711 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

711 articles

Every Irish Cloud Has A GDPR Lining

Ireland's Data Protection Bill 2018 (the "Bill"), which will implement elements of the European Union's General Data Protection Regulation (the "GDPR"), was published on 1 February 2018 and together the Bill and the GDPR will have impacts on the operations of those working in the cloud.

13 March 2018

Data Processing Agreement and its new challenges

The long-expected General Data Protection Regulation (GDPR) comes with new, specific requirements for data processing agreements, as the required pre-requisite for co-operation between the data controller and processor.

9 March 2018

The recent provisions of the Italian legislator on data protection

The Italian Legislator recently adopted two new laws on data protection matter, Law. n. 167/2017 and Law n. 205/2017, with the aim of coordinating current Italian regulation on privacy matter with the GDPR. These first provisions, which the doctrine considers to be unclear, are expected to be shortly integrated by the Italian privacy harmonization law.

5 March 2018

The GDPR and the Fall of Biometrics

In a world where smart technology has become the norm, where people access their phones and TVs with fingerprints and voice commands, the use of biometrics has entered our lives and has become an intrinsic part of our daily routines. With the implementation of the GDPR, however, the use and rise of biometric systems have been leashed.

2 March 2018

Litigation

Recent decisions of the Austrian Data Protection Office (DSB) and the Austrian Administrative Supreme Court (VwGH)

The article presents three interesting decisions on Austrian data protection law, in particular dealing with control measures at the work place (1.) the scope of the right to access (2.) and a company agreement concerning video surveillance (3.).

26 February 2018

The New Belgian Data Protection Authority under the GDPR

The Belgian Act of 3 December 2017, which was published in the Belgian Official Journal on 10 January 2018, partially implements the European Union's General Data Protection Regulation (2016/679). In this Act, the previous Belgian privacy supervisory authority, the Privacy Commission, is replaced with a new entity.

20 February 2018

Österreich übernimmt Vorsitz der Artikel-29-Gruppe der europäischen Datenschutzbehörden

Die österreichische Datenschutzbeauftragte Andrea Jelinek wurde zur Leiterin der Artikel-29-Datenschutzgruppe gewählt. Diese wird ab Mai als europäischer Datenschutzausschuss die Umsetzung der europäischen Datenschutzgrundverordnung überwachen.

12 February 2018

How to choose a DPO? Practical insights

The data protection officer (DPO) is a key function/office/position under the GDPR responsible for compliance with data protection rules, mandatory for some entities, voluntary for the rest, having attached a strict set of rights, duties and liability prescribed by the GDPR. The DPO must be independent, reporting directly to the highest management level and must be delineated from any conflict of interests. The position of the DPO is an advisory one, the DPO being equally a facilitator and a contact person for all stakeholders.

21 December 2017

Enforcement & finesHealth data

Public hospitals in Norway threatened with fines of NOK 7.2 million (EUR 720,000) following outsourcing project

Public hospitals in Norway are organized in a structure where they are owned by four different regional legal entities. The regional entities are responsible for public procurement of goods and services, including IT services, for use by the hospitals within their region, as well as to fulfil other tasks of common interest.

21 December 2017

GDPR in the Czech environment

General Data Protection Regulation (GDPR) is going to govern the personal data protection matters across Europe since May 2018. Even though the regulation sets the same rules for all member countries, it allows each state to adopt its own rules in specified areas. In the Czech Republic, the government prepared the draft of amendment to the existing Personal Data Protection Act (number 101/2000 Coll.) and the draft is going farther in the legislation procedure.

20 December 2017

20Q&A – The latest CPC project

The 20Q&A project is intended to give the reader a quick overview and short summary of the most urgent questions regarding the General Data Protection Regulation (GDPR). It is intended to raise awareness especially of the changes and partly of what needs to be done before deadline-day, May 25th 2018.

18 December 2017

International transfersLegislation

The Data Protection Bill, Brexit and Data Transfers

The Data Protection Bill (Bill) will replace the Data Protection Act 1998 and will implement the General Data Protection Regulation (GDPR) into the law of England and Wales. The Bill is currently undergoing legislative review in the House of Lords (the upper house of the United Kingdom parliament).

15 December 2017

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership