Digital Policy Alert logo

Data governance

Show binding or unbinding policies
Show implemented or unimplemented policies

Regional activity

Policy
changes
between
01 Jan 2020
and
16 Apr 2025
Most active jurisdictions Number of policy changes

Graph

Table

Excel

CSV

Most frequent policy instruments Number of policy changes

Excel

CSV

Data protection regulation

2025

Cybersecurity regulation

935

Cross-border data transfer regulation

383

Data protection authority governance

184

Data localisation requirement

91

Government access to data

41

Data governance, nes

19

Other operating condition, nes

4

Content moderation regulation

2

Business registration requirement

2

User/subject right

1

Worker monitoring regulation

1

Authorisation of goods or services

1

Age verification requirement

1

Content moderation authority governance

1

Local operations requirement

1

Instrument unspecified

1

Most targeted economic activities Number of policy changes

Excel

CSV

cross-cutting

2013

other service provider

431

ML and AI development

253

platform intermediary: user-generated content

234

infrastructure provider: internet and telecom services

186

software provider: other software

169

infrastructure provider: cloud computing, storage and databases

161

platform intermediary: other

161

digital payment provider (incl. cryptocurrencies)

160

platform intermediary: e-commerce

130

technological consumer goods

96

search service provider

79

infrastructure provider: other

75

online advertising provider

74

messaging service provider

56

infrastructure provider: network hardware and equipment

48

software provider: app stores

47

streaming service provider

32

DLT development

18

unspecified

6

semiconductors

3

Policy instrument dynamics over time

Graph

Table

Excel

CSV

Total changes 506 0
Data protectionregulationCybersecurityregulationCross-border datatransfer regulationData protectionauthority governanceData localisationrequirement
Other Load more +
2020 2021 2022 2023 2024 2025 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2
32 7 4 1 3 28 7 9 3 6 35 15 11 4 6 46 18 10 4 8 87 23 13 3 8 119 41 21 11 10 98 47 19 11 9 107 49 26 17 10 144 69 18 7 5 98 62 27 7 5 114 73 27 9 15 146 82 35 12 5 296 134 46 25 5 254 81 50 22 4 174 67 45 14 5 178 96 36 16 7 240 111 38 19 3 208 97 40 24 6 164 94 51 16 5 171 105 27 26 7 201 78 32 25 8 13 15 5 0 0
0 1 1 1 2 3 3 4 6 12 5 5 0 1 5 9 4 5 1 5 11 0
0 296

Latest activity

Upcoming events

See all
in force
2025-04-21

European Union: European Commission Decision (EU) 2025/628 including rules on data subject information and restrictions enters into force

processing consultation
2025-04-27

China: Cyberspace Administration of China closes consultation on Cybersecurity Law (Second Draft)

in force
2025-05-01

China: Cyberspace Administration's Measures for Administration of Compliance Audits on Personal Information Protection including cross-border data transfer regulation enter into force

Latest events

processing consultation
2025-04-15

European Union: European commission closes consultation on draft implementing regulation providing technical descriptions for important and critical products with digital elements under Cyber Resilience Act (2024/2847)

in consultation
2025-04-14

European Union: European Data Protection Board opened consultation on guidelines on processing personal data through blockchain technologies

in consultation
2025-04-14

United States of America: National Institute of Standards and Technology opened consultation on draft Updated Privacy Framework

under deliberation
2025-04-11

Ireland: Data Protection Commission opened investigation into X's data processing practices for training generative AI model Grok compliance with GDPR

adopted
2025-04-11

United States of America: Department of Justice issued compliance guide for Data Security Program

adopted
2025-04-11

France: National Commission for Informatics and Liberties adopted recommendations on sandbox project

Subscribe to updates

Threads

Explore all DPA threads

DPA threads aspire to provide the factual basis for digital policy issues around the globe.

More threads will be published continuously in the weeks ahead. Do you miss the factual base for a particular policy issue? Please email us at threads@digitalpolicyalert.org.

We use cookies and other technologies to perform analytics on our website. By opting in, you consent to the use by us and our third-party partners of cookies and data gathered from your use of our platform. See our Privacy Policy to learn more about the use of data and your rights.