Skip to content
INPLP — International Network of Privacy Law Professionals
Member log in

707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles
Data subject rightsLitigation

Brillen Rottler – A review of the DSAR mechanism

On 19 March 2026, the Court of Justice of the European Union (CJEU) delivered its judgment in Brillen Rottler GmbH & Co KG v TC (Case C-526/24) addressing key issues surrounding data subject access requests (DSAR) and abusive practices. This decision has been anticipated as a potential opportunity to provide further guidance on balancing the right of access under Article 15 GDPR with controllers’ competing rights.

2 July 2026

Litigation

Consolidation of the French doctrine on personal data and pseudonymisation after the CJEU’s SRB ruling

Following the CJEU's SRB ruling (C-413/23, 4 September 2025), French doctrine on the qualification of personal data and pseudonymisation has consolidated through the decisions of the Conseil d'État (13 February 2026, n° 498628) and the CNIL in the IQVIA case (26 May 2026, n°SAN-2026-008): pseudonymisation remains a risk-reducing security measure, not a passport to anonymity.

18 June 2026

Biometric Identification at Sports Venues: The Position of the Czech Data Protection Authority (ÚOOÚ)

On 9 May 2026, supporters of SK Slavia Prague stormed the pitch during a home match at the Eden Stadium. The incident reopened the debate on security at Czech football grounds and, in particular, on whether technology — including AI-assisted facial recognition — could be used to keep known troublemakers out of sports venues. The position of the Czech Data Protection Authority (ÚOOÚ) set out below is directly relevant to that debate.

16 June 2026

AI & automation

Mythos and the New Regulatory Challenges of AI-Driven Cybersecurity

The emergence of advanced AI models capable of autonomously discovering vulnerabilities is reshaping the regulatory landscape of cybersecurity, privacy and operational resilience. Mythos, Anthropic’s advanced cybersecurity-oriented model, illustrates how AI is rapidly evolving from a productivity tool into a strategic infrastructure with profound implications under the GDPR, the EU AI Act, NIS2 and DORA.

9 June 2026

Enforcement & fines

Finland Extends GDPR Fines to Public Authorities – A Long-Awaited Shift in Enforcement

Finland is set to extend GDPR administrative fines to public-sector authorities, ending a long-standing exemption that has set the country apart from most of the European Union. The proposed amendment introduces financial accountability for public bodies, but does so with capped sanctions, targeted carve-outs and a proportionality test reflecting the particular character of public institutions.

2 June 2026

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership