https://digitalpolicyalert.org/activity-tracker?offset=0&limit=30An independent, timely and accessible record of policy and regulatory changes affecting the digital economy. - Powered by AtomRSSAtomRSScontact@atomgroup.dev (AtomRSS)enhttps://digitalpolicyalert.org/img/main_image.pnghttps://digitalpolicyalert.org/activity-tracker?offset=0&limit=30Mon, 26 Oct 2026 03:45:35 GMT5On 11 October 2026, the Implementing Regulation on the minimum metadata elements for dataset descriptions for the secondary use of electronic health data (No. 2026/2098) entered into force with grace period. The regulation will set out 27 metadata e…https://digitalpolicyalert.org/change/21536-implementing-regulation-on-the-minimum-metadata-elements-for-dataset-descriptions-for-the-secondary-use-of-electronic-health-data-no-20262098https://digitalpolicyalert.org/change/21536-implementing-regulation-on-the-minimum-metadata-elements-for-dataset-descriptions-for-the-secondary-use-of-electronic-health-data-no-20262098Sat, 10 Oct 2026 16:00:00 GMTEuropean Unionother service providerEuropean UnionData governancein grace periodOn 7 October 2026, the Monetary Authority issued the Guidelines on Artificial Intelligence (AI) Risk Management. The Guidelines apply to all financial institutions and to all forms of AI, including generative AI and AI agents. They apply on a group …https://digitalpolicyalert.org/change/17142-guidelines-on-artificial-intelligence-risk-managementhttps://digitalpolicyalert.org/change/17142-guidelines-on-artificial-intelligence-risk-managementTue, 06 Oct 2026 16:00:00 GMTSingaporedigital payment provider (incl. cryptocurrencies)other service providerSingaporeOther operating conditionsadoptedOn 20 September 2026, the reform of the Union Customs Code, establishing EU Customs Data Hub entered into force with grace period. The reform establishes an EU Customs Data Hub as a single digital entry point through which traders submit customs and…https://digitalpolicyalert.org/change/5769-eu-customs-data-hub-in-eu-customs-reformhttps://digitalpolicyalert.org/change/5769-eu-customs-data-hub-in-eu-customs-reformSat, 19 Sep 2026 16:00:00 GMTEuropean Unioncross-cuttingEuropean UnionInternational tradein grace periodOn 9 September 2026, the Governor of California signed Artificial Intelligence: Auditors: Registration (AB 1405), enacted as Chapter 178, Statutes of 2026. The Act applies to artificial intelligence (AI) auditors, defined as a person, partnership, o…https://digitalpolicyalert.org/change/21391-artificial-intelligence-auditors-registration-ab-1405https://digitalpolicyalert.org/change/21391-artificial-intelligence-auditors-registration-ab-1405Tue, 08 Sep 2026 16:00:00 GMTUnited States of AmericaML and AI developmentother service providerUnited States of AmericaAuthorisation, registration and licensingadoptedOn 1 September 2026, Resolution No. 1119 approving rules for the registration of domain names in Russia's national domain namespace entered into force. Domain name registration became subject to identification of the registrant through the Unified I…https://digitalpolicyalert.org/change/21314-resolution-no-1119-domain-name-registration-ruleshttps://digitalpolicyalert.org/change/21314-resolution-no-1119-domain-name-registration-rulesMon, 31 Aug 2026 16:00:00 GMTRussiainfrastructure provider: internet and telecom servicesRussiaAuthorisation, registration and licensingin forceOn 2 August 2026, the simplified quality management system option under Article 63(1) of the regulation laying down harmonised rules on Artificial Intelligence (Artificial Intelligence Act) becomes applicable to providers that are microenterprises. …https://digitalpolicyalert.org/change/20700-organisational-requirement-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-acthttps://digitalpolicyalert.org/change/20700-organisational-requirement-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-actSat, 01 Aug 2026 16:00:00 GMTEuropean UnionML and AI developmentEuropean UnionOther operating conditionsin forceOn 2 August 2026, the post-market monitoring and serious incident reporting obligations under Articles 72 and 73 of the regulation laying down harmonised rules on Artificial Intelligence (Artificial Intelligence Act) become applicable to providers o…https://digitalpolicyalert.org/change/8988-monitoring-requirements-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-acthttps://digitalpolicyalert.org/change/8988-monitoring-requirements-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-actSat, 01 Aug 2026 16:00:00 GMTEuropean UnionML and AI developmentEuropean UnionAuthorisation, registration and licensingin forceOn 2 August 2026, the real-world testing framework under Article 60 of the regulation laying down harmonised rules on Artificial Intelligence (Artificial Intelligence Act) becomes applicable to providers or prospective providers of high-risk AI