Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
46 events advancing 45 policy or regulatory changes:
Graph
Table
Excel
CSV
Excel
CSV
Excel
CSV
Cybersecurity regulations in FDA Guidance on Artificial Intelligence-Enabled Device Software Functions
Closed consultation on FDA draft Guidance on Artificial Intelligence-Enabled Device Software Functions including cybersecurity regulations
On 7 April 2025, the Food and Drug Administration (FDA) closes the public consultation on its draft Guidance for Industry and FDA Staff regarding the cybersecurity regulations for Artificial Intelligence-Enabled Device Software Functions. The draft …
Rules on data subject information and restrictions under European Commission Decision (EU) 2025/628 for supervision, investigation, enforcement and monitoring under Regulation (EU) 2022/2065
European Commission adopted Decision (EU) 2025/628 including rules on data subject information and restrictions
On 31 March 2025, the European Commission adopted Commission Decision (EU) 2025/628, which established internal regulations concerning the provision of information to data subjects and the limitation of certain data subjects' rights in relation to p…
Cybersecurity Law Amendment
Cyberspace Administration of China opened consultation on Cybersecurity Law (Second Draft)
On 28 March 2025, the Cyberspace Administration of China, in cooperation with the relevant departments, initiated a public consultation on the Cybersecurity Law of the People's Republic of China (Second Draft for Comment). The consultation will rema…
Data protection authority governance in Utah Digital Choice Act (HB 418)
Utah Digital Choice Act (HB 418) including data protection authority governance was signed by Governor
On 27 March 2025, the Utah Digital Choice Act (HB 418) was signed by the Governor. The Act establishes regulatory requirements concerning the control, access, and transfer of personal data on social media platforms. It grants the Division of Consume…
National Commission on Informatics and Liberty recommendation on use of location data from connected vehicles
National Commission on Informatics and Liberty opened consultation on draft recommendation on use of location data from connected vehicles
On 25 March 2025, the National Commission on Informatics and Liberty (CNIL) initiated a public consultation, set to close on 20 May 2025, on a draft recommendation focused on location data usage by connected vehicles in the technological consumer go…
Data protection regulation in Act amending Consumer Protection Act with provisions on personally identifiable reproductive or sexual health information (SB 754)
Act amending Consumer Protection Act with provisions on personally identifiable reproductive or sexual health information (SB 754) including data protection regulation was signed by Governor
On 24 March 2025, the Act amending the Code of Virginia on Virginia Consumer Protection Act, including personally identifiable reproductive or sexual health information, was signed by the Governor of Virginia. The Act prohibits the collection, sale…
National Cybersecurity Standardization Technical Committee cybersecurity incident management standard: principles and processes
National Cybersecurity Standardisation Technical Committee opened consultation on cybersecurity incident management standard: principles and processes
On 20 March 2025, the National Cybersecurity Standardisation Technical Committee (TC260) initiated a public consultation on the draft on cybersecurity incident management standard: principles and processes until 19 May 2025. This standard, which rep…
National Cybersecurity Standardisation Technical Committee standard on requirements for audit and certification bodies for cybersecurity technology information security management system
National Cybersecurity Standardisation Technical Committee opened consultation on requirements for audit and certification bodies for cybersecurity technology information security management system
On 20 March 2025, China's National Cybersecurity Standardisation Technical Committee (TC 260) opened a consultation on the standard on requirements for audit and certification bodies for cybersecurity technology information security management syste…
National Cybersecurity Standardisation Technical Committee standard on cybersecurity incident management: guidelines for incident response planning and preparation
National Cybersecurity Standardisation Technical Committee opened consultation on cybersecurity incident management standard: guidelines for incident response planning and preparation
On 20 March 2025, the National Cybersecurity Standardisation Technical Committee (TC260) opened a public consultation on cybersecurity incident management standard: guidelines for incident response planning and preparation, until 19 May 2025. The gu…
Department for Science, Innovation and Technology inquiry on nexus between data brokers and national security risks
Department for Science, Innovation and Technology opened inquiry on nexus between data brokers and national security risks
On 17 March 2025, the Department for Science, Innovation and Technology (DSIT) announced an inquiry into data brokers and their impact on national security until 12 May 2025. The inquiry focuses on four areas, including defining data brokers and the…