Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
18 events advancing 15 policy or regulatory changes:
Graph
Table
Cyber Trust Mark requirements in critical information infrastructure and cybersecurity industries
Cyber Security Agency adopted Cyber Trust Mark Level 5 requirement for Critical Information Infrastructure Owners and auditors
On 2 March 2026, the Cyber Security Agency (CSA) adopted a requirement for Critical Information Infrastructure Owners (CIIOs) and CII auditors to obtain the Cyber Trust Mark (CTM) Level 5 certification. The mandate aims to establish a consistent nat…
Assessment of Google's request to transfer high-precision national maps overseas
Inter-Agency Consultative Body on Overseas Transfer of Survey Results approved Google’s application to export scale map data
On 27 February 2026, the Inter-Agency Consultative Body on Overseas Transfer of Survey Results approved Google’s application to export 1:5,000 scale map data under the Spatial Information Management Act, subject to security conditions. The approval …
Dual-use export control restrictions concerning 20 Japanese entities (Announcement No. 12 of 2026)
Ministry of Commerce adopted export control concern list including 20 Japanese entities under enhanced dual-use export scrutiny (Announcement No. 12 of 2026)
On 24 February 2026, the Ministry of Commerce (MOFCOM) adopted Announcement No. 12 of 2026, adding 20 Japanese entities to the export control concern list due to the inability to verify the end users and end uses of dual-use items. Listed entities, …
Export control order including 20 Japanese entities under dual-use export control restrictions (Announcement No. 11 of 2026)
Ministry of Commerce adopted export control order including 20 Japanese entities under dual-use export control restrictions (Announcement No. 11 of 2026)
On 24 February 2026, the Ministry of Commerce (MOFCOM) adopted Announcement No. 11 of 2026, placing 20 Japanese entities on an export control list. The measure prohibits export operators from exporting dual-use items to the listed entities, includin…
Guidance on quantum technology pertaining to computing
Cyber Security Centre adopted guidance on quantum technology pertaining to computing
On 19 February 2026, the Cyber Security Centre adopted the guidance on quantum technology pertaining to computing. The guidance explains how quantum computing may affect cybersecurity and calls for early preparedness for post-quantum risks. It appli…
European Commission Action Plan on Drone and Counter Drone Security
European Commission adopted action plan on drone and counter drone security
On 11 February 2026, the European Commission adopted the Action Plan on Drone and Counter-Drone Security to establish a coordinated approach to drone threats across the European Union. The plan covers five areas. It includes public procurement measu…
Communications Commission review of National Telecommunications Policy 2000
Communications Commission opened consultation on review of National Telecommunications Policy 2000
On 9 February 2026, the Nigerian Communications Commission opened a public consultation on proposals to review the National Telecommunications Policy 2000, until 20 March 2026. The proposed reforms apply to telecommunications licensees, digital serv…
Performance monitoring requirement in Critical Infrastructure (Resilience, Protection and Accountability) Bill, 2026 (No. 6 of 2026)
Critical Infrastructure (Resilience, Protection and Accountability) Bill, 2026 including performance monitoring requirement was introduced to Council of States
On 6 February 2026, the Critical Infrastructure (Resilience, Protection and Accountability) Bill, 2026 was introduced to the Council of States of the Parliament of India. The Bill establishes a framework for the identification, designation, protecti…
Cybersecurity regulation in Critical Infrastructure (Resilience, Protection and Accountability) Bill, 2026 (No. 6 of 2026)
Critical Infrastructure (Resilience, Protection and Accountability) Bill, 2026 including cybersecurity regulation was introduced to Council of States
On 6 January 2026, the Critical Infrastructure (Resilience, Protection and Accountability) Bill, 2026 was introduced to the Council of States of the Parliament of India. The Bill would establish a framework for the identification, designation, prote…
Quality of service requirement in Cyberspace Administration implementation opinions on improving convenience of digital services for inbound personnel
Cyberspace Administration adopted implementation opinions on improving convenience of digital services for inbound personnel including quality of service requirement
On 5 February 2026, the Cyberspace Administration of China issued the Implementation Opinions on Enhancing the Convenience of Digital Services for Inbound Foreign Nationals, which set out quality of service requirements for digital services used by …