Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
1674 events advancing 592 policy or regulatory changes:
Graph
Table
Office of Communications rules on additional duties for categorised services
Office of Communications released stakeholder responses to consultation on additional duties for categorised services
On 13 October 2025, the Office of Communications of the United Kingdom (Ofcom) released stakeholder responses to the consultation on the third phase of online safety regulation, concerning additional duties under the Online Safety Act 2023 for categ…
Amendment to Information Security Act including cybersecurity breach reporting obligation
Fines for non-compliance with cyber-attack reporting obligations under amended Information Security Act takes effect
On 1 October 2025, the enforcement of fines under the amended Information Security Act begins. Since 1 April 2025, operators including cloud computing providers, search engines, digital security and trust services, and data centres in Switzerland ha…
Government access to data provisions in Regulation on harmonised rules on fair access to and use of data (Data Act)
EU Data Act including rules on government access to data enters into force
On 12 September 2025, the Regulation on harmonised rules on fair access to and use of data (Data Act), including rules on government access to data, enters into force. The Act allows public sector bodies, the European Commission, the European Centra…
Data transfer requirements in Regulation on harmonised rules on fair access to and use of data (Data Act)
Implemented EU Data Act including data transfer requirements
On 12 September 2025, the Regulation on harmonised rules on fair access to and use of data (Data Act), including data transfer provisions, is implemented. The Act includes requirements for international transfers of non-personal data. The Act states…
Interoperability requirement in Regulation on harmonised rules on fair access to and use of data (Data Act)
Implemented EU Data Act including interoperability requirements
On 12 September 2025, the Regulation on harmonised rules on fair access to and use of data (Data Act), including interoperability requirements, is implemented. In particular, the Act aims to ensure proportionate participation in the value of using d…
Data protection and access measures in Regulation on harmonised rules on fair access to and use of data (Data Act)
Implemented EU Data Act including data protection and access measures
On 12 September 2025, the Regulation on harmonised rules on fair access to and use of data (Data Act), including data protection and access measures, is implemented. The Act aims to facilitate access to data and review the rules on the legal protect…
Data protection measures in US Executive Order on Promoting Competition in the American Economy
President revoked Executive Order 14036 on Promoting Competition in the American Economy, including data protection measures
On 13 August 2025, the President of the United States revoked Executive Order 14036 of 9 July 2021 on promoting competition in the American economy. The Order affects the federal directives for agencies related to antitrust enforcement, anti-competi…
Competition measures in US Executive Order on Promoting Competition in the American Economy
President revoked Executive Order 14036 on Promoting Competition in the American Economy, including merger control regulation
On 13 August 2025, the President of the United States issued an Executive Order revoking Executive Order 14036 of 9 July 2021 on promoting competition in the American economy. The Order aimed to ensure competition in the digital sphere through stric…
Obligations for providers of general-purpose AI models in Regulation laying down harmonised rules on artificial intelligence (AI Act)
Implemented AI Act including obligations for providers of general-purpose AI models
On 2 August 2025, the obligations under Title VIII, Chapter V of Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI Act) became applicable to providers of general-purpose AI (GPAI) models, in accordance with Articl…
Age verification requirement in Online Safety Bill
Obligation for user-to-user platforms hosting adult content to implement age assurance measures under Office of Communications's Codes of Practice for Age Assurance and Children’s Access enters into force
On 25 July 2025, the obligation for services hosting user-generated pornographic content in the United Kingdom to fully implement "highly effective" age assurance measures under the Online Safety Act enters into force. This follows the publication o…