syst…https://digitalpolicyalert.org/change/8987-testing-requirements-for-high-risk-ai-systems-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-acthttps://digitalpolicyalert.org/change/8987-testing-requirements-for-high-risk-ai-systems-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-actSat, 01 Aug 2026 16:00:00 GMTEuropean UnionML and AI developmentEuropean UnionDesign and testing standardsin forceOn 2 August 2026, the transparency obligations under Article 50, and the CE marking requirement under Article 48, of the regulation laying down harmonised rules on Artificial Intelligence (Artificial Intelligence Act) become applicable. Under Articl…https://digitalpolicyalert.org/change/8986-design-requirements-for-high-risk-ai-systems-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-acthttps://digitalpolicyalert.org/change/8986-design-requirements-for-high-risk-ai-systems-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-actSat, 01 Aug 2026 16:00:00 GMTEuropean UnionML and AI developmentEuropean UnionAuthorisation, registration and licensingin forceOn 2 August 2026, the business registration requirement under Article 49 of the regulation laying down harmonised rules on Artificial Intelligence (Artificial Intelligence Act) formally remains applicable to high-risk AI systems listed in Annex III,…https://digitalpolicyalert.org/change/339-conformity-assessment-and-business-registration-requirement-for-high-risk-ai-systems-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-acthttps://digitalpolicyalert.org/change/339-conformity-assessment-and-business-registration-requirement-for-high-risk-ai-systems-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-actSat, 01 Aug 2026 16:00:00 GMTEuropean UnionML and AI developmentEuropean UnionAuthorisation, registration and licensingin forceOn 27 July 2026, the Regulation on the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI Regulation) entered into force with grace period. The design requirements under Articles 12, 13(1), 14 …https://digitalpolicyalert.org/change/17214-design-requirements-for-high-risk-ai-systems-in-digital-omnibus-on-ai-regulation-20250359https://digitalpolicyalert.org/change/17214-design-requirements-for-high-risk-ai-systems-in-digital-omnibus-on-ai-regulation-20250359Sun, 26 Jul 2026 16:00:00 GMTEuropean UnionML and AI developmentEuropean UnionDesign and testing standardsin forceOn 1 May 2026, the Technology Transfer Block Exemption Regulation (TTBER) enters into force, replacing the previous regulatory framework for technology licensing. The regulation exempts certain categories of technology transfer agreements from the p…https://digitalpolicyalert.org/change/12841-revision-of-technology-transfer-block-exemption-regulation-and-guidelineshttps://digitalpolicyalert.org/change/12841-revision-of-technology-transfer-block-exemption-regulation-and-guidelinesThu, 30 Apr 2026 16:00:00 GMTEuropean Unioncross-cuttingEuropean UnionCompetitionin forceBy 20 April 2026, the European Commission must develop, promote and maintain a user-friendly digital interactive tool in accordance with Article 20(8) of Directive (EU) 2025/2647. This implementation obligation arises following the Directive’s entry…https://digitalpolicyalert.org/change/7397-eu-review-of-framework-on-alternative-dispute-resolution-for-consumershttps://digitalpolicyalert.org/change/7397-eu-review-of-framework-on-alternative-dispute-resolution-for-consumersSun, 19 Apr 2026 16:00:00 GMTEuropean Unionplatform intermediary: e-commerceEuropean UnionConsumer protectionin forceOn 1 April 2026, the final rule on personal financial data rights came into force for depository institutions with at least USD 250 billion in total assets and non-depository institutions with at least USD 10 billion in revenue. The rule mandates fi…https://digitalpolicyalert.org/change/7419-cfpb-personal-financial-data-rights-rulehttps://digitalpolicyalert.org/change/7419-cfpb-personal-financial-data-rights-ruleTue, 31 Mar 2026 16:00:00 GMTUnited States of Americadigital payment provider (incl. cryptocurrencies)other service providerUnited States of AmericaData governancein forceOn 1 March 2026, the Rules for centralised management of the public communications network enter into force, establishing cybersecurity regulation for network management. The Rules define threats to the security and functioning of the Internet and t…https://digitalpolicyalert.org/change/17093-cybersecurity-regulation-in-decree-no-1667-on-approval-of-the-rules-for-centralised-management-of-the-public-communications-networkhttps://digitalpolicyalert.org/change/17093-cybersecurity-regulation-in-decree-no-1667-on-approval-of-the-rules-for-centralised-management-of-the-public-communications-networkSat, 28 Feb 2026 16:00:00 GMTRussiainfrastructure provider: internet and telecom servicesinfrastructure provider: network hardware and equipmentRussiaData governancein forceOn 1 March 