Skip to content
INPLP — International Network of Privacy Law Professionals
Member log in

707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles
Enforcement & finesInternational transfers

The cost of non-compliance with the GDPR – the Data Protection Commission issues a record fine of €1.2 billion against Meta Ireland

On 22 May 2023, the Irish Data Protection Commission (DPC) announced the conclusion of its inquiry into Meta Platforms Ireland Limited (Meta). This inquiry concerned the manner in which Meta transferred personal data out of the EU to the US. The DCP found that Meta infringed the General Data Protection Regulation (“GDPR”) by transferring personal data to the US under a mechanism knows as standard contractual clauses. The DPC imposed a record fine of €1.2. billion on Meta and ordered it to bring its transfer of personal data from the EU to the US into compliance within 6 months.

12 July 2023

Data subject rightsLegislation

Data Subject Requests Under Turkish Data Protection Law

The Law on Protection of Personal Data w. no. 6698 (“DPL”) contains data subject rights that are similar to those that can be found in the General Data Protection Regulation. While certain rights are common, the exercise of the right under the DPL is subject to certain different requirements. The Article will discuss the conditions for a valid data subject request and obligations of the data controller when a valid data subject request is received.

7 July 2023

International transfers

Sweden: The EU implements the Travel Rule for transfers of crypto-assets

The so-called “Travel Rule” will soon be extended to cover transfers of crypto-assets following the approval of the revised Transfer of Funds Regulation. Crypto Asset Service Providers and intermediaries registered in the European Union will be obligated to collect, verify, store and exchange personal data of persons involved in a transaction – including when transfers are made to so-called un-hosted wallets. Crypto Asset Service Providers now need to establish procedures to adhere to the regulation as well as update and evaluate their processing of personal data.

14 June 2023

Norway: The Norwegian DPA bans the government’s collection of supermarket data for statistical purposes

Statistics Norway (SSB) is a Norwegian government agency that is responsible for development of official statistics for public administration purposes. SSB recently ordered the major Norwegian food supermarket chains to transfer data about all individual purchases to the SSB, through a “live” data transfer, without any specific information being given to the customers. The purpose of the proposed transfer was for SSB to develop two different new statistics: Consumer statistic and dietary statistics. Upon transfer, the purchase data would be linked with payment data supplied by a major Norwegian payment services provider.

13 June 2023

Employment dataLegislation

What steps should employers take when publishing the labor act on the notice board to comply with labor act publication regulations in Serbia?

According to the Labor Law of the Republic of Serbia, if an employee refuses to accept at the premises of the employer a document regarding his/her employment status, the employer is obliged to publish that document on the notice board in order to deliver it. After a period of 8 (eight) calendar days from the date of the publication, the act is considered to have been orderly delivered. However, the question that arises is whether the employer is obliged to implement certain measures in order to comply with the Law on Personal Data Protection, considering that everyone who has access to the notice board will be able to read the personal data of the employee.

23 May 2023

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership