Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
209 events advancing 177 policy or regulatory changes:
Graph
Table
Data Portability under Personal Data Protection (Amendment) Act 2024
Closed consultation on data portability regulation
On 6 September 2024, the Malaysian Department of Personal Data Protection closed its public consultation on Paper No. 3/2024 in relation to amendments to the Personal Data Protection Act. In particular, the consultation focuses in the introduction o…
Data Breach Notification under Personal Data Protection (Amendment) Act 2024
Closed consultation on data breach notification regulation
On 6 September 2024, the Malaysian Department of Personal Data Protection closed its public consultation on Paper No. 1/2024 in relation to amendments to the Personal Data Protection Act. In particular, the consultation focuses in the introduction o…
Appointment of Data Protection Officer under Personal Data Protection (Amendment) Act 2024
Closed consultation on regulation for appointment of personal data protection officer
On 6 September 2024, the Malaysian Department of Personal Data Protection closed its public consultation on Paper No. 2/2024 in relation to amendments to the Personal Data Protection Act. In particular, the consultation focuses in the introduction o…
European Commission review of EU-US Data Privacy Framework
Closed consultation on functioning of EU-US Data Privacy Framework
On 6 September 2024, the European Commission closes a public consultation on the functioning of the EU-US Data Privacy Framework. The Commission is required to issue a report on the adequacy decision adopted in July 2023 aimed at enhancing data prot…
Data Protection Commission lawsuit against X's processing of personal data for training its AI tool Grok
Announced conclusion of DPC lawsuit against X’s processing of personal data for training its AI tool Grok
On 4 September 2024, the Irish Data Protection Commission (DPC) announced the conclusion of the proceedings before the Irish High Court filed on 8 August 2024 against X for processing personal data harvested from the public posts of its European Eco…
Investigation into Clearview AI regarding illegal data collection for facial recognition
Issued ruling in Investigation into Clearview AI regarding illegal data collection for facial recognition
On 3 September 2024, the Dutch Data Protection Authority issued a ruling in its investigation into the American company Clearview AI which offers facial recognition AI services. Allegedly, Clearview AI has an illegal database with billions of facial…
National Standards for Intelligent Connected Vehicles
Adopted Standards for Intelligent Connected Vehicles
On 2 September 2024, the Ministry of Industry and Information Technology (MIIT) announced the adoption, by the State Administration for Market Regulation and the Standardization Administration of China, of three mandatory national standards aimed at…
ACSC Advisory on Information Stealer Malware
Published ACSC Advisory on Information Stealer Malware
On 2 September 2024, the Australian Cyber Security Centre (ACSC) published an Advisory on Information Stealer Malware. The Advisory provides information on so-called Information Stealer Malware, which is used by cybercriminals to collect information…
Anatel amendment to cybersecurity regulation for telecommunications sector (Resolution No. 767)
Implemented Anatel amendment to cybersecurity regulation for telecommunications sector (Resolution No. 767)
On 2 September 2024, Resolution No. 767, which adopts amendments to the cybersecurity regulation for the telecommunications sector, enters into force. The resolution expands the scope of the regulations to cover all telecommunications providers, inc…
SDAIA guide on preparation of binding common rules for transfer of personal data
Implemented SDAIA Guidelines for Binding Common Rules (BCR) for Personal Data Transfer
On 2 September 2024, the Guidelines for Binding Common Rules (BCR) for Personal Data Transfer issued by the Saudi Arabia Authority for Data and Artificial Intelligence (SDAIA) entered into force. The Guidelines clarify the obligations of entities tr…