Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
2278 events advancing 1728 policy or regulatory changes:
Graph
Table
Act on protection of minors against access to harmful content on the Internet
Ministry of Digitalisation closes consultation on draft Act on protection of minors against access to harmful content on the Internet
On 26 March 2025, the Ministry of Digitalisation closes its public consultation on the draft Act on the protection of minors against access to harmful content on the Internet. The draft Act aims to limit minors' access to pornographic content and in…
National Commission on Informatics and Liberty recommendation on use of location data from connected vehicles
National Commission on Informatics and Liberty opened consultation on draft recommendation on use of location data from connected vehicles
On 25 March 2025, the National Commission on Informatics and Liberty (CNIL) initiated a public consultation, set to close on 20 May 2025, on a draft recommendation focused on location data usage by connected vehicles in the technological consumer go…
Regulation (EU) 2025/327 establishing a European Health Data Space (EHDS) including rules for portability and sharing of health data
European Health Data Space (EHDS) Regulation (2025/327) enters into force with grace period
On 25 March 2025, the European Health Data Space (EHDS) Regulation (2025/327) entered into force with a grace period. The Regulation facilitates access to electronic health data for primary use in healthcare and secondary use for research, policy ma…
Privacy Protection Authority statement on implementation of consent principle
Privacy Protection Authority closes consultation on statement on implementation of consent principle
On 24 March 2025, the Privacy Protection Authority of Israel closes a public consultation on the statement clarifying the application of the consent principle under national data protection laws. The statement reflects the legal interpretation that …
Testing requirements in Act on the development, deployment and use of high-risk artificial intelligence (HB 2094)
High-Risk Artificial Intelligence Developer and Deployer Act including testing requirements (HB 2094) was vetoed by Governor
On 24 March 2025, the Virginia Governor vetoed the Act on the development, deployment, and use of high-risk artificial intelligence (AI). The Act would have outlined the responsibilities of developers and deployers of AI. In particular, it would hav…
Design requirements in Act on development, deployment and use of high-risk artificial intelligence (HB 2094)
Act on the development, deployment and use of high-risk artificial intelligence including design requirements (HB 2094) was vetoed by Governor
On 24 March 2025, the Virginia Governor vetoed the Act on the development, deployment, and use of high-risk artificial intelligence (AI). The Act would have applied to developers and deployers of high-risk AI systems in Virginia. It would have requi…
Prudential Regulation Authority inquiry into firms' exposure to cryptoassets
Closed consultation on Prudential Regulation Authority inquiry into firms' exposure to cryptoassets
On 24 March 2025, the Prudential Regulation Authority (PRA) closes its data request to gather information on firms' current expected future crypto-asset exposures and their application of the Basel framework for the prudential treatment of cryptoass…
National Institute of Standards and Technology's Guidance on Adversarial Machine Learning Threats
Published updated NIST Guidance on Adversarial Machine Learning Threats (NIST.AI.100-2 E2025)
On 24 March 2025, the National Institute of Standards and Technology (NIST) published an updated version of Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations (NIST.AI.100-2 E2025). This provides an update from the i…
OMB guidance on advancing responsible acquisition of Artificial Intelligence in government
Implemented obligation to submit progress reports outlined in OMB guidance on advancing responsible acquisition of Artificial Intelligence in government
On 23 March 2025, the guidance on advancing responsible acquisition of Artificial Intelligence (AI) in government issued by the United States Office of Management and Budget enters into force. The guidance highlights that the chief AI officers of ag…
Lawsuit challenging personal data processing by Meta for direct marketing (Tanya O'Carroll v Meta Platforms)
Information Commissioner's Office issued statement on lawsuit challenging personal data processing by Meta for direct marketing
On 22 March 2025, the UK Information Commissioner's Office (ICO) issued a statement on the O’Carroll v Meta case. The lawsuit alleged that the company unlawfully processed personal data for direct marketing purposes. Under Article 21 of the United K…