Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
1677 events advancing 595 policy or regulatory changes:
Graph
Table
Guidelines on implementation principles of Personal Data Protection Board Decision No. 2025/1572 amending data protection authority (VERBIS) registration exemption
Personal Data Protection Authority published public announcement on implementation principles of Decision No. 2025/1572 amending data protection authority (VERBIS) registration exemption
On 12 January 2026, the Personal Data Protection Authority published the Public Announcement Regarding the Implementation Principles of the Personal Data Protection Board's Decision No. 2025/1572 dated 4 September 2025. The announcement set out the …
Interpretation of data protection authority (VERBIS) registration exemption criteria under Personal Data Protection Board Decision No. 2025/2393
Personal Data Protection Board adopted Decision No. 2025/2393 on application of data protection authority (VERBIS) exemption criteria
On 25 December 2025, the Personal Data Protection Board adopted Decision No. 2025/2393 clarifying the application of Decision No. 2018/87 as amended by Decision No. 2025/1572. The Decision determined that, for data controllers keeping books on an ac…
Office of Communications rules on additional duties for categorised services
Office of Communications released stakeholder responses to consultation on additional duties for categorised services
On 13 October 2025, the Office of Communications of the United Kingdom (Ofcom) released stakeholder responses to the consultation on the third phase of online safety regulation, concerning additional duties under the Online Safety Act 2023 for categ…
Amendment to Information Security Act including cybersecurity breach reporting obligation
Fines for non-compliance with cyber-attack reporting obligations under amended Information Security Act takes effect
On 1 October 2025, the enforcement of fines under the amended Information Security Act begins. Since 1 April 2025, operators including cloud computing providers, search engines, digital security and trust services, and data centres in Switzerland ha…
Government access to data provisions in Regulation on harmonised rules on fair access to and use of data (Data Act)
EU Data Act including rules on government access to data enters into force
On 12 September 2025, the Regulation on harmonised rules on fair access to and use of data (Data Act), including rules on government access to data, enters into force. The Act allows public sector bodies, the European Commission, the European Centra…
Data transfer requirements in Regulation on harmonised rules on fair access to and use of data (Data Act)
Implemented EU Data Act including data transfer requirements
On 12 September 2025, the Regulation on harmonised rules on fair access to and use of data (Data Act), including data transfer provisions, is implemented. The Act includes requirements for international transfers of non-personal data. The Act states…
Interoperability requirement in Regulation on harmonised rules on fair access to and use of data (Data Act)
Implemented EU Data Act including interoperability requirements
On 12 September 2025, the Regulation on harmonised rules on fair access to and use of data (Data Act), including interoperability requirements, is implemented. In particular, the Act aims to ensure proportionate participation in the value of using d…
Data protection and access measures in Regulation on harmonised rules on fair access to and use of data (Data Act)
Implemented EU Data Act including data protection and access measures
On 12 September 2025, the Regulation on harmonised rules on fair access to and use of data (Data Act), including data protection and access measures, is implemented. The Act aims to facilitate access to data and review the rules on the legal protect…
Amendment to data protection authority (VERBIS) registration exemption under Personal Data Protection Board Decision No. 2025/1572
Personal Data Protection Board adopted Decision No. 2025/1572 amending Decision No. 2018/87 on exemption from data protection authority (VERBIS) registration obligation
On 4 September 2025, the Personal Data Protection Board adopted Decision No. 2025/1572 amending Decision No. 2018/87 on exemption from the obligation to register with the Data Controllers Registry Information System (VERBİS). The Decision updated th…
Data protection measures in US Executive Order on Promoting Competition in the American Economy
President revoked Executive Order 14036 on Promoting Competition in the American Economy, including data protection measures
On 13 August 2025, the President of the United States revoked Executive Order 14036 of 9 July 2021 on promoting competition in the American economy. The Order affects the federal directives for agencies related to antitrust enforcement, anti-competi…