707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

A new member has joined the INPLP: Burak Ozdagistanli (Turkey)

Ozdagistanli Ekici is a leading independent firm located in Istanbul with an impressive track record in IP and IT matters. The firm has a sector specific approach to make sure that the sector specific…

12 December 2022

Legislation

Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law: what are impacts on data protection?

Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law entered into force on 17 December 2021 in the Member States (the “whistleblowing Directive”). While the transposition of the whistleblowing Directive in the different member States is underway, this new regulation will impact companies’ business compliance. In terms of personal data protection, new challenges are already be anticipated.

6 December 2022

Enforcement & finesData subject rightsEmployment data

Right of access to data: the Italian Data Protection Authority fines company 70,000 euros for failure to respond fully.

The Italian Data Protection Authority (“Garante Privacy”) has imposed a fine of 70,000 euros on a data controller for failing to provide complete, intelligible and easily accessible response to a request-submitted by one of its employees- to access to data processed as part of the employment relationship.

1 December 2022

PPC Introducing a Data Mapping Toolkit for Privacy Protection

The Personal Information Protection Commission (“PPC”), recently published a data mapping tool kit, while using cross-border transfer of personal information as a use case.

29 November 2022

INPLP internal

The 7th INPLP conference

The 7th INPLP Conference was successfully held in Vienna under the auspices of EuroCloud Europe and organised by Sourcing International.

29 November 2022

Enforcement & finesLegislation

Copenhagen-based law firm fined for failing to implement basic security measures

A Copenhagen-based law firm has just been fined DKK 500,000, approx. EURO 67,150, for failing to implement basic security measures when setting up remote access to the firm's IT systems containing personal data of a particularly sensitive nature. Furthermore, the law firm has been reported to the police.

18 November 2022

International transfers

Standard Contractual Clauses for Cross Border Data Transfers in Hong Kong and Mainland China

Businesses around the world now face strict rules governing the cross-border transfer of personal data. Like as has happened in Europe, the privacy authorities in Hong Kong SAR and Mainland China has been active recently in clarifying issues around cross-border data transfers.

16 November 2022

Legislation

Modernizing Canada’s Federal Privacy Law

This article discusses Bill C-27, the recently introduced Federal legislation to update Canada’s private sector privacy law. The bill revives some aspects of the former bill (C-11), refines others, and introduces several novel provisions.

14 November 2022

Legislation

How India’s new draft Telecom Law may impact Data Privacy

India recently released a new draft Telecommunications Bill, 2022, which is currently open to public consultation. This Bill would repeal and replace laws that are decades and in some cases, over a century old. The Bill has already been receiving some backlash against the draft law imperilling encrypted messaging application and justifying communications blackout. The author deep-dives on how could the new draft telecom laws potential impact data privacy in India.

8 November 2022

Data subject rights

EU Regulators Elevate the Threshold of Compliance around Data Subject Access Requests.

The European Data Protection Board and the Irish Data Protection Commission have recently published guidelines for businesses in relation to Data Subject Access Requests ("DSARs"). Both sets of guidlines signal that high standards of compliance are expected from controllers when handling DSARs. The publications are a key indicator that DSARs are very much in the spotlight from a regulatory enforcement perspective.

4 November 2022

International transfers

China's Measures for Security Assessment for Outbound Data Transfer

China’s Measures for Security Assessment for Outbound Data Transfer came into effect on 1 Sep 2022. The Measures require risk assessment, data transfer agreement and continuous monitoring to be conducted for organizations who transfer data (not just personal data but all data that maybe relevant to national security) out of China. An application to the Cybersecurity Administration and its approval are also needed for organizations meeting certain criteria.

3 November 2022

Same data protection guarantees around the world?

The privacy team of ECIX GROUP has carried out a comparative analysis focused on the existing different data protection regulations thinking in those clients of the firm with an international presence. In addition, you will have access to a map including a comparative analysis between local regulations.

2 November 2022

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership