Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
154 events advancing 93 policy or regulatory changes:
Graph
Table
Financial Action Task Force report on regulatory recommendations for stablecoins and unhosted wallets
Financial Action Task Force released report on regulatory recommendations for stablecoins and unhosted wallets
On 3 March 2026, the Financial Action Task Force (FATF) published a report on stablecoins, focusing on their use in peer-to-peer (P2P) transactions via unhosted wallets. The report notes that by mid-2025, over 250 stablecoins were in circulation, wi…
Joint statement on AI generated imagery
Data Protection Authorities adopted joint statement on AI generated imagery raising concerns on defamatory content and harm to vulnerable groups
On 23 February 2026, 61 Data Protection Authorities, including those from Australia, Spain, Hong Kong, New Zealand, Korea, Singapore, Switzerland, and the European Data Protection Board, adopted a joint statement raising concerns about Artificial In…
Office of the Privacy Commissioner for Personal Data investigation into Grok over alleged generation of indecent content
Office of the Privacy Commissioner for Personal Data announced investigation into Grok over alleged generation of indecent content
On 15 January 2026, the Office of the Privacy Commissioner for Personal Data (PCPD) announced that it is proactively contacting the organisation responsible for the artificial intelligence (AI) chatbot Grok to investigate its potential for generatin…
Local operations requirement in Protection of Critical Infrastructures (Computer Systems) Ordinance (Ordinance No. 4 of 2025)
Legislative Council's Protection of Critical Infrastructures (Computer Systems) Ordinance including local operations requirement enters into force
On 1 January 2026, the Legislative Council's Protection of Critical Infrastructures (Computer Systems) Ordinance (Ordinance No. 4 of 2025) including local operations requirement enters into force following designation by the Secretary for Security. …
Cybersecurity regulation in Protection of Critical Infrastructures (Computer Systems) Ordinance (Ordinance No. 4 of 2025)
Legislative Council's Protection of Critical Infrastructures (Computer Systems) Ordinance including cybersecurity regulation enters into force
On 1 January 2026, the Legislative Council's Protection of Critical Infrastructures (Computer Systems) Ordinance (Ordinance No. 4 of 2025) including cybersecurity regulation enters into force following designation by the Secretary for Security. The …
APEC Leaders' Gyeongju Declaration
APEC leaders released Gyeongju Declaration outlining measures to support digital and AI development
On 1 November 2025, APEC leaders issued the Gyeongju Declaration, outlining measures to support digital and AI development. The declaration notes the growing role of data in the digital economy and outlines commitments to increase cooperation to fac…
FATF list of jurisdictions under increased monitoring
FATF released updated list of jurisdictions under increased monitoring
On 24 October 2025, the Financial Action Task Force (FATF) released an updated list of jurisdictions under increased monitoring following the completion of the fourth FATF plenary meeting. Such jurisdictions have committed to the implementation of m…
HKMA and SFC OTC derivatives reporting regime including crypto currencies
Implemented enhancements to OTC Derivatives Reporting Regime including crypto currencies
On 29 September 2025, the Hong Kong Monetary Authority (HKMA) and the Securities and Futures Commission (SFC) implement requirements for reporting Unique Transaction Identifiers (UTIs) and Unique Product Identifiers (UPIs), in conjunction with the r…
Global Privacy Assembly Resolution on collection, use and disclosure of personal data to pre-train, train and fine-tune AI models
Global Privacy Assembly adopted Resolution on collection, use and disclosure of personal data to pre-train, train and fine-tune AI models
On 19 September 2025, the Global Privacy Assembly adopted the Resolution on the collection, use and disclosure of personal data to pre-train, train and fine-tune Artificial Intelligence (AI) models. The resolution acknowledges concerns regarding the…
Joint statement by twenty data protection authorities on building trustworthy data governance frameworks to encourage development of innovative and privacy-protecting AI
Twenty data protection authorities adopted joint statement on building trustworthy data governance frameworks to encourage development of innovative and privacy-protecting AI
On 17 September 2025, twenty data protection authorities, including from Australia, Belgium, Canada, France, Germany, Hong Kong, Ireland, Italy, Korea, Netherlands, New Zealand, Luxembourg, Spain, and United Kingdom adopted the joint statement on bu…