709 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

709 articles

Mythos and the New Regulatory Challenges of AI-Driven Cybersecurity

The emergence of advanced AI models capable of autonomously discovering vulnerabilities is reshaping the regulatory landscape of cybersecurity, privacy and operational resilience. Mythos, Anthropic’s advanced cybersecurity-oriented model, illustrates how AI is rapidly evolving from a productivity tool into a strategic infrastructure with profound implications under the GDPR, the EU AI Act, NIS2 and DORA.

9 June 2026

Enforcement & fines

Finland Extends GDPR Fines to Public Authorities – A Long-Awaited Shift in Enforcement

Finland is set to extend GDPR administrative fines to public-sector authorities, ending a long-standing exemption that has set the country apart from most of the European Union. The proposed amendment introduces financial accountability for public bodies, but does so with capped sanctions, targeted carve-outs and a proportionality test reflecting the particular character of public institutions.

2 June 2026

AI & automation

THE SPANISH DPA ISSUES ITS LATEST REPORT: HOW DID THEY REDEFINE PRIVACY AND INNOVATION IN 2025

How is data protection evolving in an era shaped by AI and rapid technological innovation? This article explores the main achievements of the Spanish Data Protection Authority (AEPD) during 2025, highlighting its strategic initiatives to integrate AI, strengthen privacy governance, promote regulatory compliance, and foster national and international collaboration. Through technological modernization and proactive regulation, the AEPD aims at redefining the future of privacy protection in an increasingly digital world.

28 May 2026

Marketing & cookies

Cookies and similar technologies: Swiss FDPIC factsheet highlights practical compliance implications

The latest factsheet on cookies from the FDPIC looks beyond banners to expose how today’s tracking ecosystem really works. This article breaks down the practical legal implications for website operators in Switzerland, explaining why meaningful user choice and restraint in tracking are more important than ever.

19 May 2026

Legislation

Canada Steps Toward Open Banking: Bill C-15 Delivers Data Portability (With Lingering Questions)

With the passage of Bill C-15, the federal government’s budget implementation bill, Canada takes a decisive step toward a consumer-driven banking framework. This article examines the bill’s data portability provisions, including a new data mobility regime added to PIPEDA, and the concerns raised by privacy authorities before Parliament.

12 May 2026

INPLP internal

A new member has joined the INPLP: Migle Dewsbury

Sorainen is a leading business law and tax advisory firm shaping the Baltic business environment. With over 300 professionals across Lithuania, Latvia and Estonia, they advise international investors,…

8 May 2026

Marketing & cookiesChildren

Austrian DPA decisions on Microsoft 365 Education: Unlawful Cookie tracking of school children – and nobody knew about it

In two parallel decisions of October 2025 and January 2026, the Austrian Data Protection Authority (DSB) ruled that Microsoft Corporation acts as a (joint) controller for parts of the data processing carried out via Microsoft 365 Education and unlawfully placed tracking cookies on a pupil’s device without consent. The decisions clarify the allocation of GDPR responsibilities between Microsoft, schools and education ministries. These decisions also have implication for any organisation using Microsoft 365 across the EEA.

5 May 2026

Children

Sharenting – Privacy concerns by the exposure of minors on social media

What happens when parents not only fail to provide special protection, but also place their children in situations that are either dangerous or have a negative impact on them? Can, or indeed should, the State intervene?

28 April 2026

AI & automationHealth data

Legal Update on Privacy and Artificial Intelligence: Costa Rica

Following Costa Rica’s presidential elections in February 2026 and with a new administration set to take office in early May, the country faces well‑defined challenges that will shape its political and economic trajectory over the next four years. Among these challenges, do privacy and artificial intelligence figure prominently?

21 April 2026

INPLP internal

New members have joined the INPLP: Ramón Arias and Joaquín Sosa

With more than 50 years of experience, GALA distinguishes itself as a legal services firm dedicated to providing comprehensive solutions for local and foreign clients with business interests in Panama…

8 April 2026

INPLP internal

A new member has joined the INPLP: Duong Thi Mai Huong

Frasers Law Company is widely recognised for guiding clients through Vietnam’s complex and evolving legal landscape. As the first firm granted a foreign law company licence in Vietnam, Frasers has bui…

2 April 2026

Children

The Digital ECA: Brazil’s New Age Verification Framework and Enforcement Timeline

This article analyzes the recent enactment of Law No. 15,211/2025 (Digital ECA) and the ANPD’s preliminary guidelines on age verification mechanisms. It provides a strategic overview of the 2026 enforcement roadmap for digital service providers operating in the Brazilian market.

31 March 2026

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership