728 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

728 articles

The Spanish DPA (AEPD) presented new materials to help SMEs comply with the European Data Protection Regulation

The Spanish DPA intends to make it easier for SMEs to be aware -during the transitional period until May 25, 2018- of the impact that the Regulation will have on the way in which they deal with data and the measures to be adopted.

26 April 2017

Irish DPC Issues Guidance Note on the GDPR

The Irish Data Protection Commissioner ("DPC") published a guidance note on the General Data Protection Regulation ("GDPR") in preparation for the most significant overhaul on data protection within the EU in over 20 years. The GDPR will apply from 25 May 2018 and aims to harmonise existing EU-wide data protection laws and will replace the existing framework introduced by the EU Data Protection Directive 95/46 EC.

13 April 2017

Data State Inspectorate examines the obtaining and saving personal data by third persons

While the Ministry of Justice of the Republic of Latvia is working on the changes of national legislation for the application of the new General Data Protection Regulation, which entered into force on May 24th, 2016, the national Data State Inspectorate (the “DSI”) has recently examined several cases causing controversies among the public and touching important issues of security of personal data:

4 April 2017

Data subject rights

The Right to be forgotten - Practical perspective

The right to be forgotten under article 17 of GDPR brought up conflict between the right of an individual to object to processing his or her personal data by data controllers and the right of the society to be well informed through the media, having direct impact on the freedom of expression.

2 April 2017

Data Protection Compliance in Monaco: new online preregistration and new modalities for the declaration forms

The Monegasque Data Protection Authority (CCIN) announced on the European Data Protection Day (28 January 2017) the possibility for data controllers to complete online their declaration forms. The new Internet Site of the CCIN offers data controllers the choice to preregister their dossier.

31 March 2017

Data Protection Compliance in Turkey

On April 7th 2016, the long awaited Law on the Protection of Personal Data was enacted (the “Law”) in Turkey to regulate process and transfer of personal data. Some of the provisions of the Law entered into force immediately upon its enactment whereas some of them entered into force after six months as of its enactment, and currently the Law is fully in force including a transition period of two years, during which the companies must bring the personal data that has been processed unlawfully prior to the enactment of the Law in compliance with the Law. Otherwise, the Law envisages administrative fines.

27 March 2017

Employment dataLitigation

The Greek Supreme Court opens the way for employers to review electronic communications of employees

The access to and review of corporate emails, other electronic communications and electronic files stored on the business computers of employees by the employers has always been a serious practical concern for Greek employers. It often arises especially in the context of internal audits or in cases of serious suspicions for breach of the employment obligations by the employees when the only available evidence is to be found in the electronic communications.

25 March 2017

The Belgian data protection authority provides its perspective on Data Protection Impact Assessments

The upcoming General Data Protection Regulation contains an obligation to conduct a data protection impact assessment (DPIA) for highly innovative or higher-risk data processing activities. But when should a DPIA precisely be conducted, and how? The Belgian DPA has published draft guidelines to clarify these topics.

21 March 2017

Cloud & vendors

Cloud Conference 2017 discussed the best practices, recent developments and risks of the cloud

On 8 March 2017, the annual Cloud Conference organised by IT News (in Estonian: ITuudised) took place in Tallinn, Estonia. The conference, titled “To be in the cloud or not – that’s the business risk” (in Estonian: “Olla pilves või mitte – selles on äririsk”), brought together stakeholders from both the private and the public sector to discuss best practices, recent developments and risks in moving to the cloud.

18 March 2017

Hearings in preparation of the GDPR

The Danish Ministry of Justice has begun its work with the Danish adoption of the General Data Protection Regulation (the GDPR) in close collaboration with the Danish Business Authority, the Danish Data Pro-tection Agency and the Danish Agency for Digitisation.

15 March 2017

Cloud & vendors

GDPR: a new hope for the use of BCRs for cloud providers in Portugal

The GDPR brings a new hope for the application of BCRs, especially for cloud providers (as processors), as they are given specific recognition in the Regulation, which also sets out in detail the content they must include and the procedure under which they will be approved. However, unless we have some clarification from CNPD until then, we will have to wait for May 2018 to actually put this to test.

6 March 2017

Legislation

The new law on personal data protection: legislative process in Slovakia has been launched

In January 2017, the Office for Personal Data Protection of the Slovak Republic initiated the legislative process leading to the new Law on Personal Data Protection in accordance with the General Regulation on Personal Data Protection.

28 February 2017

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership