Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
56 events advancing 49 policy or regulatory changes:
Graph
Table
Consumer Financial Protection Bureau Personal Financial Data Rights Rule
Implemented obligations for depository institutions that hold at least USD 10 billion in total assets outlined in Rule on Personal Financial Data Rights
On 1 April 2027, the final rule on personal financial data rights came into force for depository institutions that hold at least USD 10 billion in total assets but less than USD 250 billion or non-depository institutions that did not generate USD 10…
Privacy Protection Act (A6309)
Section 6 of the Privacy Protection Act (A6309) enters into force
On 1 February 2027, Section 6 of the Privacy Protection Act (A6309) enters into force, regulating the collection and sharing of personal information by health care facilities. The provisions prohibit health care facilities from requesting or collect…
Guiding and Establishing National Innovation for US Stablecoins Act (GENIUS Act/SB 1582)
Guiding and Establishing National Innovation for US Stablecoins Act (GENIUS Act) conditionally enters into force
On 18 January 2027, the Guiding and Establishing National Innovation for US Stablecoins Act (GENIUS Act) enters into force, 18 months after its enactment on 18 July 2025. The Act takes effect on the earlier of that date or 120 days after the primary…
Data protection authority governance in Louisiana Data Privacy Act (Senate Bill No. 386)
Louisiana Data Privacy Act (Act No. 502) including data protection authority governance enters into force
On 1 January 2027, the Louisiana Data Privacy Act (Act No. 502) enters into force as Chapter 20-B of Title 51 of the Louisiana Revised Statutes (R.S. 51:1780.1 to 1780.5). The attorney general has exclusive authority to enforce the Act, with any vio…
Design requirement in Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263)
Design requirements under Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263) enter into force
On 1 January 2027, the design obligations under the Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263) enter into force. As signed into law on 29 May 2026 and in force since 12 Augu…
Content moderation regulation in Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263)
Content moderation obligations under Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263) enter into force
On 1 January 2027, the content moderation obligations for minors under the Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263) enter into force. As signed into law on 29 May 2026 and…
Data protection regulation for minors in Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263)
Data protection obligations under Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263) enter into force
On 1 January 2027, the data protection obligations for minors under the Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263) apply. As signed into law on 29 May 2026 and in force sinc…
Fair marketing and advertising practice requirement in Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263)
Fair marketing and advertising practice obligations under Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263) enter into force
On 1 January 2027, the false representation prohibition under the Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263) applies. As signed into law on 29 May 2026 and in force since 12…
Age verification requirement in Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263)
Age verification obligations under Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263) enter into force
On 1 January 2027, the age verification obligations under the Colorado Bill concerning requirements for an operator of a conversational artificial intelligence service (HB 26-1263) apply. As signed into law on 29 May 2026 and in force since 12 Augus…
Cybersecurity regulation in Louisiana Data Privacy Act (Senate Bill No. 386)
Louisiana Data Privacy Act (Act No. 502) including cybersecurity regulation enters into force
On 1 January 2027, the Louisiana Data Privacy Act (Act No. 502) enters into force as Chapter 20-B of Title 51 of the Louisiana Revised Statutes (R.S. 51:1780.1 to 1780.5). Controllers must establish, implement and maintain reasonable administrative,…