HUDERIA Methodology and Model

On 25 February 2026, the Committee of Ministers of the Council of Europe approved the HUDERIA Model. The HUDERIA Model complements the HUDERIA Methodology adopted in 2024 by providing supporting materials and resources for its implementation. These include flexible tools, illustrative resources and scalable recommendations linked to the Methodology’s elements, including the Context-Based Risk Analysis (COBRA), the Stakeholder Engagement Process, the Risk and Impact Assessment and the Mitigati...

Official materialNational StrategyOfficial source · rm.coe.int ↗

23 FEB 2026 · International Agreement

Joint statement on AI generated imagery

On 23 February 2026, 61 Data Protection Authorities, including those from Australia, Spain, Hong Kong, New Zealand, Korea, Singapore, Switzerland, and the European Data Protection Board, adopted a joint statement raising concerns about Artificial Intelligence (AI) systems that generate realistic images and videos of identifiable individuals without consent. The statement focuses on organisations that develop or use AI content-generation systems. It notes that such tools enable non-consensual ...

Primary legal sourceNational StrategyOfficial source · ico.org.uk ↗

20 FEB 2026 · International Agreement

New Delhi AI Impact Summit Declaration

On 20 February 2026, 87 countries, including Australia, the Philippines, Japan, Singapore, South Korea, the European Union, and the International Fund for Agricultural Development, endorsed the Artificial Intelligence (AI) Impact Summit Declaration, setting out a shared and voluntary international framework for advancing inclusive, trustworthy, and development-oriented AI. The Declaration applies across the AI ecosystem, including AI developers, deployers, and users in sectors including infra...

Primary legal sourceNational StrategyOfficial source · mea.gov.in ↗

01 NOV 2024 · Other

Global Privacy Assembly resolution on data free flow with trust and effective regulation of global data flows

On 1 November 2024, the Global Privacy Assembly (GPA) announced that it passed a resolution in support of the concept of Data Free Flow with Trust (DFFT) to facilitate cross-border data flows while ensuring high standards of privacy and data protection. The resolution outlines principles to address challenges in regulating global transfers and calls for international collaboration to establish interoperable, robust frameworks for secure data flows. In providing support for DFFT, the resolutio...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

10 MAR 2024 · International Agreement

International Counter Ransomware Initiative 2024 Joint Statement

On 3 October 2024, the 68 parties to the Fourth International Counter Ransomware Initiative (CRI) Gathering issued a joint declaration reaffirming their commitment to enhance collective resilience against ransomware. The declaration, a result of discussions held in Washington, D.C. from 30 September to 3 October 2024, reaffirms the members' aims of developing cybersecurity capabilities, supporting members during ransomware attacks, countering the misuse of virtual assets in ransomware activit...

Primary legal sourceNational StrategyOfficial source · canada.ca ↗

18 FEB 2024 · Standard / Framework

Protocol to Agreement Establishing African Continental Free Trade Area on Digital Trade

On 18 February 2024, the Assembly of Heads of State and Government of the African Union adopted the Protocol to the Agreement Establishing the African Continental Free Trade Area on Digital Trade. It aims to establish harmonised rules and common principles to facilitate digital trade among member states. It seeks to eliminate barriers, foster cooperation, and create a secure, predictable, and transparent environment for digital trade. The Protocol addresses areas such as cross-border data tra...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

13 FEB 2024 · Court Case

Lawsuit on law requiring access to encrypted messages by authorities (Podchasov v Russia)

On 13 February 2024, the European Court of Human Rights (ECtHR) issued a ruling in the case of Podchasov v Russia (33696/19), which concerned a statutory requirement in Russia for internet communication organisers to store communication data for a limited amount of time, as well as making it available to law enforcement alongside the means to decrypt the data. The applicant was a user of the messaging app Telegram, which, in 2018, had been blocked for refusing to comply with a disclosure orde...

Court recordNational StrategyOfficial source · hudoc.echr.coe.int ↗

11 JAN 2024 · Other

Global Privacy Assembly resolution endorsing and encouraging the use of data protection certification mechanisms

On 1 November 2024, the Global Privacy Assembly (GPA) announced that it passed a resolution endorsing and encouraging the use of data protection certification mechanisms as tools to enhance privacy and data protection compliance tools globally. The resolution was passed at the 46th meeting held from 28 October 2024 to 1 November 2024. The GPA endorsed the use of approved certification mechanisms as a means for organisations to demonstrate compliance with privacy and data protection laws. Furt...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

11 JAN 2024 · Other

Global Privacy Assembly resolution on principles regarding processing of personal information in neuroscience and neurotechnology

On 1 November 2024, the Global Privacy Assembly (GPA) announced that it passed a resolution to address the ethical, legal, and data protection challenges posed by advances in neurosciences and neurotechnology. The resolution emphasised the importance of safeguarding personal data related to brain activity (neurodata) and ensuring that neurotechnology respects human rights, dignity, and privacy. It states that the processing of neurodata should respect privacy laws and only be allowed under sp...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

21 DEC 2023 · Policy / Guidance

UN Advisory Body on Artificial Intelligence

On 21 December 2023, the UN Secretary-General's AI Advisory Body published the Interim Report Governing AI for Humanity. The report proposes a global governance framework for AI development, focusing on inclusivity, public interest, data governance, and alignment with international law and the Sustainable Development Goals. The report also outlines the functions of AI governance, including regular assessment of AI's trajectory, harmonising standards, promoting international collaboration, and...