2026, the Rules for centralised management of the public communications network enter into force, granting state authorities operational access for network management. The Rules authorise the Federal Service for Supervision of Communicati…https://digitalpolicyalert.org/change/17092-government-access-to-data-in-decree-no-1667-on-approval-of-the-rules-for-centralised-management-of-the-public-communications-networkhttps://digitalpolicyalert.org/change/17092-government-access-to-data-in-decree-no-1667-on-approval-of-the-rules-for-centralised-management-of-the-public-communications-networkSat, 28 Feb 2026 16:00:00 GMTRussiainfrastructure provider: internet and telecom servicesinfrastructure provider: network hardware and equipmentRussiaData governancein forceOn 1 March 2026, the Rules for centralised management of the public communications network enter into force, establishing mandatory participation conditions for designated entities. The Rules require operators of communications, owners or holders o…https://digitalpolicyalert.org/change/17091-organisational-requirements-in-decree-no-1667-on-approval-of-the-rules-for-centralised-management-of-the-public-communications-networkhttps://digitalpolicyalert.org/change/17091-organisational-requirements-in-decree-no-1667-on-approval-of-the-rules-for-centralised-management-of-the-public-communications-networkSat, 28 Feb 2026 16:00:00 GMTRussiainfrastructure provider: internet and telecom servicesinfrastructure provider: network hardware and equipmentRussiaOther operating conditionsin forceOn 1 March 2026, Decree No. 1667 on approval of the Rules for centralised management of the public communications network enters into force, establishing content moderation regulation as part of cybersecurity management. The Rules define a threat to…https://digitalpolicyalert.org/change/17090-content-moderation-regulation-in-decree-no-1667-on-approval-of-the-rules-for-centralised-management-of-the-public-communications-networkhttps://digitalpolicyalert.org/change/17090-content-moderation-regulation-in-decree-no-1667-on-approval-of-the-rules-for-centralised-management-of-the-public-communications-networkSat, 28 Feb 2026 16:00:00 GMTRussiainfrastructure provider: internet and telecom servicesplatform intermediary: user-generated contentRussiaContent moderationin forceOn 6 February 2026, the Ministry of Information and Broadcasting issued the guidelines for accessibility of content on platforms of publishers of online curated content (OTT Platforms) for persons with hearing and visual impairment. The guidelines s…https://digitalpolicyalert.org/change/16518-guidelines-for-accessibility-of-content-on-platforms-of-publishers-of-online-curated-contenthttps://digitalpolicyalert.org/change/16518-guidelines-for-accessibility-of-content-on-platforms-of-publishers-of-online-curated-contentThu, 05 Feb 2026 16:00:00 GMTIndiastreaming service providerplatform intermediary: otherIndiaDesign and testing standardsadoptedOn 1 January 2026, the Regulation on the safety of toys and repealing Directive 2009/48/EC enters into force with a grace period. The Regulation requires all toys to have a Digital Product Passport (DPP) to prevent unsafe toys from entering the EU m…https://digitalpolicyalert.org/change/14126-regulation-on-safety-of-toyshttps://digitalpolicyalert.org/change/14126-regulation-on-safety-of-toysWed, 31 Dec 2025 16:00:00 GMTEuropean Uniontechnological consumer goodsEuropean UnionConsumer protectionin grace periodOn 1 January 2026, the Law on Personal Data Protection enters into force. The Law states that organisations and individuals handling personal data must obtain clear consent from data subjects before processing their data, with special provisions for…https://digitalpolicyalert.org/change/11068-data-protection-regulation-in-draft-law-on-personal-data-protectionhttps://digitalpolicyalert.org/change/11068-data-protection-regulation-in-draft-law-on-personal-data-protectionWed, 31 Dec 2025 16:00:00 GMTVietnamcross-cuttingVietnamData governancein grace periodOn 1 January 2026, the regulations adopted under the California Consumer Privacy Act (CCPA) enter into force following approval by the California Office of Administrative Law on 23 September 2025, establishing mandatory cybersecurity audit obligatio…https://digitalpolicyalert.org/change/6949-california-cybersecurity-audit-regulationshttps://digitalpolicyalert.org/change/6949-california-cybersecurity-audit-regulationsWed, 31 Dec 2025 16:00:00 GMTUnited States of Americacross-cuttingUnited States of AmericaData governancein grace periodOn 2 August 2025, the local operations requirement under Article 54 of the regulation laying down harmonised rules on Artificial Intelligence (Artificial Intelligence Act) became applicable to providers of general-purpose AI models not established