Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
1824 events advancing 1245 policy or regulatory changes:
Graph
Table
PPA Guide on log file retention in databases with medium and high-security levels
Adopted PPA Guide on log file retention in databases with medium and high-security levels
On 29 September 2024, the Privacy Protection Authority of Israel published the guide to log file retention in databases with medium and high-security levels. The guide applies to companies, businesses, and public entities that manage sensitive datab…
Expansion of Cybersecurity Regulation Compliance for Telecom Providers
Adopted Anatel order expanding cybersecurity regulation compliance for telecom providers (Ordinance No. 2899/2024)
On 27 September 2024, the National Telecommunications Agency (Anatel) in Brazil adopted Ordinance No. 2899/2024, expanding cybersecurity regulation compliance for telecom providers. This ordinance expands the list of telecommunications providers an…
FCC investigation into T-Mobile for alleged data breaches
Issued consent decree with T-Mobile addressing data breaches including enhanced corporate governance requirements
On 27 September 2024, the Federal Communications Commission (FCC) adopted a consent decree with T-Mobile to resolve its investigation into various data breaches by the company. FCC noted that T-Mobile experienced data breaches in 2021, 2022, and 20…
PIPC and CNIL Cooperation on AI Policy
Adopted Statement on PIPC and CNIL Cooperation on AI Policy
On 27 September 2024, the Personal Information Protection Commission (PIPC) of the Republic of Korea and the French National Information and Freedom Commission (CNIL) held the 3rd Artificial Intelligence (AI) Policy Council meeting in Paris, France.…
Irish Data Protection Commisssion investigation into Meta for storing social media passwords without cryptographic protection or encryption
Issued Irish DPC EUR 91 million fine against Meta for storing social media passwords without cryptographic protection or encryption
On 27 September 2024, the Irish Data Protection Commission (DPC) announced its decision to fine Meta with EUR 91 million for storing passwords of social media users without cryptographic protection or encryption (in “plaintext”) on its internal syst…
Telecommunications (Telecom Cyber Security) Rules, 2024
Consultation closed on Telecommunications (Telecom Cyber Security) Rules, 2024
On 27 September 2024, the Central Government of India initiated a public consultation on the Draft Telecommunications (Telecom Cyber Security) Rules, 2024. The Draft Rules, underpinned by the Telecommunications Act, 2023, mandate that telecommunicat…
Telecommunications of Critical Telecommunication Infrastructure Rules, 2024
Closed consultation on Draft Telecommunications of Critical Infrastructure Rules
On 27 September 2024, the consultation period on the Draft Telecommunications of Critical Telecommunication Infrastructure Rules, 2024 closes. This initiative, under the Telecommunications Act, 2023, outline regulations for managing and securing cri…
Draft Rules to Partially Amend the Enforcement Regulations of the Act on the Protection of Personal Information
Closed consultation on Draft Rules to Partially Amend the Enforcement Regulations of the Act on the Protection of Personal Information
On 27 September 2024, the Japanese Government closes its public consultation on Draft Rules to Partially Amend the Enforcement Regulations of the Act on the Protection of Personal Information. Specifically, the Draft Rules aim to amend the process f…
Datatilsynet investigation into Dansk Retursystem's app "Pant" for alleged unauthorised processing of sensitive user financial information
Issued ruling in Datatilsynet investigation into Dansk Retursystem's app "Pant" for alleged unauthorised processing of sensitive user financial information
On 26 September 2024, the Danish Data Protection Authority (Datatilsynet) issued a decision in an investigation into Dansk Retursystem's mortgage app, 'Pant' for unauthorised processing of sensitive user financial information. The investigation focu…
Lower Saxony data protection authority legal assessment of Volkswagen AG on new data processing procedures in customer vehicles
Announced Lower Saxony data protection authority legal assessment of Volkswagen AG on new data processing procedures in customer vehicles
On 26 September 2024, the state commissioner for data protection in Lower Saxony announced that, along with the data protection supervisory authorities in Baden-Württemberg and Bavaria, it was engaged in an exchange with Volkswagen AG and its subsid…