711 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

711 articles

Administrative fine of 14.500.000 Euro imposed against German Real Estate Company

The Berlin Data Protection Authority has imposed an administrative fine against a Berlin real estate company for 14,5 Million euros due to violations of GDPR regulations

12 December 2019

Enforcement & fines

Conditions for imposing administrative fines – The German Data Protection Authorities’ approach

On 16 October 2019, the German Data Protection Authorities (DPAs) published their concept of how to determine administrative fines.

12 December 2019

iGaming and Privacy in Malta: Tensions?

Data, and not FIAT or digital currency, is the real currency that measures the worth of a gambling operation, and the single common feature between every gaming operator.

9 December 2019

Enforcement & finesData subject rightsBreach notification

Portugal: recent fines for the breach of the GDPR

More than a year has passed since the General Data Protection Regulation (hereinafter “GDPR”) has been applicable in all EU member states.

9 December 2019

Draft Guidelines on Data Protection by Design and by Default issued by the EDPB

On 20 November 2019, the European Data Protection Board (EDPB) issued a draft of Guidelines on Data Protection by Design and by Default.

5 December 2019

Privacy News from Israel

On November 24, 2019 the Israeli Privacy Protection Authority (the “IPPA”) announced that it had hosted an inter-sectoral roundtable with regard to smart transport privacy tools.

5 December 2019

Legislation

PERSONAL DATA PROTECTION LAW IN MONACO: A “STRUCTURAL MODIFICATION” ANNOUNCED

The preparatory work for the reform of the Monegasque data protection law (Act No. 1.165 of 23 December 1993, consolidated), carried out jointly by the State services and the Commission for the control of personal data (Commission de contrôle des informations nominatives – CCIN), began in 2018, and should be completed in 2019

18 November 2019

Enforcement & fines

Significant fines imposed by the Bulgarian Commission for Personal Data Protection

Earlier in 2019 the Bulgarian data protection supervisory authority – the Bulgarian Commission for Personal Data Protection (“CPDP”)- imposed the first significant fines under the GDPR. The sanctions served as landmark cases in the post GDPR era due to the fact that they were of a significant amount and they were imposed to organizations in both the public and the private sectors – first one of the banks operating in Bulgaria suffered a fine amounting to BGN 1 000 000 (approximately 500 000 EUR) and shortly afterwards the Bulgarian tax authority – the National Revenue Agency (“NRA”) was fined with BGN 5 100 000 (approximately 2 550 000 EUR).

31 October 2019

Employment data

CNIL on monitoring employee software / internet use

Use of video recording of screens, coupled with recordings of telephone conversations in a professional setting, may be proportionate if used only for staff training

24 October 2019

Breach notification

Obligation of Notification of Personal Data Violations to Turkish DPA

Law on Protection of Personal Data numbered 6698 provides under the article titled “Data Security Liabilities” that, data controllers must take all necessary technical and administrative measures to ensure the appropriate level of security to: • Prevent unlawful processing of personal data, • Prevent unlawful access to personal data, • Maintain safeguarding of personal data.

22 October 2019

Cloud & vendorsLegislation

Serbia - readiness/lack of readiness of controllers and processors and knowledge of individuals regarding application of the new Law on Personal Data Protection

In August 2019, Serbia started applying new Law on Personal Data Protection. Many challenges were expected before initiation of the application of the new law, because this law envisions numerous new obligations for the parties processing personal data of individuals, both from private and public sector.

21 October 2019

Marketing & cookiesLitigation

New European judgment on cookies

In its recent judgment in the “Planet49 case”, the Court of Justice of the European Union (“CJEU”) held that consent for cookies cannot be lawfully established through the use of pre-ticked boxes and that clear and comprehensive information should be given to the website users on the functionality of each cookie.

11 October 2019

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership