Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
168 events advancing 144 policy or regulatory changes:
Graph
Table
Cybersecurity Law Amendment
Cyberspace Administration of China closes consultation on Cybersecurity Law (Second Draft)
On 27 April 2025, the Cyberspace Administration of China closes its public consultation on the draft Law amending the Cybersecurity Law of the People's Republic of China. The amendments align the Cybersecurity Law with the Data Security Law, the Per…
National Commission on Informatics and Liberty recommendation on collecting multi-device consent
National Commission on Informatics and Liberty opened consultation on draft recommendation on collecting multi-device consent
On 24 April 2025, the National Commission on Informatics and Liberty (CNIL) opened a public consultation on its draft recommendation on collecting multi-device consent, also referred to as cross-device consent. The recommendation aims to guide stake…
Personal Information Protection Committee investigation into DeepSeek's data processing practices compliance with Personal Information Protection Act
Personal Information Protection Commission issued corrective measures regarding DeepSeek’s data processing practices
On 24 April 2025, the Personal Information Protection Commission (PIPC) announced the results of its preliminary investigation into DeepSeek. The PIPC issued corrective recommendations, including the requirement for DeepSeek to ensure legal grounds …
Data protection risk assessment in Communications Commission user protection evaluation
Communications Commission announced evaluations of telecom and online service providers including data protection risk assessment
On 23 April 2025, the Korea Communications Commission (KCC) announced that 47 companies were selected for the 2025 user protection evaluation, with new participants such as Temu and AliExpress joining returning platforms including Facebook, Instagra…
UK-Japan joint statement on data adequacy
UK and Japan signed joint statement on data adequacy
On 23 April 2025, Japan’s Personal Information Protection Commission and the United Kingdom’s Department for Science, Innovation and Technology signed a joint statement reaffirming their commitment to promoting free data flows with high standards of…
National Privacy Commission guidelines on biometric data
National Privacy Commission opened consultation on guidelines on biometric data
On 23 April 2025, the National Privacy Commission (NPC) launched a public consultation on the implementation of international data protection standards in the country until 30 May 2025. The initiative is part of the development of regulations under …
FTC Amendments to the Children's Online Privacy Protection Rule (COPPA)
Federal Trade Commission adopted final amendments to Children’s Online Privacy Protection Rule (COPPA Rule)
On 22 April 2025, the Federal Trade Commission (FTC) adopted final amendments to the Children’s Online Privacy Protection Rule (COPPA Rule), codified at 16 CFR Part 312, to enhance content moderation and data protection for children under 13 in digi…
Rules on data subject information and restrictions under European Commission Decision (EU) 2025/628 for supervision, investigation, enforcement and monitoring under Regulation (EU) 2022/2065
European Commission Decision (EU) 2025/628 including rules on data subject information and restrictions enters into force
On 21 April 2025, the Commission Decision (EU) 2025/628, which established internal regulations concerning the provision of information to data subjects and the limitation of certain data subjects' rights in relation to personal data processing unde…
Data localisation prohibition in ASEAN-Australia-New Zealand FTA Upgrade
ASEAN, Australia and New Zealand FTA Upgrade including data localisation prohibition entered into force
On 21 April 2025, the Upgrade to the ASEAN-Australia-New Zealand Free Trade Agreement (AANZFTA) entered into force, following its adoption on 21 August 2023. The Financial Services Annex prohibits parties from mandating the local storage of financia…
National Data Administration model contract for data intermediary services
National Data Administration opened consultation on draft model contract for data intermediary services
On 18 April 2025, the National Data Administration of China opened a consultation, set to close on 18 May 2025, on a draft model contract for data intermediary services. This contract sets forth terms for third-party entities that facilitate data tr…