Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
95 events advancing 89 policy or regulatory changes:
Graph
Table
Investigatory Powers (Communications Data) (Relevant Public Authorities) Regulations 2026
Investigatory Powers (Communications Data) (Relevant Public Authorities) Regulations enter into force
On 11 May 2026, the Investigatory Powers (Communications Data) (Relevant Public Authorities) Regulations 2026 enter into force, amending the list of public authorities permitted to obtain communications data. The Secretary of State exercised powers …
Cybersecurity requirements for "high-risk AI systems" in Digital Omnibus on AI Regulation (2025/0359)
European Parliament and Council of the EU reached provisional agreement on Digital Omnibus on AI Regulation (2025/0359) including cybersecurity requirements for high-risk AI systems
On 7 May 2026, the European Parliament and the Council of the EU reached a provisional agreement on the Digital Omnibus on AI Regulation (2025/0359). The Digital Omnibus on AI Regulation would set fixed application dates for cybersecurity obligation…
Data protection regulation for "high-risk" AI systems in Digital Omnibus on AI Regulation (2025/0359)
European Parliament and Council of the EU reached provisional agreement on Digital Omnibus on AI Regulation (2025/0359) including data protection regulation for high-risk AI systems
On 7 May 2026, the European Parliament and the Council of the EU reached a provisional agreement on the Digital Omnibus on AI Regulation (2025/0359). The Digital Omnibus on AI Regulation would permit the processing of special categories of personal …
Cybersecurity regulation in Administrative Measures for Digital Virtual Human Information Services
Cyberspace Administration of China closes consultation on draft Administrative Measures for Digital Virtual Human Information Services including cybersecurity regulation
On 6 May 2026, the Cyberspace Administration of China (CAC) closes the consultation on draft Administrative Measures for Digital Virtual Human Information Services including cybersecurity regulation. The consultation had been opened on 3 April 2026.…
Data protection regulation in Administrative Measures for Digital Virtual Human Information Services
Cyberspace Administration of China closes consultation on draft Administrative Measures for Digital Virtual Human Information Services including data protection regulation
On 6 May 2026, the Cyberspace Administration of China (CAC) closes the consultation on draft Administrative Measures for Digital Virtual Human Information Services, including data protection regulation. The draft Measures apply to organisations and …
Office of the Privacy Commissioner investigation into OpenAI ChatGPT's data processing practices
Canadian privacy authorities concluded joint investigation into OpenAI OpCo for alleged violations of Canadian private sector privacy laws
On 6 May 2026, the Office of the Privacy Commissioner (OPC) and its provincial counterparts in Quebec, British Columbia, and Alberta issued findings following the investigation into OpenAI’s data collection and processing practices. The authorities …
Implementing regulation establishing UAS-specific safety occurrences that must be reported
European Commission opened consultation on draft implementing regulation establishing UAS-specific safety occurrences that must be reported
On 4 May 2026, the European Commission opened a consultation on the draft implementing regulation amending Implementing Regulation (EU) 2015/1018, expanding mandatory aviation occurrence reporting to address emerging technologies and operational ris…
Central Bank of Brazil Resolution No. 521 to include activities or operations of virtual asset service providers in the foreign exchange market and to provide for situations subject to regulation of Brazilian capital abroad and foreign capital in the country
Remaining provisions of resolution No. 521 extending foreign exchange framework to cover activities and operations of virtual asset service providers enter into force
On 4 May 2026, the remaining provisions of Resolution No. 521, which extend the foreign exchange framework to cover the activities and operations of virtual asset service providers, entered into force. These include Article 76-C and Article 82-A of …
Federal Trade Commission lawsuit against Kochava for allegedly selling geolocation data
Federal Trade Commission reached settlement with Kochava and Collective Data Solutions resolving allegations of unlawful sale of sensitive location data
On 4 May 2026, the Federal Trade Commission (FTC) filed a stipulated order for injunction and other relief with the United States District Court for the District of Idaho, resolving the proceedings against Kochava and Collective Data Solutions (CDS)…
Simplified measures for protection of personal information for small personal information processors
Cyberspace Administration closes consultation on simplified measures for protection of personal information for small personal information processors
On 3 May 2026, the Cyberspace Administration closes the consultation on simplified measures for the protection of personal information for small personal information processors. The measures apply to any entity in China that processes the personal i…