Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
13 events advancing 12 policy or regulatory changes:
Graph
Table
Consumer Financial Protection Bureau Personal Financial Data Rights Rule
Implemented obligations for depository institutions that hold at least USD 10 billion in total assets outlined in Rule on Personal Financial Data Rights
On 1 April 2027, the final rule on personal financial data rights came into force for depository institutions that hold at least USD 10 billion in total assets but less than USD 250 billion or non-depository institutions that did not generate USD 10…
Guidance on material third party arrangements (FG26/4)
Guidance on material third party arrangements enters into force
On 18 March 2027, the guidance on material third-party arrangements (FG26/4) comes into force. It applies to designated investment firms, authorised electronic money or payment institutions, and other financial institutions. The guidance requires fi…
Central Bank of Brazil Resolution No. 520 regulating the formation and operation of companies providing virtual asset services
Stage I of user identification requirements in Central Bank of Brazil Resolution No. 520 regulating the formation and operation of companies providing virtual asset services enters into force
On 2 February 2027, Stage I of the implementation period for anti-money laundering requirements in the Central Bank of Brazil (BCB) Resolution No. 520 regulating the formation and operation of companies providing virtual asset services enters into f…
Data protection measures in Directive on consumer credits
Implemented Consumer Credit Directive including data protection measures
On 20 November 2026, the Consumer Credit Directive, including data protection measures, was implemented. The Directive outlines the data that covered entities, including creditors, credit intermediaries and providers of crowdfunding credit services,…
Consumer protection regulation in Directive on consumer credits
Implemented Credit Directive including consumer protection regulations
On 20 November 2026, the Consumer Credit Directive, including consumer protection measures, was implemented. The Directive aims to ensure that consumers can make an informed choice when applying for credit and have easy access to necessary informati…
Authorisation of goods or services in Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025)
Transitional period for compliance with Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025) including authorisation requirement for virtual asset offerings expires
On 4 November 2026, the one-year transitional period under section 47 of the Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025) expires. From this date, all persons providing virtual asset services in or from Kenya must be in full complia…
User identification requirement in Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025)
Transitional period for compliance with Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025) including user identification requirement expires
On 4 November 2026, the one-year transitional period under section 47 of the Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025) expires. From this date, all persons providing virtual asset services in or from Kenya are required to be in f…
Prohibition of goods and services in Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025)
Transitional period for compliance with Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025) including prohibition of mixer and tumbler services expires
On 4 November 2026, the one-year transitional period under section 47 of the Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025) expires. From this date, all virtual asset service providers in or from Kenya are required to be in full compl…
Operational license requirement in Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025)
Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025) including licensing requirement enters into force for existing providers
On 4 November 2026, the one-year transitional period under section 48 of the Virtual Asset Service Providers Act, 2025 (Act No. 20 of 2025) expires. From this date, all persons providing virtual asset services in or from Kenya must hold a valid lice…
Evaluation of Regulation on markets in crypto assets
European Commission closes consultation as part of evaluation of Regulation on markets in crypto assets
On 31 August 2026, the European Commission closes the consultation as part of the evaluation of the Regulation on markets in crypto assets. Under Regulation, the Commission is required to monitor and report on its application and on broader developm…