711 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

711 articles

Recent decisions of the Austrian Data Protection Authority (DPA)

This article presents interesting decisions on Austrian data protection law, which deal in particular with the admissibility of automatic license plate recognition in a parking garage for the purpose of billing for garage use, the processing of image data on a summer sledge run and the disclosure of employee data in connection with a report of incapacity to work using the short message service WhatsApp.

14 March 2020

Five tips on preparing for ‘whistleblowing’ rules

In order to guarantee protection of people who report breaches, I.E. Whistleblowers, employers will soon be obliged to create a clear and confidential system for reporting breaches.

5 March 2020

Litigation

Enforcement of GDPR Infringements by Third Parties – First Decision of the Austrian Supreme Court

While the GDPR deals extensively with the rights and claims of data subjects, it mainly leaves the provisions for the assertion of such claims by third parties to the member states and their courts. In a recent decision, the Austrian Supreme Court now addressed this matter for the first time (OGH 26.11.2019, 4 Ob 84/19k): violations of data protection rights can only be asserted by the affected data subject.

2 March 2020

GDPR news from Croatia at the beginning of 2020

The topic discussed here is the difference between personal data protection before the GDPR entered into effect and the current data protection legislation.

3 February 2020

Enforcement & finesBreach notification

Romanian DPA published its activity report for 2019

On the European Data Protection Day 2020 (i.e. on 28 January 2020), the Romanian DPA published (in Romanian and English languages) a brief statistical activity report for 2019.

3 February 2020

Enforcement & finesMarketing & cookies

Data Protection round-up: Key stories of 2019 and forecast for 2020

2019 was a year of major developments for privacy and data protection in Ireland and abroad. According to Ireland, the year 2020 will be a milestone for DPC.

28 January 2020

Cloud & vendors

Microsoft under a cloud amid GDPR concerns over its cloud contracts

Since the implementation of the GDPR, cloud players have been forced to both rethink their tools and review their contracts.

14 January 2020

Breach notificationLegislation

Data breach notification obligation under turkish data protection law

In Turkey, the Personal Data Protection Law No. 6698 (the "Law") requires data controllers to take all necessary technical and administrative measures.

13 January 2020

Enforcement & fines

5 takeaways from the first year and a half of GDPR fines

The end of the year is usually the time for reflections. Although the first year of GDPR officially ended at the end of May 2019, now is as good of a time as any to look back and summarise what the first year and a half of GDPR and GDPR fines has shown us.

9 January 2020

Breach notification

Report on the State of Privacy in Slovakia

The Office for Personal Data Protection of the Slovak Republic (hereinafter referred to as “Office”) pursuant to the provisions of § 81 para. 2, par. k) of Act no. 18/2018 Coll. on the protection of personal data and on amendments to certain acts shall submit to the National Council of the Slovak Republic a Report on the State of Personal Protection in Slovak Republic for the period of 25 May 2018 to 24 May 2019 (hereinafter referred to as “Report”).

20 December 2019

Litigation

The Danish Data Protection Agency has published new rulings regarding email encryption within the security of processing area

Article 32 of the GDPR on the security of processing has been one of the main focus areas of the Danish Data Protection Agency (the DDPA) in 2019.

20 December 2019

Enforcement & fines

The Belgian data protection authority issues a fine for unlawful use of the national identity card as a tool for customer card enrolment

The Belgian electronic identity card system has been in vogue for a number of years now as a reliable means for electronic identification. It relies principally on the official national register number to identify citizens. Private sector use of that number is however strictly regulated - and the GDPR has created a new avenue for enforcing that law.

13 December 2019

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership