Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
262 events advancing 229 policy or regulatory changes:
Graph
Table
Office of the Privacy Commissioner investigation into Loblaw Companies over alleged violations of personal information retention practices under Personal Information Protection and Electronic Documents Act
Office of the Privacy Commissioner found Loblaw Companies in violation of personal information retention practices
On 5 March 2026, the Office of the Privacy Commissioner of Canada published the findings of an investigation into Loblaw Companies regarding the retention of purchase histories linked to former members of the PC Optimum loyalty programme. The invest…
European Commission Implementing Regulation as regards applicable standards and specifications
European Commission closes consultation on draft implementing regulation as regards applicable standards and specifications
On 5 March 2026, the European Commission closes the consultation on the draft implementing regulation as regards applicable standards and specifications. The draft Commission implementing regulation would amend Implementing Regulation (EU) 2025/1569…
Office of the Privacy Commissioner investigation into Bunnings Group use of facial recognition technology
Privacy Commissioner issued statement on administrative tribunal's decision on Bunnings's use of facial recognition technology
On 5 March 2026, the Privacy Commissioner issued a statement on the administrative review tribunal’s decision on Bunnings’ use of facial recognition technology (FRT) under the Privacy Act. The Tribunal found that Bunnings’ use of FRT to address sign…
Cyber Security and Resilience Bill
Consultation on the Cyber Security and Resilience (Network and Information Systems) Bill closes
On 5 March 2026, the public consultation on the Cyber Security and Resilience (Network and Information Systems) Bill closes. The Bill was introduced to the House of Commons on 12 November 2025 and would update the Network and Information Systems (NI…
European Union-Canada Digital Trade Agreement
European Union and Canada launched negotiations for Digital Trade Agreement
On 4 March 2026, the European Union and Canada launched negotiations for a Digital Trade Agreement (DTA) to facilitate cross-border digital trade. The DTA aims to update the existing trade framework between the parties by establishing rules for the …
Data Brokers Market Study
European Data Protection Board released Data Brokers Market Study
On 4 March 2026, the European Data Protection Board (EDPB) released the Data Brokers Market Study, commissioned by the Belgian Supervisory Authority (BE SA) through the EDPB Support Pool of Experts Programme. The study identified data brokers and da…
Cyber Security Rules 2025 for Smart Devices
Cyber Security Rules 2025 for Smart Devices enter into force
On 4 March 2026, the Cyber Security (Security Standards for Smart Devices) Rules 2025, covering consumer-grade smart devices enter into force. The rules establish mandatory security standards for consumer-grade connectable products acquired in Austr…
2024 Personal Information Processing Policy Evaluation Plan
Personal Information Protection Commission issued recommendations to rectify shortcomings in generative AI privacy policies
On 4 March 2026, the Personal Information Protection Commission (PIPC) issued recommendations following discussions with generative AI companies on improving personal information handling policies to increase transparency in Artificial Intelligence …
Guideline on cybersecurity requirements for consumer-type connected cameras with cybersecurity identification
National Cybersecurity Standardisation Technical Committee opened consultation on guideline on cybersecurity requirements for consumer-type connected cameras with cybersecurity identification
On 3 March 2026, the National Cybersecurity Standardisation Technical Committee opened a consultation on a guideline on cybersecurity requirements for consumer connected cameras with cybersecurity identification, until 17 March 2026. The guideline a…
Global Coalition on Telecommunications' 6G security and resilience principles
Global Coalition on Telecommunications' 6G security and resilience principles was adopted
On 3 March 2026, the telecommunications authorities from Japan, the United Kingdom, Australia, Canada, and the United States adopted the Global Coalition on Telecommunications' 6G security and resilience principles. The principles outline security a…