711 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

711 articles

Data Protection Compliance in Turkey

On April 7th 2016, the long awaited Law on the Protection of Personal Data was enacted (the “Law”) in Turkey to regulate process and transfer of personal data. Some of the provisions of the Law entered into force immediately upon its enactment whereas some of them entered into force after six months as of its enactment, and currently the Law is fully in force including a transition period of two years, during which the companies must bring the personal data that has been processed unlawfully prior to the enactment of the Law in compliance with the Law. Otherwise, the Law envisages administrative fines.

27 March 2017

Employment dataLitigation

The Greek Supreme Court opens the way for employers to review electronic communications of employees

The access to and review of corporate emails, other electronic communications and electronic files stored on the business computers of employees by the employers has always been a serious practical concern for Greek employers. It often arises especially in the context of internal audits or in cases of serious suspicions for breach of the employment obligations by the employees when the only available evidence is to be found in the electronic communications.

25 March 2017

The Belgian data protection authority provides its perspective on Data Protection Impact Assessments

The upcoming General Data Protection Regulation contains an obligation to conduct a data protection impact assessment (DPIA) for highly innovative or higher-risk data processing activities. But when should a DPIA precisely be conducted, and how? The Belgian DPA has published draft guidelines to clarify these topics.

21 March 2017

Cloud & vendors

Cloud Conference 2017 discussed the best practices, recent developments and risks of the cloud

On 8 March 2017, the annual Cloud Conference organised by IT News (in Estonian: ITuudised) took place in Tallinn, Estonia. The conference, titled “To be in the cloud or not – that’s the business risk” (in Estonian: “Olla pilves või mitte – selles on äririsk”), brought together stakeholders from both the private and the public sector to discuss best practices, recent developments and risks in moving to the cloud.

18 March 2017

Hearings in preparation of the GDPR

The Danish Ministry of Justice has begun its work with the Danish adoption of the General Data Protection Regulation (the GDPR) in close collaboration with the Danish Business Authority, the Danish Data Pro-tection Agency and the Danish Agency for Digitisation.

15 March 2017

Cloud & vendors

GDPR: a new hope for the use of BCRs for cloud providers in Portugal

The GDPR brings a new hope for the application of BCRs, especially for cloud providers (as processors), as they are given specific recognition in the Regulation, which also sets out in detail the content they must include and the procedure under which they will be approved. However, unless we have some clarification from CNPD until then, we will have to wait for May 2018 to actually put this to test.

6 March 2017

Legislation

The new law on personal data protection: legislative process in Slovakia has been launched

In January 2017, the Office for Personal Data Protection of the Slovak Republic initiated the legislative process leading to the new Law on Personal Data Protection in accordance with the General Regulation on Personal Data Protection.

28 February 2017

Polish Data Protection Authority recommends encrypting email

Polish DPA recent opinion on encryption as preferred response to confidentiality risks associated with email.

22 February 2017

Legislation

Two selected decisions on Austrian data protection law

A case of the DSB (Austrian Data Protection Office) and one of the VwGH (Austrian Administrative Supreme Court) are presented below. The first concerns the question of the admissibility of generating a personal file number on the basis of the birth date. The Supreme Court-decision deals with the issue of identity verification in connection with a request for information.

17 February 2017

Meeting at the offices of Alain Bensoussan Avocats Lexing

Paris, 6th of February 2017: meeting at the offices of Alain Bensoussan Avocats Lexing with Alain Bensoussan, Eric Le Quellenec, Julie Baron and Eric Bonnet discussing the joint European project “Data Privacy Compliance”.

6 February 2017

Cloud & vendorsLegislation

Malta IT Law Association (MITLA) workshop on Cloud Computing

The Malta IT Law Association (MITLA) organised a workshop on Cloud Computing on the 12th of December 2016.

12 January 2017

Legislation

Data Protection Law Made Easy

Lawyers from 32 countries have created the Cloud Privacy Check (CPC), the largest European information platform explaining data protection laws in the simplest possible terms and free of charge. The CPC makes 32 different national regulations directly comparable and allows companies to save thousands of Euros.

21 November 2016

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership