Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
533 events advancing 254 policy or regulatory changes:
Graph
Table
Cross-border data transfer regulation in Federal Law on Protection of Personal Data Held by Private Parties
Federal Law on the Protection of Personal Data Held by Private Parties including cross-border data transfer regulation enters into force
On 21 March 2025, the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) entered into force. The publication forms part of a legislative package that includes three separate Laws: the General Law on Transparency and Acc…
European Data Protection Supervisor opinion on Digital Trade Agreement between European Union and Singapore
European Data Protection Supervisor adopted opinion on Digital Trade Agreement between European Union and Singapore
On 21 March 2025, the European Data Protection Supervisor (EDPS) issued an opinion on the European Union (EU)-Singapore Digital Trade Agreement, highlighting concerns over changes to the EU’s horizontal provisions on cross-border data flows and pers…
Ministry of Culture, Sports, and Tourism procedure for notifying contact information of foreign entities providing cross-border advertising services into Vietnam
Ministry of Culture, Sports and Tourism’s Department of Broadcasting, Television and Electronic Information published procedure for notifying contact information of foreign entities providing cross-border advertising services into Vietnam
On 14 March 2025, the Ministry of Culture, Sports and Tourism’s Department of Broadcasting, Television and Electronic Information implemented a notification procedure for foreign organisations and individuals intending to provide cross-border advert…
European Data Protection Board Co-Operation procedure for approval of Binding Corporate Rules for controllers and processors under GDPR
European Data Protection Board published document outlining the approval procedure for Binding Corporate Rules
On 13 March 2025, the European Data Protection Board (EDPB) published a document outlining the Approval Procedure for Binding Corporate Rules (BCRs). The document provides a cooperation framework for the approval of BCRs under Article 47 GDPR, which…
Data Protection Authority guidance on cross-border data transfer to United States of America clarifying the adequacy decision with European Union
Data Protection Authority published guidance on cross-border data transfer to United States of America clarifying the adequacy decision with European Union
On 26 February 2025, the Norwegian Data Protection Authority published a guidance on cross-border data transfers to the United States of America (US). The guidance addresses the implementation of existing regulations under the cross-border data tran…
Data and Artificial Intelligence Authority risk assessment guideline for cross-border personal data transfers
Data and Artificial Intelligence Authority published risk assessment guideline for cross-border personal data transfers
In February 2025, the Data and Artificial Intelligence Authority (SDAIA) published its "Risk Assessment Guideline for Transferring Personal Data Outside the Kingdom", providing a framework for entities to assess risks associated with disclosing pers…
National Data Protection Authority assessment of data sharing adequacy decision between Ministry of Development and World Bank
National Data Protection Authority declined adequacy decision on data sharing between Ministry of Development and World Bank
On 13 February 2025, the Brazilian Data Protection Authority (ANPD) denied a request to initiate an adequacy decision for the World Bank – International Bank for Reconstruction and Development (IBRD). The ruling confirms that adequacy decisions req…
Data Protection Authority guidelines on standard contracts concerning cross-border data transfers
Data Protection Authority released guidelines on standard contracts concerning cross-border data transfers
On 5 February 2025, the Turkish Data Protection Authority (KVKK) published guidelines on standard contracts for the international transfer of personal data. The initiative concerns the validity of standard contracts used in the transfer of personal …
Personal Data Protection Committee's guidelines on compliance with ASEAN Cross-Border Data Flows Mechanism
Personal Data Protection Committee published guidelines on compliance with ASEAN Cross-Border Data Flows Mechanism
On 3 February 2025, the Personal Data Protection Committee (PDPC) of Thailand published guidelines on compliance with the ASEAN Cross-Border Data Flows (CBDF) mechanism. The guide outlines the ASEAN data protection frameworks, including Model Contra…
Dutch Data Protection Authority investigation into DeepSeek's cross-border data transfers compliance with General Data Protection Regulation
Data Protection Authority announced investigation into DeepSeek's data transfer compliance with General Data Protection Regulation
On 3 February 2025, the Dutch Data Protection Authority (AP) announced an investigation into DeepSeek's data transfer compliance with the General Data Protection Regulation. The investigation will examine whether DeepSeek is in compliance with the p…