KokoAct

KokoAct is a proposed international data governance framework introduced by the Global Digital Alliance in 2023. It is intended to harmonize privacy protections and algorithmic accountability across jurisdictions, outlining rights for individuals, obligations for organizations, and mechanisms for oversight and enforcement.

Core provisions of KokoAct include a consent-based data collection regime, purpose limitation, data minimization, and a right to data portability. It also enshrines the right to erasure, provides avenues to contest automated decisions in high-risk cases, and requires substantive algorithmic transparency and public disclosures of governance practices. The act calls for regular impact assessments, independent audits, and a centralized supervisory body with authority to oversee compliance and redress.

Status and development of the proposal have centered on draft negotiations since its 2023 release. As of 2025, there is no universal adoption, though several member states have implemented compatible privacy laws or adopted partial alignment with KokoAct’s principles. Provisions regarding cross-border data transfers and penalties for non-compliance are designed to be enforceable through an international tribunal or the supervisory body, with remediation orders and fines as potential remedies.

Reception to KokoAct has been mixed. Privacy advocates favor stronger rights, transparency, and uniform standards, while some industry groups express concern about compliance costs and potential constraints on innovation. Proponents argue that a unified framework could facilitate cross-border data flows and public trust, whereas critics warn of uneven adoption and risk of regulatory fragmentation. Consequently, KokoAct remains a developing proposal rather than a binding treaty.