Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
135 events advancing 85 policy or regulatory changes:
Graph
Table
NSA guide on Deploying AI Systems Securely
Adopted NSA guide on Deploying AI Systems Securely
On 15 April 2024, the National Security Agency (NSA) published a guide on Deploying AI Systems Securely. It encompasses a set of best practices aimed at improving the confidentiality, integrity, and availability of AI systems. These include collabo…
Biometrics Privacy Code
Opened OPC Consultation on Biometrics Processing Privacy Code
On 10 April 2024, the New Zealand Office of the Privacy Commissioner (OPC) opened a public consultation on the Biometrics Processing Privacy Code until 8 May 2024. The Code outlines the scope of the definition of biometric information and other rele…
Reserve Bank of New Zealand Cyber Resilience Reporting Requirements
Adopted Cyber Resilience Reporting Requirements
On 4 March 2024, the Reserve Bank of New Zealand made changes to cyber resilience reporting requirements following a public consultation. Entities, such as registered banks, deposit takers, and insurers, are required to report significant cyber inci…
Decision on WTO E-commerce Moratorium
Extension of the WTO Moratorium on Customs Duties on Electronic Transmissions at MC13
On 1 March 2024, the Ministerial Conference of the World Trade Organisation (WTO) adopted a decision to continue the Work Programme on Electronic Commerce. The decision includes a specific focus on the development needs of developing and least-devel…
Commerce Commission investigation into the anticipated acquisition of Serato Audio Research Limited by AlphaTheta Corporation
Closed Consultation on Commerce Commission Statement of Issues regarding AlphaTheta's proposed acquisition of Serato
On 21 February 2024, the public consultation closed on the New Zealand Commerce Commission (CC) statement of issues concerning the proposed acquisition of Serato by AlphaTheta Corporation (ATC). The CC expressed concerns about the potential substant…
DCET investigations into illegal CSAM material available online
Published DIA findings following investigations into illegal CSAM material available online
On 20 February 2024, the Department of Internal Affairs of New Zealand (DIA) published the findings following the Digital Child Exploitation Team (DCET) investigations into illegal material available online, including child sexual abuse material (C…
Privacy Commissioner Investigation into Foodstuffs North Island's Facial Recognition Technology Trial
Announced Privacy Commissioner Investigation into Foodstuffs North Island's Facial Recognition Technology Trial
On 8 February 2024, the Privacy Commissioner announced an investigation into the facial recognition technology (FRT) trial initiated by Foodstuffs North Island. The trial, which spans over 25 stores, was requested by the Commissioner to provide evid…
Guidance on protecting infrastructure and critical functions from "Volt Typhoon"
Adopted guidance on protecting infrastructure and critical functions from “Volt Typhoon”
On 7 February 2024, the Cybersecurity and Infrastructure Security Agency (CISA), along with other US Government Agencies and International Partners, adopted a finalised guidance concerning Volt Typhoon. The outline presents steps that leaders in cri…
Pall Mall Process on Tackling the Proliferation and Irresponsible Use of Commercial Cyber Intrusion Capabilities
Published Declaration on Pall Mall Process on Tackling the Proliferation and Irresponsible Use of Commercial Cyber Intrusion Capabilities
On 6 February 2024, a collaborative statement involving multiple countries and endorsed by technological companies such as Google, Microsoft, and Meta was released. This joint declaration underscored the imperative for enhanced measures to address t…
Privacy Commissioner Guide on Privacy Impact Assessment
Published Privacy Commissioner Guide on Privacy Impact Assessment
On 1 February 2024, the Privacy Commissioner released a guide on Privacy Impact Assessment (PIA), including information on how organisations engaged in projects involving personal information processing can mitigate risks. The guide includes various…