Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
108 events advancing 93 policy or regulatory changes:
Graph
Table
Cybersecurity authority governance in Decree on cybersecurity protection for information systems
Ministry of Public Security closes consultation on draft decree on cybersecurity protection for information systems including cybersecurity authority governance
On 26 March 2026, the Ministry of Public Security closes the consultation on the draft decree on cybersecurity protection for information systems. The decree applies to agencies and organisations involved in building, managing, operating, upgrading,…
Cybersecurity regulation in Decree on cybersecurity protection for information systems
Ministry of Public Security closes consultation on draft decree on cybersecurity protection for information systems including cybersecurity regulation
On 26 March 2026, the Ministry of Public Security closes the consultation on the draft decree on cybersecurity protection for information systems. The decree applies to agencies and organisations involved in building, managing, operating, upgrading,…
Decree Providing for Administrative Sanctions in the Fields of Cybersecurity and Personal Data Protection
Ministry of Public Security closes consultation on draft decree providing for administrative sanctions in the fields of cybersecurity and personal data protection
On 26 March 2026, the Ministry of Public Security closes the consultation on the draft decree providing for administrative sanctions in the fields of cybersecurity and personal data protection. The draft decree establishes administrative violations,…
Regulation extending Interim Regulation's derogation from ePrivacy Directive until 2028 (2025/0429)
European Parliament rejected proposal to extend Regulation (EU) 2021/1232 on derogation from ePrivacy Directive until 2028
On 26 March 2026, the European Parliament rejected the proposal to extend Regulation (EU) 2021/1232 on derogation from the ePrivacy Directive until 2028. This regulation sets out interim rules on data processing for the purpose of combating online c…
Global Privacy Enforcement Network's inquiry into children's privacy practices on websites and applications
Global Privacy Enforcement Network adopted report on children's privacy practices on websites and applications
On 25 March 2026, the Global Privacy Enforcement Network (GPEN) published a sweep report examining children's privacy practices across 876 websites and applications. The inquiry found that, while age assurance use has increased since 2015, 88% of pl…
Guidelines on connected wearable devices focusing on data protection requirements
Federal Data Protection and Information Commissioner adopted guidelines on connected wearable devices focusing on data protection
On 25 March 2026, the Federal Data Protection and Information Commissioner adopted a guideline on the privacy risks and responsible use of connected wearable devices. It applies to manufacturers, digital service providers, and users processing perso…
Government Surveillance Reform Act of 2026 (HB 7901)
Attorneys General of 17 states issued a joint letter to Congress on federal government access to personal data for surveillance
On 24 March 2026, the Attorneys General of 17 US states, including California, Minnesota, New Jersey and Connecticut, issued a joint letter to Congress on federal government access to data for surveillance. The letter urged Congress to devise legisl…
European Union-Australia Free Trade Agreement
European Union and Australia concluded negotiations on Free Trade Agreement including provision on digital trade
On 24 March 2026, the European Union and Australia concluded negotiations for a Free Trade Agreement (FTA), which includes provisions on digital trade. The agreement prohibits unjustified data localisation requirements, enabling cross-border data fl…
Updated Global Cross-Border Privacy Rules System Program Requirements
Global Cross-Border Privacy Rules Forum updated the Global Cross-Border Privacy Rules System Program Requirements
On 23 March 2026, the Global Cross-Border Privacy Rules (CBPR) Forum updated the Global Cross-Border Privacy Rules System Program Requirements (PRs). The PRs apply to organisations seeking certification under the Global Cross-Border Privacy Rules Sy…
Guidance on compatibility and reuse of personal information
Information Commissioner's Office issued guidance on compatibility and reuse of personal information
On 23 March 2026, the Information Commissioner's Office issued guidance on the compatibility of reusing personal information under the UK General Data Protection Regulation. It explains how the purpose limitation principle applies when controllers s…