Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
62 events advancing 59 policy or regulatory changes:
Graph
Table
Office of the Privacy Commissioner investigation into Loblaw Companies over alleged violations of personal information retention practices under Personal Information Protection and Electronic Documents Act
Office of the Privacy Commissioner found Loblaw Companies in violation of personal information retention practices
On 5 March 2026, the Office of the Privacy Commissioner of Canada published the findings of an investigation into Loblaw Companies regarding the retention of purchase histories linked to former members of the PC Optimum loyalty programme. The invest…
European Commission Implementing Regulation as regards applicable standards and specifications
European Commission closes consultation on draft implementing regulation as regards applicable standards and specifications
On 5 March 2026, the European Commission closes the consultation on the draft implementing regulation as regards applicable standards and specifications. The draft Commission implementing regulation would amend Implementing Regulation (EU) 2025/1569…
Office of the Privacy Commissioner investigation into Bunnings Group use of facial recognition technology
Privacy Commissioner issued statement on administrative tribunal's decision on Bunnings's use of facial recognition technology
On 5 March 2026, the Privacy Commissioner issued a statement on the administrative review tribunal’s decision on Bunnings’ use of facial recognition technology (FRT) under the Privacy Act. The Tribunal found that Bunnings’ use of FRT to address sign…
Cyber Security and Resilience Bill
Consultation on the Cyber Security and Resilience (Network and Information Systems) Bill closes
On 5 March 2026, the public consultation on the Cyber Security and Resilience (Network and Information Systems) Bill closes. The Bill was introduced to the House of Commons on 12 November 2025 and would update the Network and Information Systems (NI…
Guideline on cybersecurity requirements for consumer-type connected cameras with cybersecurity identification
National Cybersecurity Standardisation Technical Committee opened consultation on guideline on cybersecurity requirements for consumer-type connected cameras with cybersecurity identification
On 3 March 2026, the National Cybersecurity Standardisation Technical Committee opened a consultation on a guideline on cybersecurity requirements for consumer connected cameras with cybersecurity identification, until 17 March 2026. The guideline a…
Guidance on application of Regulation (EU) 2024/2847 (Cyber Resilience Act)
European Commission opened consultation on draft guidance on the application of Regulation (EU) 2024/2847 (Cyber Resilience Act)
On 3 March 2026, the European Commission opened a consultation on draft guidance concerning the application of Regulation (EU) 2024/2847 (Cyber Resilience Act), until 31 March 2026. The draft guidance clarifies how the Regulation should be interpret…
Recommendation on session replay tools
National Commission on Informatics and Liberty opened consultation on draft recommendation on session replay tools
On 25 February 2026, the National Commission on Informatics and Liberty (CNIL) closes the consultation on its draft recommendation on session replay tools. The draft recommendation is addressed to session replay tool providers and website and mobile…
Data protection regulation in Internet Code of Practice 2025
Communications Commission adopted Internet Code of Practice, including data protection regulation
On 13 February 2026, the Communications Commission adopted the Internet Code of Practice, including data protection regulation. The Code provides that internet access service providers must not permit the harvesting or third-party access to transact…
Revised Cybersecurity Trusted Computing Specification Trusted Support Platform for Server (GB/T 36639)
National Cybersecurity Standardisation Technical Committee opened consultation on draft revised national standard Trusted Computing Specification Trusted Support Platform for Server
On 11 February 2026, the National Cybersecurity Standardisation Technical Committee (TC260) opened a public consultation, until 12 April 2026, on the draft revised national standard GB/T 36639, titled Cybersecurity — Trusted Computing Specification …
Standard for cybersecurity technology methods for visual representation of cyberspace security
National Cybersecurity Standardisation Technical Committee opened consultation on draft national standard for cybersecurity technology methods for visual representation of cyberspace security
On 11 February 2026, the National Information Security Standardisation Technical Committee (TC260) opened a public consultation on the draft national standard Cybersecurity Technology — Methods for Visual Representation of Cyberspace Security, with …