Official materialNational StrategyOfficial source · un.org ↗

30 NOV 2023 · Standard / Framework

Guidelines on the responsible implementation of artificial intelligence systems in journalism

On 30 November 2023, the Council of Europe Intergovernmental Steering Committee on Media and The Information Society (CDMSI) adopted the Guidelines on the responsible implementation of Artificial Intelligence (AI)systems in journalism, outlining the responsibilities of AI technology providers in the news media sector. The guidelines emphasise the importance of editorial autonomy in the democratic functioning of news media and recognise the unique risks faced by news media, including legal con...

Official materialConsumer ProtectionOfficial source · rm.coe.int ↗

01 NOV 2023 · International Agreement

International Counter Ransomware Initiative (CRI) 2023 Declaration

On 1 November 2023, the International Counter Ransomware Initiative (CRI) issued a joint statement following its third convening in 2023. The CRI consists of 50 members, including countries as well as international organisations such as INTERPOL. During the meeting, the CRI members reaffirmed their commitment to collectively combat ransomware by enhancing resilience, disrupting ransomware operations, countering the financial aspects of ransomware, collaborating with the private sector, and co...

Primary legal sourceNational StrategyOfficial source · whitehouse.gov ↗

11 OCT 2023 · Other

OECD/G20 Two-Pillar-Approach regarding the Taxation of the Digital Economy

On 11 October 2023, the OECD/G20 Inclusive Framework adopted the Multilateral Convention to Implement Amount A of Pillar One (MLC). The MLC reflects the existing consensus of the members of the Inclusive Framework, which is aimed at addressing tax challenges resulting from globalisation and digitalisation. Amount A provides a taxing right to market jurisdictions on the basis of profitability rather than physical location of the largest multinationals. The MLC contains key definitions and rule...

Official materialNational StrategyOfficial source · oecd.org ↗

28 JUN 2023 · Other

International Statement to Remove Online Child Sexual Abuse Materials

On 28 June 2023, 71 governments signed a call to action statement to proactively remove and combat child sexual exploitation and abuse material online. In particular, governments highlighted the urgent need for action by governments, internet service providers and access providers, and other actors, to protect children from online sexual exploitation and abuse. Further, they stressed the need for common data sets among competent authorities of known child sexual abuse materials and the need t...

Official materialContent ModerationOfficial source · gov.uk ↗

27 JUN 2023 · Executive Order

European Council Model Contractual Clauses for the Transfer of Personal Data under Convention 108

On 27 June 2023, the Council of Europe announced it had adopted the Model Contractual Clauses for the Transfer of Personal Data from Controller to Controller under the Amending Protocol to the Convention for the Protection of Individuals with regard to the Processing of Personal Data (Convention 108). The Model Contractual Clauses aim to ensure compliance with the data protection requirements for transferring personal data to a non-party under Convention 108. In particular, the Clauses set ou...

Primary legal sourceNational StrategyOfficial source · coe.int ↗

16 FEB 2023 · Standard / Framework

Second Additional Protocol to the Convention on Cybercrime (Budapest Convention)

On 17 February 2023, the Additional Protocol to the Convention on Cybercrime was signed by Argentina. The Protocol foresees enhanced cooperation between parties on cybercrime and electronic evidence. Following the implementation of the Treaty, competent authorities in a ratifying state will be able to request the information needed to identify the owner of domain names registered in the territory of another party state for a criminal investigation. Further, the competent authorities of a rati...

Official materialNational StrategyOfficial source · coe.int ↗

14 SEP 2022 · International Agreement

Albania-Malta Cooperation agreement on cross-border data transfers

On 14 September 2022, the Albanian Office of the Information and Data Protection Commissioner announced the signing of a cooperation agreement with Malta's Information and Data Protection Commissioner. The agreement aims to increase cooperation to enable cross-border data transfers and improve the data protection framework in both countries.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

20 MAY 2022 · Other

Council of Europe Recommendation CM/Rec(2022)16 on combating hate speech

On 20 May 2022, the Council of Ministers of the Council of Europe adopted Recommendation CM/Rec(2022)16 on combating hate speech. The Committee of Ministers has urged member countries to establish comprehensive policies for preventing and combating hate speech, including the development of an effective legislative framework and the implementation of appropriately calibrated and proportional actions. National authorities are recommended to find a balance between the right to privacy, the right...

Official materialContent ModerationOfficial source · search.coe.int ↗

11 MAR 2021 · Other

Council of Europe recommendations on the processing of personal data in the context of profiling

The Recommendations on the protection of individuals with regard to automatic processing of personal data in the context of profiling are approved by the members of the Council of Europe. The recommendation defines "profiling" any form of automated processing of personal data consisting in the use of data to evaluate certain personal aspects relating to an individual. Particularly, the Council promotes a legally binding use of a “privacy by design” approach during the whole duration of the da...

Official materialNational StrategyOfficial source · search.coe.int ↗

Other

Recommendation on online safety and empowerment of users and content creators

On 8 April 2026, the Committee of Ministers of the Council of Europe adopted a recommendation on online safety and the empowerment of users and content creators. The recommendation calls on Member States to adopt legal frameworks, based on available evidence, addressing content rules, intermediary liability, platform accountability, and user empowerment. It states that content restrictions should be prescribed by law and meet the requirements of necessity, proportionality, and foreseeability....

Official materialContent ModerationOfficial source · search.coe.int ↗