711 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

711 articles

Controller-Processor relationship in public sector (Bulgaria)

With the entry into force of Regulation (EU) 2016/679 (the “General Data Protection Regulation”) on 25th May 2018, the matter of harmonization with the current EU legal framework appeared on the agenda in Bulgaria. The need for EU legal framework harmonization was further enhanced by Directive 2016/680 on data protection in the field of criminal investigations and other related activities. As of today, Bill for amendment and supplementation to the Bulgarian Personal Data Protection Act (“ Draft Bill”) is submitted with the Bulgarian National Assembly and is to be discussed and voted by the competent parliamentary committees. Although the Draft Bill has not yet been passed, this article outlines the main features, which are to be expected.

4 October 2018

Mandatory e-mail encryption from January 1st 2019 in Denmark

The new practice of the Danish Data Protection Agency requires all work related e-mails containing personal data is to be encoded according to the GDPR.

3 October 2018

Legislation

The days after the GDPR – The Cyprus Law on the Protection of Natural Persons against the Processing of Personal Data and the Free Movement of this Data

This year, on the 25th of May 2018, the highly anticipated and monumental EU General Data Protection Regulation (henceforth “the GDPR”) was fully enforced and applied in all Member States of the EU, replacing the previous Data Protection Directive 95/46/EC.

1 October 2018

Enforcement & finesLegislation

GDPR With an Irish Flavour – The Irish Data Protection Act 2018

Ireland's Data Protection Act 2018 (the "DPA"), which implements elements of the European Union's General Data Protection Regulation (the "GDPR"), was formally passed in the nick of time on 24 May 2018 and together the DPA and the GDPR will have significant impact for the operations of those working in the cloud in or through Ireland. Here we outline and clarify some of the key aspects of the DPA.

5 September 2018

AI & automation

Oliver – Helping the Masses Navigate GDPR through Artificial Intelligence

Privacy is key to a healthy information society and the recently-enacted GDPR offers EU citizens significant control over how their data can be collected, used and stored. But as with many important acts of legislation, as noble as they may be, it’s only once citizens fully understand their rights that legislators’ good intentions can be realised. So how do we inform the general public, most of whom don’t have a legal background, the complexities of GDPR? And how can we reach over 700 million EU citizens across different time zones?

30 August 2018

Breach notificationHealth data

Portuguese Data Protection Authority activities - Data Protection Impact Assessment List and notifications for DPO and Data Breaches

The Portuguese Data Protection Authority (“DPA”) recently announced a public consultation on the list of processing activities that requires a Data Protection Impact Assessment (“DPIA”). This public consultation arises from the obligation imposed to the Data Protection Authorities across the European Union to establish and make public a list of kind of processing operations which are subject to the requirement for a DPIA, under paragraph 4 of Article 35 and item k) of paragraph 1 of Article 57 of the GDPR.

20 August 2018

The Estonian data protection authority issued guidance on the definition of “large scale” processing

The Estonian data protection authority (Data Protection Inspectorate, DPI) issued guidance on the definition of “large scale” processing, relevant as regards the appointment of data protection officers (DPOs) and carrying out data protection impact assessments (DPIAs).

2 August 2018

Legislation

Latvia has adopted the Law on Personal Data Processing

The national Law on Personal Data Processing (the National Law) has entered into force on July 5th, 2018, which made Latvia the first Baltic state who adopted its own national legislation based on the General Data Protection Regulation (GDPR).

31 July 2018

Health data

“White list” – (Austrian) Exceptions to the Privacy Impact Assessment

The General Data Protection Regulation (GDPR) stipulates that (data) controllers must carry out what is known as a "data protection impact assessment" (DPIA) before data processing is likely to entail a high risk for the rights and freedoms of natural persons.

18 July 2018

Cloud & vendorsLegislation

A European Sovereign Cloud: the Silver Lining to the U.S. CLOUD Act

The adoption of the U.S. Cloud Act weakens the integrity and security model of leading public cloud providers.

12 July 2018

The Spanish Data Protection Authority (AEPD) issues a check-list on regulatory compliance

The Spanish DPA issued a check-list regarding regulatory compliance to facilitate the implementation of GDPR.

6 July 2018

Employment dataLegislation

Employee monitoring under the Romanian law implementing GDPR

On 27 June 2018, the Romanian Parliament finally approved the Romanian law intending to cover the open clauses under the General Data Protection Regulation ("GDPR"). The new law ("GDPR Implementing Law") is not yet in force; at the date of this article (4 July 2018) it still lacks ratification from the Romanian President and publication with the Romanian Official Gazette.

5 July 2018

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership