Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
266 events advancing 233 policy or regulatory changes:
Graph
Table
Public procurement access in Law on Promoting Private Economy
Law on Promoting Private Economy including public procurement access enters into force
On 20 May 2025, the Law on Promoting Private Economy enters into force. The Law stipulates that public procurement and other public resource transactions must be conducted in an open and transparent manner, and that all economic organisations, inclu…
National Commission on Informatics and Liberty recommendation on use of location data from connected vehicles
National Commission on Informatics and Liberty closes consultation on draft recommendation on use of location data from connected vehicles
On 20 May 2025, the National Commission on Informatics and Liberty (CNIL) closes its consultation on a draft recommendation focused on location data usage by connected vehicles in the technological consumer goods sector. The draft offers practical g…
Australian Cyber Security Centre guidance on geo-blocking
Australian Cyber Security Centre released guidance on geo-blocking
On 19 May 2025, the Australian Cyber Security Centre (ACSC) released guidance on geographical-based Internet Protocol blocking (geo-blocking). The guidance aims to provide an overview of geo-blocking and emphasises its limitations, highlighting the …
National Cybersecurity Standardization Technical Committee cybersecurity incident management standard: principles and processes
National Cybersecurity Standardisation Technical Committee closes consultation on cybersecurity incident management standard: principles and processes
On 19 May 2025, the National Cybersecurity Standardisation Technical Committee (TC260) closes its consultation on the draft on cybersecurity incident management standard: principles and processes. This standard, which replaces GB/T 20985.1-2017, pro…
National Cybersecurity Standardisation Technical Committee standard on requirements for audit and certification bodies for cybersecurity technology information security management system
National Cybersecurity Standardisation Technical Committee closes consultation on requirements for audit and certification bodies for cybersecurity technology information security management system
On 19 May 2025, China's National Cybersecurity Standardisation Technical Committee (TC 260) closes its consultation on the standard on requirements for audit and certification bodies for cybersecurity technology information security management syste…
National Cybersecurity Standardisation Technical Committee standard on cybersecurity incident management: guidelines for incident response planning and preparation
National Cybersecurity Standardisation Technical Committee closes consultation on cybersecurity incident management standard: guidelines for incident response planning and preparation
On 19 May 2025, the National Cybersecurity Standardisation Technical Committee (TC260) closes a public consultation on cybersecurity incident management standard: Guidelines for incident response planning and preparation. The guidelines apply to org…
Personal Data Protection Department automated decision-making and profiling guideline
Personal Data Protection Department closes consultation on automated decision-making and profiling guideline
On 19 May 2025, the Data Protection Authority closes its consultation on the automated decision-making and profiling guidelines under Malaysia’s Personal Data Protection Act 2010 (Act 709). The guidelines aim to provide clarity on the use of artific…
Personal Data Protection Department data protection by design guideline
Personal Data Protection Department closes consultation on data protection by design guideline
On 19 May 2025, the Personal Data Protection Department closes its consultation on data protection by design guidelines to support compliance with Malaysia’s Personal Data Protection Act (Act 709). The guidelines promote a shift from reactive to pro…
Personal Data Protection Department data protection impact assessment guideline
Personal Data Protection Department closes consultation on data protection impact assessment guideline
On 19 May 2025, Malaysia's Personal Data Protection Department closes its consultation on the data protection impact assessment (DPIA) guidelines under Malaysia’s Personal Data Protection Act 2010 (Act 709). The guideline outlines minimum requiremen…
Data protection investigation into Luka/Replika
Data Protection Authority fined Replika chatbot provider Luka EUR 5 million for GDPR violations related to legal basis for data processing and age verification
On 19 May 2025, the Italian Data Protection Authority (DPA) announced that it had fined Luka, the provider of the artificial intelligence chatbot Replika, EUR 5 million for violating the General Data Protection Regulation (GDPR). The DPA identified …