Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
27 events advancing 22 policy or regulatory changes:
Graph
Table
Principles for secure integration of AI in operational technology
Cyber Security Centre and Cybersecurity alongside international partners issued principles for secure integration of AI in operational technology
On 4 December 2025, the Australian Cyber Security Centre (ACSC) and the Cybersecurity and Infrastructure Security Agency (CISA) adopted principles for the secure integration of artificial intelligence (AI) in operational technology. The principles p…
Lawsuit concerning access obligations under Directive (EU) 2018/1972 establishing the European Electronic Communications Code (Telekom Deutschland GmbH v Bundesrepublik Deutschland /Case C-327/24)
Court of Justice of the European Union issued ruling on access obligations under European Electronic Communications clarifying that such obligations must be necessary, proportionate, and aimed at ensuring competition
On 20 November 2025, the Court of Justice of the European Union issued its ruling in Telekom Deutschland GmbH v Bundesrepublik Deutschland (Case C-327/24). The Court held that, when deciding whether to impose an access obligation for civil engineeri…
Cybersecurity (Critical Information Infrastructure) (Amendment) Regulations
Cybersecurity (Critical Information Infrastructure) (Amendment) Regulations entered into force
On 31 October 2025, the Cybersecurity (Critical Information Infrastructure) (Amendment) Regulations 2025 entered into force. The Amendment revises definitions to cover owner-controlled interconnected and non-interconnected systems, supplier-controll…
Merger control regulation in National Information Technology Authority Bill, 2025
Ministry of Communication, Digital Technology and Innovations closes consultation on National Information Technology Authority Bill, 2025 including merger control regulation
On 31 October 2025, the Ministry of Communication, Digital Technology and Innovations closes a consultation on the draft National Information Technology Authority Bill, including merger control regulation. The Bill would establish a National Informa…
Operational license requirement in National Information Technology Authority Bill, 2025
Ministry of Communication, Digital Technology and Innovations closes consultation on National Information Technology Authority Bill, 2025 including operational license requirement
On 31 October 2025, the Ministry of Communication, Digital Technology and Innovations closes the consultation on the draft National Information Technology Authority Bill, including operational license requirements. The Act would establish a National…
Cybersecurity (Amendment) Bill
Cybersecurity (Amendment) Act provisions expanding regulatory oversight to third-party-owned infrastructure, temporary cybersecurity concern systems and entities of special cybersecurity interest entered into force
On 31 October 2025, sections 2 to 15, 18, 19, 22, 23(b), 24, 25, 28(a) to (g), 29, 31 and 32(1) to (4), (6) and (7) of the Cybersecurity (Amendment) Act 2024 entered into operation pursuant to the Cybersecurity (Amendment) Act 2024 (Commencement) No…
United States and Japan memorandum of cooperation regarding Technology Prosperity Deal
Governments of United States and Japan signed memorandum of cooperation regarding Technology Prosperity Deal
On 28 October 2025, the Governments of the United States and Japan signed a Memorandum of Cooperation (MOC) in Tokyo under the Technology Prosperity Deal. The MOC establishes collaboration in science and technology across several areas, including ar…
American AI Exports Program
International Trade Administration announced development of American AI Exports Program
On 21 October 2025, the International Trade Administration announced the development of the American AI Exports Program under Executive Order 14320, Promoting the Export of the American AI Technology Stack. The programme aims to support the global d…
Signals Directorate's Critifical Infrastructure Fortify guidance for operators
Signals Directorate published Critifical Infrastructure Fortify guidance for operators
On 13 October 2025, the Australian Signals Directorate (ASD) released "Critical Infrastructure (CI) Fortify," a guidance document for CI operators. It applies to large organisations and government entities managing operational technology (OT) and es…
European Data Protection Board recommendations on calculating audit cycle in EU Large-Scale IT Systems
European Data Protection Board released recommendations on calculating audit cycle in EU Large-Scale IT Systems
On 3 October 2025, the European Data Protection Board (EDPB) adopted the recommendations on calculating the audit cycle in EU Large-Scale IT Systems, which set out guidance for Supervisory Authorities and Schengen evaluation teams on the application…