711 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

711 articles

Multiple online pharmacies under investigation for the use of Facebook Pixel

The Swedish Authority for Privacy Protection (“the Swedish DPA”) is currently investigating four online pharmacies in Sweden for their use of Facebook Pixels on their websites which has resulted in the transfer of personal data to Facebook. The investigations were initiated this summer when the pharmacies reported themselves to the authority for personal data incidents.

22 December 2022

Enforcement & fines

Analysis of the recent activity of the Portuguese Supervisory Authority - What to expect?

It has been perceived that the sanctioning activity of the Portuguese Supervisory Authority has been fundamentally focused on public entities, which may suggest that for private companies the verification of compliance with GDPR has been less demanding. An example is the recent CNPD's Resolution that applied a fine of EUR 170,000 as well as two reprimands, for the practice of four administrative offences related to the processing of personal data of refugees from Ukraine displaced in Portugal. This sanction originated from a news article published by a Portuguese newspaper which, among other aspects, portrayed the execution of copies of documents belonging to refugees, in the presence of Russian citizens, in a Portuguese City Hall.

21 December 2022

Litigation

Biden’s Executive Order – A UK Perspective

This article discusses the content of and responses to President Biden’s executive order implementing the new EU-US Data Privacy Framework and the potential impact on UK data transfers.

20 December 2022

Legislation

Data Act – one of the key regulation proposals for the EU data economy of the future

Data is certainly a valuable commodity for the digital economy and society. As part of the 2020 European Data Strategy, the European regulators are working to develop new rules in order to ensure greater and fairer data flows and unlock the potential and value of data across all economic sectors in line with European values. The Data Act is designed to respond to these needs.

19 December 2022

INPLP internal

A new member has joined the INPLP: Burak Ozdagistanli (Turkey)

Ozdagistanli Ekici is a leading independent firm located in Istanbul with an impressive track record in IP and IT matters. The firm has a sector specific approach to make sure that the sector specific…

12 December 2022

Legislation

Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law: what are impacts on data protection?

Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law entered into force on 17 December 2021 in the Member States (the “whistleblowing Directive”). While the transposition of the whistleblowing Directive in the different member States is underway, this new regulation will impact companies’ business compliance. In terms of personal data protection, new challenges are already be anticipated.

6 December 2022

Enforcement & finesData subject rightsEmployment data

Right of access to data: the Italian Data Protection Authority fines company 70,000 euros for failure to respond fully.

The Italian Data Protection Authority (“Garante Privacy”) has imposed a fine of 70,000 euros on a data controller for failing to provide complete, intelligible and easily accessible response to a request-submitted by one of its employees- to access to data processed as part of the employment relationship.

1 December 2022

PPC Introducing a Data Mapping Toolkit for Privacy Protection

The Personal Information Protection Commission (“PPC”), recently published a data mapping tool kit, while using cross-border transfer of personal information as a use case.

29 November 2022

INPLP internal

The 7th INPLP conference

The 7th INPLP Conference was successfully held in Vienna under the auspices of EuroCloud Europe and organised by Sourcing International.

29 November 2022

Enforcement & finesLegislation

Copenhagen-based law firm fined for failing to implement basic security measures

A Copenhagen-based law firm has just been fined DKK 500,000, approx. EURO 67,150, for failing to implement basic security measures when setting up remote access to the firm's IT systems containing personal data of a particularly sensitive nature. Furthermore, the law firm has been reported to the police.

18 November 2022

International transfers

Standard Contractual Clauses for Cross Border Data Transfers in Hong Kong and Mainland China

Businesses around the world now face strict rules governing the cross-border transfer of personal data. Like as has happened in Europe, the privacy authorities in Hong Kong SAR and Mainland China has been active recently in clarifying issues around cross-border data transfers.

16 November 2022

Legislation

Modernizing Canada’s Federal Privacy Law

This article discusses Bill C-27, the recently introduced Federal legislation to update Canada’s private sector privacy law. The bill revives some aspects of the former bill (C-11), refines others, and introduces several novel provisions.

14 November 2022

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership