Activity Tracker

The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.

1719 events advancing 1226 policy or regulatory changes:

Most active jurisdictions Number of policy changes

Graph

Table

Most active policy areas Number of policy changes
Targeted economic activity Number of policy changes
Reset filters
1719 events advancing 1226 policy or regulatory changes:
under deliberation

European Union-Australia Security and Defence Partnership

Latest event Date: 2025-06-17 treaty announcement

European Union and Australia announced opening of negotiations on Security and Defence Partnership

On 17 June 2025, the European Council President and the European Commission President, together with the Prime Minister of Australia, agreed to launch negotiations for a Security and Defence Partnership at the G7 Leaders’ Summit in Alberta, Canada. …

Implementer
European Union
Policy area Data governance
Policy or regulatory element Cybersecurity regulation
Economic activity cross-cutting
in force

Office of the Privacy Commissioner of Canada and UK Information Commissioner's Office joint investigation into 23andMe's compliance with cybersecurity regulations

Latest event Date: 2025-06-17 investigation ruling

UK Information Commissioner’s Office fined 23andMe GBP 2.31 million following joint investigation with Office of the Privacy Commissioner of Canada regarding compliance with cybersecurity regulations

On 17 June 2025, the UK Information Commissioner’s Office (ICO) and the Office of the Privacy Commissioner of Canada (OPC) concluded their joint investigation into 23andMe’s compliance with cybersecurity regulations, following a data breach reported…

Implementer
CanadaUnited Kingdom
Policy area Data governance
Policy or regulatory element Cybersecurity regulation
Economic activity other service provider
adopted

Conference of the Independent Data Protection Supervisory Authorities of the Federal and State Governments resolution on data protection requirements for outsourcing appointment management in healthcare

Latest event Date: 2025-06-16 declaration adoption

Conference of the Independent Data Protection Supervisory Authorities of the Federal and State Governments adopted resolution on data protection requirements for outsourcing appointment management in healthcare

On 16 June 2025, the Conference of the Independent Data Protection Authorities of the Federal and State Governments (DSK) adopted a resolution setting out data protection requirements for healthcare practices using external service providers for onl…

Implementer
Germany
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity other service provider
adopted

Conference of the Independent Data Protection Supervisory Authorities of the Federal and State Governments Resolution on confidential cloud computing

Latest event Date: 2025-06-16 declaration adoption

Conference of the Independent Data Protection Supervisory Authorities of the Federal and State Governments adopted Resolution on confidential cloud computing

On 16 June 2025, the Conference of the Independent Data Protection Supervisory Authorities of the Federal and State Governments (DSK) adopted a Resolution on confidential cloud computing, addressing its technical and security implications. The resol…

Implementer
Germany
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity infrastructure provider: cloud computing, storage and databases
Implementer
Germany
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity ML and AI development
Implementer
Germany
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity other service provider
adopted

Conference of Independent Data Protection Supervisory Authorities of the Federal and State Governments Model Guidelines for procedures on imposing fines by the data protection supervisory authorities under GDPR

Latest event Date: 2025-06-16 outline adoption

Conference of Independent Data Protection Supervisory Authorities of the Federal and State Governments adopted guidelines for procedures on imposing fines by the data protection supervisory authorities under GDPR

On 16 June 2025, the Conference of Independent Data Protection Supervisory Authorities of the Federal and State Governments (DSK) adopted the model guidelines for procedures on imposing fines by the data protection supervisory authorities (MRiDaVG),…

Implementer
Germany
Policy area Data governance
Policy or regulatory element Data protection authority governance
Economic activity cross-cutting
in consultation

Information Commissioner's Office guidance for consumer Internet of Things products and services

Latest event Date: 2025-06-16 outline consultation opened

Information Commissioner’s Office opened consultation on draft guidance for consumer Internet of Things products and services

On 16 June 2025, the Information Commissioner’s Office (ICO) opened a consultation on draft guidance for consumer Internet of Things products and services, alongside a draft impact assessment, until 7 September 2025. The consultation seeks stakehold…

Implementer
United Kingdom
Policy area Data governance
Policy or regulatory element Data protection regulation
Economic activity technological consumer goods, software provider: other software, infrastructure provider: cloud computing, storage and databases
under deliberation

EU Regulation laying down additional procedural rules relating to the enforcement of GDPR in cross-border cases

Latest event Date: 2025-06-16 law passage

Council and European Parliament reached an agreement on Regulation laying down additional procedural rules relating to the enforcement of GDPR

On 16 June 2025, the Council of the European Union and the European Parliament reached an agreement on the proposal for a regulation laying down additional procedural rules relating to the enforcement of the General Data Protection Regulation (GDPR)…

Implementer
European Union
Policy area Data governance
Policy or regulatory element Data protection authority governance
Economic activity cross-cutting
in force

Data localisation requirement in Reserve Bank's Digital Lending Directions, 2025 (No. RBI/2025-26/36)

Latest event Date: 2025-06-15 order implementation

Reserve Bank's Digital Lending Directions 2025, including reporting obligations for data localisation entered into force (No. RBI/2025-26/36)

On 15 June 2025, the Reserve Bank of India (Digital Lending) Directions, 2025 (RBI/2025-26/36), including data localisation reporting obligations, entered into force. The directions apply to regulated entities, including commercial banks, co-operati…

Implementer
India
Policy area Data governance
Policy or regulatory element Data localisation requirement
Economic activity other service provider
Page
1
2
...
123