Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
337 events advancing 198 policy or regulatory changes:
Graph
Table
Decision on WTO E-commerce Moratorium
Termination of WTO Moratorium on Customs Duties on Electronic Transmissions
On 30 March 2026, the Moratorium on Customs Duties on Electronic Transmissions was terminated following the conclusion of the World Trade Organisation’s Ministerial Conference, which ended without consensus to extend the measure. The moratorium had …
Global Privacy Enforcement Network's inquiry into children's privacy practices on websites and applications
Global Privacy Enforcement Network adopted report on children's privacy practices on websites and applications
On 25 March 2026, the Global Privacy Enforcement Network (GPEN) published a sweep report examining children's privacy practices across 876 websites and applications. The inquiry found that, while age assurance use has increased since 2015, 88% of pl…
Advisory on malicious cyber activity linked to evolving geopolitical developments
National Cyber Security Centre issued warning on increased malicious cyber activity
On 6 March 2026, New Zealand’s National Cyber Security Centre (NCSC) issued an advisory urging organisations to increase vigilance against malicious cyber activity linked to evolving geopolitical developments involving Iran. The NCSC stated that it …
Financial Action Task Force report on regulatory recommendations for stablecoins and unhosted wallets
Financial Action Task Force released report on regulatory recommendations for stablecoins and unhosted wallets
On 3 March 2026, the Financial Action Task Force (FATF) published a report on stablecoins, focusing on their use in peer-to-peer (P2P) transactions via unhosted wallets. The report notes that by mid-2025, over 250 stablecoins were in circulation, wi…
Joint statement on AI generated imagery
Data Protection Authorities adopted joint statement on AI generated imagery raising concerns on defamatory content and harm to vulnerable groups
On 23 February 2026, 61 Data Protection Authorities, including those from Australia, Spain, Hong Kong, New Zealand, Korea, Singapore, Switzerland, and the European Data Protection Board, adopted a joint statement raising concerns about Artificial In…
New Delhi AI Impact Summit Declaration
New Delhi AI Impact Summit Declaration, including voluntary framework for trustworthy and development oriented AI was adopted
On 20 February 2026, 87 countries, including Australia, the Philippines, Japan, Singapore, South Korea, the European Union, and the International Fund for Agricultural Development, endorsed the Artificial Intelligence (AI) Impact Summit Declaration,…
Statement on AI-generated sexualised images of children
UNICEF issued statement on AI-generated sexualised images of children classifying deepfake abuse as child sexual abuse material and calling for criminalisation and prevention measures
On 4 February 2026, the United Nations Children’s Fund (UNICEF) issued a statement on AI-generated sexualised images of children. The statement notes the rapid rise in the volume of AI-generated sexualised images, including deepfakes produced throug…
Privacy Commissioner's investigation into Manage My Health over alleged cybersecurity breach
Office of Privacy Commissioner announced investigation into Manage My Health over alleged cybersecurity breach
On 21 January 2026, the Office of the Privacy Commissioner announced an investigation into Manage My Health over a cybersecurity breach in the digital health sector that handles sensitive patient information. The investigation seeks to examine the c…
Use and disclosure restriction of stolen health data in Lawsuit (Manage My Health Ltd v Unknown Defendants)
High Court of Wellington granted interim injunction restraining use and disclosure of health data stolen in cyberattack on Manage My Health portal (No. CIV-2026-485-2 [2026] NZHC 2)
On 5 January 2026, the High Court of Wellington granted an interim injunction in Manage My Health Ltd v Unknown Defendants restraining all persons from accessing or dealing with health data exfiltrated in a cyberattack on the Manage My Health patien…
Lawsuit by Neighbourly Limited over alleged unauthorised use and dissemination of stolen personal data (No. CIV-2026-404-000001 [2026] NZHC 1)
High Court granted interim ruling in lawsuit filed by Neighbourly Limited to prevent unauthorised use and dissemination of stolen personal data
On 5 January 2026, the High Court of New Zealand in Auckland issued an interim injunction in Neighbourly Limited v Unknown Defendants (CIV-2026-404-000001), ordering the deletion and suppression of data stolen from the Neighbourly online platform. T…