711 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

711 articles

Appointment of director of Croatian supervisory authority

As everyone already knows, Article 53(2) of the General Data Protection Regulation prescribes the criteria that the director of a supervisory authority should fulfil. The above provision reads: “Each member shall have the qualifications, experience and skills, in particular in the area of the protection of personal data, required to perform its duties and exercise its powers.”

20 July 2020

INPLP internal

New member has joined the INPLP. Mr. Uche Val Obi SAN (Nigeria)

Alliance Law Firm is a dynamic partnership registered under the laws of the Federal Republic of Nigeria. With a seamless blend of industry-recognised partners, consultants and other lawyers, operating…

20 July 2020

Employment data

Is it possible and if it is, how can an employer in Serbia collect personal data of the employees that refer to their criminal records

Criminal records contain personal data on the perpetrator of a criminal offense, on the criminal offense for which he was convicted, data on the sentence, suspended sentence, court warning, release from penalty and pardon, as well as the data on the legal consequences of the conviction. Later changes in the data contained in the criminal records, data on serving of the sentence, and the annulment of the records on the wrong conviction are also entered in the criminal records.

13 July 2020

Enforcement & finesBreach notificationChildren

First GDPR fines in Ireland: Big Tech Fines on the horizon

In May 2020 the Data Protection Commission (DPC) in Ireland issued its first fines under the GDPR, just prior to the second anniversary of the GDPR coming into effect. Additionally, extensive work has been under way for many months on cross border fines against big tech companies whose main establishments are in Ireland. Larger fines are expected to be announced later this year.

6 July 2020

Enforcement & finesLegislation

2 years of GDPR, 1 year of Portuguese implementation law

The 25th of May marked the second anniversary of the application of the General Data Protection Regulation (GDPR) in the European Union.

2 July 2020

Legislation

Revision of the Swiss Federal Data Protection Act (FDPA)

Due to the Covid-19 pandemic, the last debates in the Swiss parliament were postponed to the autumn session. However, an outlook can be dared. The new FDPA will change the concept from database to processing and will with this covering most of the GDPR legislation, but have some Swiss Finish oddities. Learn more on these in this article.

29 June 2020

INPLP internal

New member has joined the INPLP. Mr. Chris Yau (Hong Kong)

SGS Hong Kong Limited is the Hong Kong branch of SGS group. Established in 1878, SGS is the world’s leading inspection, verification, testing, certification and training company. SGS is recognized as…

27 June 2020

International transfersCloud & vendors

The Swedish and Norwegian Data Protection Authorities have recognized the Danish standard contractual clauses in relation to data processor agreements

The Danish Protection Authority has adopted standard contractual clauses in accordance with article 28(3) of the GDPR. The national data protection authorities in Sweden and Norway have declared that they recognize the Danish standard contractual clauses which is why Swedish and Norwegian businesses can make use of these standard contractual clauses as though they were adopted by their own regulatory authorities.

25 June 2020

Health data

Statement by the Spanish Data Protection Authority (AEPD) on processing of certain health data in the context of Covid-19

The Spanish DPA (AEPD) issued this May a statement regarding the practice of taking the temperature to data subjects in shops, work places and other establishments.

22 June 2020

AI & automationEmployment data

Body temperature readings and the Covid-19. What should we do? Short synopsis of the Romanian status

During the Covid-19 pandemic we received numerous and various questions from our clients regarding body temperature readings of employees (and visitors) and other more intrusive medical tests. While from an employment law perspective some of these are not so problematic and most of the times possible (while also looking of course at the specifics of the industry and employer), when it comes to data protection, things become very complicated. This brief concentrates on body temperature readings only.

11 June 2020

Fight against covid-19 pandemic in Monaco: temperature taking, camera detection of facemask wearing, and diagnostic tests

In early May 2020, the Monegasque Data Protection Authority (Commission de Contrôle des Informations Nominatives, in brief “CCIN”) (hereinafter “Monegasque DPA”) took a position on the issues of taking the temperature of employees and visitors, of using camera detection of facemask wearing, and of diagnostic tests for Covid-19 in the context of the gradual resumption of economic activities in the Principality of Monaco (since May 4th).

11 June 2020

LitigationLegislation

Austrian Court Ruling on Immaterial Damages for GDPR violation – A Mere Violation Of Data Protection Regulations Is Not Enough

In February, the first decision of an Austrian Appellate Court regarding a claim for immaterial damages under Art 82 GDPR has been issued. In its final decision (13th February 2020, 1 R 182/19b), the Higher Regional Court of Innsbruck, as the court of appeal, overturned a much-noticed decision of the Regional Court of Feldkirch:

8 June 2020

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership