709 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

709 articles

Another new direction: UK reintroduces the Data Protection and Digital Information Bill, but what's changed?

On 8 March 2023, the Department for Science, Innovation and Technology ("DSIT") introduced the Data Protection and Digital Information (No. 2) Bill (the "Bill"), extinguishing the previous Data Protection and Digital Information Bill (the "Previous Bill"). The Bill is set to be "…a simple, clear and business-friendly framework…" that will minimize the bureaucracy associated with "…the barrier-based European GDPR…".

13 July 2023

Breach notification

Bulgarian DPA Introduce Deep Audits as a Standard Practice in Cases of Data Breaches

Bulgarian DPA is currently applying on a regular basis a new procedure in cases of data breach notifications which includes complex questionnaires covering all the data processing activities of the data controller and extensive requests for provision of documents and information within short deadlines.

12 July 2023

Enforcement & finesInternational transfers

The cost of non-compliance with the GDPR – the Data Protection Commission issues a record fine of €1.2 billion against Meta Ireland

On 22 May 2023, the Irish Data Protection Commission (DPC) announced the conclusion of its inquiry into Meta Platforms Ireland Limited (Meta). This inquiry concerned the manner in which Meta transferred personal data out of the EU to the US. The DCP found that Meta infringed the General Data Protection Regulation (“GDPR”) by transferring personal data to the US under a mechanism knows as standard contractual clauses. The DPC imposed a record fine of €1.2. billion on Meta and ordered it to bring its transfer of personal data from the EU to the US into compliance within 6 months.

12 July 2023

Curricula vitae vs Transparency equals? Do political appointments fall under data privacy?

The type of information we need to know Publication of the CVs of persons holding public office serves the principle of transparency

10 July 2023

Data subject rightsLegislation

Data Subject Requests Under Turkish Data Protection Law

The Law on Protection of Personal Data w. no. 6698 (“DPL”) contains data subject rights that are similar to those that can be found in the General Data Protection Regulation. While certain rights are common, the exercise of the right under the DPL is subject to certain different requirements. The Article will discuss the conditions for a valid data subject request and obligations of the data controller when a valid data subject request is received.

7 July 2023

INPLP internal

A new member has joined the INPLP: Daryl A. Palmer (Jamaica)

Palmer Legal provides best in class legal services with a human centered approached. They believe in listening to the client and providing solutions that meet their needs in a cost effective and resul…

30 June 2023

Legislation

Biometric Data and their “sensitivity” under Mexican Data Protection Laws

Mexico has not yet explicitly included biometric data as a special category of personal data (or sensitive data), but this has not stopped the Mexican data protection authority from deciding that this data shall be protected as such. How is it doing it so?

20 June 2023

Argentina: Ratifies Convention 108+

Argentina becomes the 23rd state to ratify Convention 108+.

16 June 2023

International transfers

Sweden: The EU implements the Travel Rule for transfers of crypto-assets

The so-called “Travel Rule” will soon be extended to cover transfers of crypto-assets following the approval of the revised Transfer of Funds Regulation. Crypto Asset Service Providers and intermediaries registered in the European Union will be obligated to collect, verify, store and exchange personal data of persons involved in a transaction – including when transfers are made to so-called un-hosted wallets. Crypto Asset Service Providers now need to establish procedures to adhere to the regulation as well as update and evaluate their processing of personal data.

14 June 2023

Norway: The Norwegian DPA bans the government’s collection of supermarket data for statistical purposes

Statistics Norway (SSB) is a Norwegian government agency that is responsible for development of official statistics for public administration purposes. SSB recently ordered the major Norwegian food supermarket chains to transfer data about all individual purchases to the SSB, through a “live” data transfer, without any specific information being given to the customers. The purpose of the proposed transfer was for SSB to develop two different new statistics: Consumer statistic and dietary statistics. Upon transfer, the purchase data would be linked with payment data supplied by a major Norwegian payment services provider.

13 June 2023

Smile, you're being recorded!

Following the American and European trend, Portugal is now one of the countries that has determined the use of Bodycams by security forces in some situations. With the entry into force of this regime, it remains to be seen whether the personal data and privacy of citizens will be effectively protected.

25 May 2023

Legislation

As the last EU state, Slovenia passed Personal Data Protection Act

As of 2023 data privacy in Slovenia will be governed by the newly passed Personal Data Protection Act (ZVOP-2), which aims to bring country’s data protection framework in line with the GDPR. Slovenia became the last EU member state to fully implement the GDPR into its legal system when ZVOP-2 came into effect on January 26, 2023.

24 May 2023

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership