Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
265 events advancing 174 policy or regulatory changes:
Graph
Table
Joint statement on AI generated imagery
Data Protection Authorities adopted joint statement on AI generated imagery raising concerns on defamatory content and harm to vulnerable groups
On 23 February 2026, 61 Data Protection Authorities, including those from Australia, Spain, Hong Kong, New Zealand, Korea, Singapore, Switzerland, and the European Data Protection Board, adopted a joint statement raising concerns about Artificial In…
New Delhi AI Impact Summit Declaration
New Delhi AI Impact Summit Declaration, including voluntary framework for trustworthy and development oriented AI was adopted
On 20 February 2026, 87 countries, including Australia, the Philippines, Japan, Singapore, South Korea, the European Union, and the International Fund for Agricultural Development, endorsed the Artificial Intelligence (AI) Impact Summit Declaration,…
Kazakhstan-Kenya Economic and Digital Cooperation
Kazakhstan-Kenya announced Economic and Digital Cooperation
On 17 February 2026, the Governments of Kenya and Kazakhstan announced plans to strengthen bilateral economic and digital cooperation during the Kazakhstan–Kenya Business Forum. The initiative seeks to expand trade and investment and to promote valu…
Statement on AI-generated sexualised images of children
UNICEF issued statement on AI-generated sexualised images of children classifying deepfake abuse as child sexual abuse material and calling for criminalisation and prevention measures
On 4 February 2026, the United Nations Children’s Fund (UNICEF) issued a statement on AI-generated sexualised images of children. The statement notes the rapid rise in the volume of AI-generated sexualised images, including deepfakes produced throug…
Directive on use of digital certification services by critical information infrastructure (CII) providers
Directive on use of digital certification services by critical information infrastructure (CII) providers enters into force
On 1 January 2026, a Directive on the use of digital certification services by Critical Information Infrastructure (CII) providers enters into force. It requires designated CII systems in sectors such as telecommunications, banking, and healthcare t…
National AI Strategy 2025-2030 Implementation Roadmap
National AI Strategy 2025-2030 Implementation Roadmap was released
On 31 December 2025, the Central Government announced the Kenya National AI Strategy 2025-2030 Implementation Roadmap to guide the national digital transformation agenda. The strategy outlines 5 strategic priorities aimed at establishing the country…
Office of the Data Protection Commissioner investigation into Diamond Trust Bank Kenya and Uganda for alleged breaches of data protection regulations
Office of the Data Protection Commissioner fined Diamond Trust Bank Kenya and Uganda KES 500'000 for breaches of data protection regulations
On 24 November 2025, the Office of the Data Protection Commissioner (ODPC) in Kenya issued a penalty notice against Diamond Trust Bank Kenya and Uganda, imposing a total fine of KES 500'000 and issuing an enforcement notice against Diamond Trust Ban…
Guidance on processing personal data by micro, small, and medium enterprises
Office of the Data Protection Commissioner adopted guidance note on processing personal data by micro, small, and medium enterprises
On 6 November 2025, the Office of the Data Protection Commissioner (ODPC) adopted a guidance note on processing personal data by micro, small, and medium enterprises (MSMEs). The guidance note, prepared under the Data Protection Act, 2019, and its s…
Guidance on processing of children's data
Office of the Data Protection Commissioner adopted guidance on processing of children's data
On 6 November 2025, the Office of the Data Protection Commissioner (ODPC) adopted the guidance note on the processing of children’s data. The guidance issued pursuant to the Data Protection Act, 2019, and the Data Protection (General) Regulations, 2…
Guidance on processing of personal data for research purposes
Office of the Data Protection Commissioner adopted guidance on processing of personal data for research purposes
On 6 November 2025, the Office of the Data Protection Commissioner (ODPC) adopted a guidance note on the processing of personal data for research purposes. The guidance issued pursuant to Section 53(3) of the Data Protection Act, 2019, and the Data …