Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
21 events advancing 16 policy or regulatory changes:
Graph
Table
Consumer Financial Protection Bureau Personal Financial Data Rights Rule
Implemented obligations for depository institutions that hold at least USD 10 billion in total assets outlined in Rule on Personal Financial Data Rights
On 1 April 2027, the final rule on personal financial data rights came into force for depository institutions that hold at least USD 10 billion in total assets but less than USD 250 billion or non-depository institutions that did not generate USD 10…
Guidance on material third party arrangements (FG26/4)
Guidance on material third party arrangements enters into force
On 18 March 2027, the guidance on material third-party arrangements (FG26/4) comes into force. It applies to designated investment firms, authorised electronic money or payment institutions, and other financial institutions. The guidance requires fi…
Central Bank of Brazil Resolution No. 520 regulating the formation and operation of companies providing virtual asset services
Stage I of user identification requirements in Central Bank of Brazil Resolution No. 520 regulating the formation and operation of companies providing virtual asset services enters into force
On 2 February 2027, Stage I of the implementation period for anti-money laundering requirements in the Central Bank of Brazil (BCB) Resolution No. 520 regulating the formation and operation of companies providing virtual asset services enters into f…
Guiding and Establishing National Innovation for US Stablecoins Act (GENIUS Act/SB 1582)
Guiding and Establishing National Innovation for US Stablecoins Act (GENIUS Act) conditionally enters into force
On 18 January 2027, the Guiding and Establishing National Innovation for US Stablecoins Act (GENIUS Act) enters into force, 18 months after its enactment on 18 July 2025. The Act takes effect on the earlier of that date or 120 days after the primary…
Data localisation requirement in circular introducing systemic oversight measures in Nigeria payments system (circular PSS/DIR/PUB/CIR/001/004)
Circular introducing systemic oversight measures in payments system including data localisation obligations enters into force
On 1 January 2027, the Central Bank of Nigeria’s circular introducing systemic oversight measures in Nigeria's payment system, establishing data localisation obligations, enters into force. The requirement applies to deposit money banks, microfinanc…
Market structure requirements in circular introducing systemic oversight measures in Nigeria payments system (circular PSS/DIR/PUB/CIR/001/004)
Circular introducing systemic oversight measures in payments system including market structure requirements enters into force
On 31 December 2026, the Central Bank of Nigeria’s circular introducing systemic oversight measures in Nigeria's payment system including market structure requirements enters into force. The requirements apply to deposit money banks, mobile money op…
Data protection measures in Directive on consumer credits
Implemented Consumer Credit Directive including data protection measures
On 20 November 2026, the Consumer Credit Directive, including data protection measures, was implemented. The Directive outlines the data that covered entities, including creditors, credit intermediaries and providers of crowdfunding credit services,…
Consumer protection regulation in Directive on consumer credits
Implemented Credit Directive including consumer protection regulations
On 20 November 2026, the Consumer Credit Directive, including consumer protection measures, was implemented. The Directive aims to ensure that consumers can make an informed choice when applying for credit and have easy access to necessary informati…
Authorisation of goods or services in Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025)
Transitional period for compliance with Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025) including authorisation requirement for virtual asset offerings expires
On 4 November 2026, the one-year transitional period under section 47 of the Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025) expires. From this date, all persons providing virtual asset services in or from Kenya must be in full complia…
User identification requirement in Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025)
Transitional period for compliance with Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025) including user identification requirement expires
On 4 November 2026, the one-year transitional period under section 47 of the Virtual Asset Service Providers Act 2025 (Act No. 20 of 2025) expires. From this date, all persons providing virtual asset services in or from Kenya are required to be in f…