709 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

709 articles

Biden’s Executive Order – A UK Perspective

This article discusses the content of and responses to President Biden’s executive order implementing the new EU-US Data Privacy Framework and the potential impact on UK data transfers.

20 December 2022

Legislation

Data Act – one of the key regulation proposals for the EU data economy of the future

Data is certainly a valuable commodity for the digital economy and society. As part of the 2020 European Data Strategy, the European regulators are working to develop new rules in order to ensure greater and fairer data flows and unlock the potential and value of data across all economic sectors in line with European values. The Data Act is designed to respond to these needs.

19 December 2022

INPLP internal

A new member has joined the INPLP: Burak Ozdagistanli (Turkey)

Ozdagistanli Ekici is a leading independent firm located in Istanbul with an impressive track record in IP and IT matters. The firm has a sector specific approach to make sure that the sector specific…

12 December 2022

Legislation

Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law: what are impacts on data protection?

Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law entered into force on 17 December 2021 in the Member States (the “whistleblowing Directive”). While the transposition of the whistleblowing Directive in the different member States is underway, this new regulation will impact companies’ business compliance. In terms of personal data protection, new challenges are already be anticipated.

6 December 2022

Enforcement & finesData subject rightsEmployment data

Right of access to data: the Italian Data Protection Authority fines company 70,000 euros for failure to respond fully.

The Italian Data Protection Authority (“Garante Privacy”) has imposed a fine of 70,000 euros on a data controller for failing to provide complete, intelligible and easily accessible response to a request-submitted by one of its employees- to access to data processed as part of the employment relationship.

1 December 2022

PPC Introducing a Data Mapping Toolkit for Privacy Protection

The Personal Information Protection Commission (“PPC”), recently published a data mapping tool kit, while using cross-border transfer of personal information as a use case.

29 November 2022

INPLP internal

The 7th INPLP conference

The 7th INPLP Conference was successfully held in Vienna under the auspices of EuroCloud Europe and organised by Sourcing International.

29 November 2022

Enforcement & finesLegislation

Copenhagen-based law firm fined for failing to implement basic security measures

A Copenhagen-based law firm has just been fined DKK 500,000, approx. EURO 67,150, for failing to implement basic security measures when setting up remote access to the firm's IT systems containing personal data of a particularly sensitive nature. Furthermore, the law firm has been reported to the police.

18 November 2022

International transfers

Standard Contractual Clauses for Cross Border Data Transfers in Hong Kong and Mainland China

Businesses around the world now face strict rules governing the cross-border transfer of personal data. Like as has happened in Europe, the privacy authorities in Hong Kong SAR and Mainland China has been active recently in clarifying issues around cross-border data transfers.

16 November 2022

Legislation

Modernizing Canada’s Federal Privacy Law

This article discusses Bill C-27, the recently introduced Federal legislation to update Canada’s private sector privacy law. The bill revives some aspects of the former bill (C-11), refines others, and introduces several novel provisions.

14 November 2022

Legislation

How India’s new draft Telecom Law may impact Data Privacy

India recently released a new draft Telecommunications Bill, 2022, which is currently open to public consultation. This Bill would repeal and replace laws that are decades and in some cases, over a century old. The Bill has already been receiving some backlash against the draft law imperilling encrypted messaging application and justifying communications blackout. The author deep-dives on how could the new draft telecom laws potential impact data privacy in India.

8 November 2022

Data subject rights

EU Regulators Elevate the Threshold of Compliance around Data Subject Access Requests.

The European Data Protection Board and the Irish Data Protection Commission have recently published guidelines for businesses in relation to Data Subject Access Requests ("DSARs"). Both sets of guidlines signal that high standards of compliance are expected from controllers when handling DSARs. The publications are a key indicator that DSARs are very much in the spotlight from a regulatory enforcement perspective.

4 November 2022

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership