Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
167 events advancing 148 policy or regulatory changes:
Graph
Table
Data access rules in Federal Law on Communications Platforms and Search Engines
Federal Council closes consultation on Federal Law on Communications Platforms and Search Engines including data access rules
On 16 February 2026, the Federal Council closes its consultation on the Federal Law on Communications Platforms and Search Engines. The Law would enable research bodies and independent civil society organisations to apply to the Federal Office of Co…
Cybersecurity regulation in Government Decree No. 342/2025/ND-CP detailing certain provisions of the Law on Advertising
Government Decree No. 342/2025/ND-CP detailing certain provisions of the Law on Advertising including cybersecurity regulation enters into force
On 15 February 2026, Government Decree No. 342/2025/ND-CP, which specifies certain provisions of the Law on Advertising, and which requires advertising activities on network-connected advertising screens and online platforms to comply with cybersecu…
ICT Supply Chain Security Toolbox
NIS2 Cooperation Group adopted ICT Supply Chain Security Toolbox
On 13 February 2026, the NIS2 Cooperation Group, comprising European Union Member States, the European Commission, and the European Union Agency for Cybersecurity (ENISA), published the ICT Supply Chain Security Toolbox to provide a common framework…
National standard for technical requirements for data security of anonymous identifiers in smart terminals
Ministry of Industry and Information Technology closes consultation on proposal for national standard for technical requirements for data security of anonymous identifiers in smart terminals
On 13 February 2026, the Ministry of Industry and Information Technology closes the public consultation on a proposal for a national standard for technical requirements for data security of anonymous identifiers in smart terminals. The proposed stan…
Guidance on addressing data protection complaints
Information Commissioner's Office published guidance on addressing data protection complaints under Data (Use and Access) Act
On 12 February 2026, the Information Commissioner's Office (ICO) published guidance on addressing data protection complaints under the Data (Use and Access) Act. While the requirements for addressing such complaints under the Act enter into force on…
Recommendations on legal basis for requiring accounts on e-commerce websites (2/2025)
European Data Protection Board closes consultation on recommendations on legal basis for requiring accounts on e-commerce websites (2/2025)
On 12 February 2026, the European Data Protection Board (EDPB) closes the consultation on the recommendations concerning the legal basis for requiring the creation of user accounts on e-commerce websites (2/2025). The recommendations address the com…
California Attorney General lawsuit against Disney and ABC Enterprises over alleged non-compliance with Consumer Privacy Act
California Attorney announced a settlement with Disney including 2.75 million penalties resolving allegations of non-compliance with Consumer Privacy Act
On 11 February 2026, the California Attorney General announced a settlement with Walt Disney Company, including USD 2.75 million in penalties, to resolve allegations of non-compliance with the California Consumer Privacy Act (CCPA). Disney is requir…
European Commission Action Plan on Drone and Counter Drone Security
European Commission adopted action plan on drone and counter drone security
On 11 February 2026, the European Commission adopted the Action Plan on Drone and Counter-Drone Security to establish a coordinated approach to drone threats across the European Union. The plan covers five areas. It includes public procurement measu…
Personal Data Protection Authority investigation into X Internet Unlimited Company and X.AI Corporation over suspected violations of Law on Protection of Personal Data concerning the Grok AI Assistant
Personal Data Protection Authority opened an ex officio investigation into X Internet Unlimited Company and X.AI Corporation over suspected violations of Law on Protection of Personal Data concerning the Grok AI Assistant
On 11 February 2026, the Personal Data Protection Authority (KVKK) opened an ex officio investigation into X Internet Unlimited Company and X.AI Corporation in relation to the development and deployment of the Grok Artificial Intelligence Assistant.…
Data Protection Authority investigation into Google over alleged unauthorised personal data processing by Google Assistant
Personal Data Protection Authority opened an ex officio investigation into Google regarding alleged unauthorised personal data processing by Google Assistant
On 11 February 2026, the Turkish Data Protection Authority (KVKK) announced the initiation of an ex officio investigation into Google regarding the processing of personal data via its voice assistant service, Google Assistant. The investigation foll…