i…https://digitalpolicyalert.org/change/20746-local-operations-requirement-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-acthttps://digitalpolicyalert.org/change/20746-local-operations-requirement-in-regulation-laying-down-harmonised-rules-on-artificial-intelligence-ai-actFri, 01 Aug 2025 16:00:00 GMTEuropean UnionML and AI developmentEuropean UnionOther operating conditionsin forceOn 14 April 2025, Article 1 of Council Directive (EU) 2025/516 amending Directive 2006/112/EC entered into force. The amendments empower Member States to mandate the issuance of electronic invoices by taxable persons operating within their territory…https://digitalpolicyalert.org/change/4990-council-directive-amending-directive-2006112ec-as-regards-vat-rules-for-the-digital-agehttps://digitalpolicyalert.org/change/4990-council-directive-amending-directive-2006112ec-as-regards-vat-rules-for-the-digital-ageSun, 13 Apr 2025 16:00:00 GMTEuropean Unioncross-cuttingEuropean UnionTaxationin grace periodOn 14 April 2025, the Council Regulation amending Regulation (EU) No 904/2010 as regards the VAT administrative cooperation arrangements needed for the digital age entered into force with grace period. The amendments are part of the broader VAT in t…https://digitalpolicyalert.org/change/4989-regulation-amending-regulation-eu-no-9042010-as-regards-the-vat-administrative-cooperation-arrangements-needed-for-the-digital-agehttps://digitalpolicyalert.org/change/4989-regulation-amending-regulation-eu-no-9042010-as-regards-the-vat-administrative-cooperation-arrangements-needed-for-the-digital-ageSun, 13 Apr 2025 16:00:00 GMTEuropean Unioncross-cuttingEuropean UnionTaxationin forceOn 25 March 2025, the European Health Data Space (EHDS) Regulation (2025/327) entered into force with a grace period. The Regulation facilitates access to electronic health data for primary use in healthcare and secondary use for research, policy ma…https://digitalpolicyalert.org/change/3347-regulation-establishing-a-european-health-data-space-ehds-including-rules-for-portability-and-sharing-of-health-datahttps://digitalpolicyalert.org/change/3347-regulation-establishing-a-european-health-data-space-ehds-including-rules-for-portability-and-sharing-of-health-dataMon, 24 Mar 2025 16:00:00 GMTEuropean Unioncross-cuttingEuropean UnionData governancein grace periodOn 17 March 2025, the Department of Commerce’s rule prohibiting the sale and import of connected consumer vehicles and supporting hardware and software systems from the People's Republic of China (PRC) and Russia comes into force with a grace period…https://digitalpolicyalert.org/change/8819-investigation-into-national-security-risks-of-connected-vehicles-from-countries-of-concernhttps://digitalpolicyalert.org/change/8819-investigation-into-national-security-risks-of-connected-vehicles-from-countries-of-concernSun, 16 Mar 2025 16:00:00 GMTUnited States of Americatechnological consumer goodssoftware provider: other softwareUnited States of AmericaInternational tradein grace periodOn 1 March 2024, the Federal Service for Supervision of Communications, Information Technology, and Mass Media (Roskomnadzor) order No. 168, amending the criteria for including websites in the prohibited resources registry, entered into force. The o…https://digitalpolicyalert.org/change/8919-roskomandzor-order-no-168-amending-criteria-for-including-website-to-prohibited-resources-registryhttps://digitalpolicyalert.org/change/8919-roskomandzor-order-no-168-amending-criteria-for-including-website-to-prohibited-resources-registryThu, 29 Feb 2024 16:00:00 GMTRussiaother service providersoftware provider: other softwareRussiaContent moderationin forceOn 1 September 2023, the Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor) order outlining criteria for including sites containing prohibited information in the register of prohibited sites enter…https://digitalpolicyalert.org/change/6988-roskomnadzor-criteria-for-including-sites-containing-prohibited-information-in-the-register-of-prohibited-siteshttps://digitalpolicyalert.org/change/6988-roskomnadzor-criteria-for-including-sites-containing-prohibited-information-in-the-register-of-prohibited-sitesThu, 31 Aug 2023 16:00:00 GMTRussiainfrastructure provider: internet and telecom servicesplatform intermediary: user-generated contentplatform intermediary: otherRussiaContent moderationin forceOn 28 June 2021, the European Commission's implementing decision on the adequate protection of personal data by the United Kingdom under the General Data Protection Regulation (GDPR) enters into force. The decision finds that the UK ensures an adequ…https://digitalpolicyalert.org/change/91-eu-adequacy-decision-on-uk-data-protection-regime-regarding-gdpr-and-law-enforcement-directivehttps://digitalpolicyalert.org/change/91-eu-adequacy-decision-on-uk-data-protection-regime-regarding-gdpr-and-law-enforcement-directiveSun, 27 Jun 2021 16:00:00 GMTEuropean Unioncross-cuttingEuropean UnionData governancein force