707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

Data Protection and Press Freedom in the panamanian framework

In 2022, the Panamanian Data Protection Authority sanctioned the digital media for publishing a public document without the consent.

24 January 2023

International transfers

Transfers of personal data in early stages of technology transactions or M&As.

As part of negotiations, due diligence, preliminary reviews and analysis, a party may request or need certain information containing personal data of employees, customers, suppliers and/or business partners of other parties involved in the transaction. Below are some legal suggestions for controllers in accordance with Costa Rican legislation on privacy and protection of personal data.

24 January 2023

Breach notification

UK ICO's new approach to publishing details of complaints, breach reports and reprimands

The UK Information Commissioner's Office (ICO) has started routinely publishing information about complaints made against organisations by members of the public, self-reported data breaches and reprimands issued by the ICO. Those subject to UK GDPR should be aware of the detailed information that this new approach will make available to counterparties, competitors and the public.

24 January 2023

Legislation

Argentina - Changes in the Classification and Ranking for Infringements to the Personal Data Protection Law

Trough Resolutions No. 240/2022 and 244/2022 the Agency for Access to Public Information through Resolutions No. 240/2022 and 244/2022 amended the classification and amounts provided by Provision No. 7/2005 and E 71/2016 of the Argentine Direction for the Protection of Personal Data.

20 January 2023

INPLP internal

A new member has joined the INPLP: Boris Kozlevcar (Slovenia)

JK GROUP is a legal and tax consulting company located in Slovenia, focused on south-east European countries. They are specializing in digital law that covers industries of internet, IT, ICT, ecommerc…

18 January 2023

What information needs to provided when personal information will be processed by Artifical Intelligence?

If an entity collecting data is not fully transparent about the information that is being collected and how it will be processed and I particular when it is collected by bots or processed by Artificial Intelligence then a data subject is unable to provide the required informed consent

17 January 2023

International transfers

Nothing about #SchremsX: What should companies do while EU bodies discuss the draft US adequacy decision?

New US adequacy draft opinion is out. Everyone is talking about #SchremsIII (and IV and X), so I will not. Instead - let's discuss what should US companies involved in EU-US transfers actually be doing now?

12 January 2023

Cloud & vendors

Slovenia’s DPA Finds Cloud Computing Provider a (Joint) Controller of Personal Data

Slovenia’s Information Commissioner (IC) ordered a cloud computing provider (a public administration body) to enter into written arrangements with its clients, in accordance with the provisions of Article 26 of GDPR. In its view, the fact that the clients (controllers) had little or no influence on the technical measures for processing personal data means that the cloud provider should be considered a joint controller.

23 December 2022

Breach notification

Multiple online pharmacies under investigation for the use of Facebook Pixel

The Swedish Authority for Privacy Protection (“the Swedish DPA”) is currently investigating four online pharmacies in Sweden for their use of Facebook Pixels on their websites which has resulted in the transfer of personal data to Facebook. The investigations were initiated this summer when the pharmacies reported themselves to the authority for personal data incidents.

22 December 2022

Enforcement & fines

Analysis of the recent activity of the Portuguese Supervisory Authority - What to expect?

It has been perceived that the sanctioning activity of the Portuguese Supervisory Authority has been fundamentally focused on public entities, which may suggest that for private companies the verification of compliance with GDPR has been less demanding. An example is the recent CNPD's Resolution that applied a fine of EUR 170,000 as well as two reprimands, for the practice of four administrative offences related to the processing of personal data of refugees from Ukraine displaced in Portugal. This sanction originated from a news article published by a Portuguese newspaper which, among other aspects, portrayed the execution of copies of documents belonging to refugees, in the presence of Russian citizens, in a Portuguese City Hall.

21 December 2022

Litigation

Biden’s Executive Order – A UK Perspective

This article discusses the content of and responses to President Biden’s executive order implementing the new EU-US Data Privacy Framework and the potential impact on UK data transfers.

20 December 2022

Legislation

Data Act – one of the key regulation proposals for the EU data economy of the future

Data is certainly a valuable commodity for the digital economy and society. As part of the 2020 European Data Strategy, the European regulators are working to develop new rules in order to ensure greater and fairer data flows and unlock the potential and value of data across all economic sectors in line with European values. The Data Act is designed to respond to these needs.

19 December 2022

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership