obtain Cyber Trust Mark Level 5 certification enters into force
On 31 December 2026, the window for compliance with the Cyber Security Agency (CSA) obligation directing Critical Information Infrastructure Auditors to have obtained the Cyber Trust Mark (CTM) Level 5 certification ends. This mandate, announced dur…
Data Localisation Requirements in NCSC Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023)
Implemented NCSC Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023) including data localisation requirements
On 10 September 2026, the National Cyber Security Committee’s (NCSC) standards for the maintenance of cybersecurity in cloud computing systems B.E. 2566 (2023) enter into force. The standards mandate “high” impact information systems, which can have…
Cybersecurity regulation in NCSC Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023)
Implemented NCSC Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023) including cybersecurity regulations
On 10 September 2026, the National Cyber Security Committee’s (NCSC) standards for the maintenance of cybersecurity in cloud computing systems B.E. 2566 (2023) enter into force. The standards specify that Cloud Service Providers (CSPs) must implemen…
Cybersecurity Act (No. 36764) implementing Directive on measures for a high common level of cybersecurity across the Union (NIS/2 Directive No. 2022/2555)
Cybersecurity Act (No. 36764) implementing Directive on measures for a high common level of cybersecurity across the Union (NIS 2 Directive No. 2022/2555) enters into force
On 15 August 2026, the Cybersecurity Act (No. 36764) implementing Directive on measures for a high common level of cybersecurity across the Union (Directive No. 2022/2555) enters into force. The Act lays down rules on managing risks to the security …
Critical Entities Resilience Act (No. 36765) implementing Directive on resilience of critical entities (Directive No. 2022/2557)
Critical Entities Resilience Act (No. 36765) implementing Directive on resilience of critical entities (Directive No. 2022/2557) enters into force
On 15 August 2026, the Critical Entities Resilience Act (No. 36765) implementing Directive on resilience of critical entities (Directive No. 2022/2557) enters into force. Under the Act, relevant ministers designate critical entities based on criteri…
Content moderation regulation in Internet Code of Practice
Internet Code of Practice 2026, including content moderation regulation, enters into force
On 13 August 2026, the Internet Code of Practice 2026, including content moderation regulation, enters into force. The Code seeks to balance an open Internet with safeguards on privacy, child protection, harmful content, traffic management, and emer…
Annual reporting format on implementation in blockchain services sector covering operational status and product offerings to support supervision and ecosystem mapping
Ministry of Communication and Digital Affairs closes consultation on annual reporting format on implementation in blockchain services sector covering operational status and product offerings to support supervision and ecosystem mapping
On 26 July 2026, the Ministry of Communication and Digital Affairs closes the consultation on the annual reporting format for the implementation of the blockchain sector. The reporting requirements would apply to business actors registered with the …
Infrastructure authority governance in Digital Infrastructure Bill 2026
Ministry of Digital Development and Information and Infocomm Media Development Authority close consultation on Digital Infrastructure Bill including infrastructure authority governance
On 22 July 2026, the Ministry of Digital Development and Information and the Infocomm Media Development Authority close the consultation on the Digital Infrastructure Bill. The Bill applies to major foundational digital infrastructure services, incl…
Local operations requirement in Digital Infrastructure Bill 2026
Ministry of Digital Development and Information and Infocomm Media Development Authority close consultation on Digital Infrastructure Bill including local operations requirement
On 22 July 2026, the Ministry of Digital Development and Information and the Infocomm Media Development Authority close the consultation on the Digital Infrastructure Bill. The Bill applies to major foundational digital infrastructure services, incl…