Skip to content
INPLP — International Network of Privacy Law Professionals
Member log in

707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles
Health data

Largest cyber attack in the history of Costa Rica: Does the state of emergency continue?

On May 11, 2022, the Costa Rican government declared a National State of Emergency throughout the public sector for cybercrimes suffered by various public institutions (Executive Decree 43542-MP-MICITT). Two international cybercriminal organizations claimed responsibility for the attacks: Hive Ransomware Group and Conti Ransomware. This is an unprecedented situation in the history of the country.

5 September 2022

Legislation

A New Direction for UK Data Protection Law: the Data Protection and Digital Information Bill

The UK government’s Department for Digital, Culture, Media & Sport ("DCMS") has published proposed legislation that will make extensive amendments to the UK’s data protection laws if enacted. The Data Protection and Digital Information Bill (the "Bill") was introduced to Parliament on 18 July 2022 and largely follows the plans announced on 23 June 2022 in the government's response to the consultation Data: a New Direction.

29 August 2022

Litigation

Decision of the Slovak court regarding requested disclosure of personal data

In today's society, the issue of fulfilling the characteristics of personal data is the subject of many disputes as well as legal discussions. What would not have fulfilled the definition of personal data 5 years ago is possible today, because technological advances are making it increasingly easier. For this reason, it is necessary to exercise a considerable degree of prudence when disclosing personal data. Supreme Court of the Slovak Republic pointed out that "personal data is not only the data by which the natural person is directly identified, but also the data relating to the identifiable person." and pointed out that appealed decision of District Court, based on which District Court did not comply with the request regarding disclosure of personal data, was right.

26 August 2022

Marketing & cookiesLitigation

Use of Google analytics (still) breaches the GDPR – austrian data protection authority rejects risk based approach

The Austrian Data Protection Authority (DPA) decided in another decision (22nd of April 2022, D155.026, 2022-0.298.191) that the use of Google Analytics (GA) is (still) violating the GDPR. The DPA held that the transfer of personal data to the US in light of the Schrems II decision is particularly problematic. In this second decision on the usage of GA the DPA explicitly rejects the “risk-based approach” for data transfers to third countries.

16 August 2022

Employment dataLitigation

Can an employer ask the candidate to provide him with a court certificate that criminal proceedings are not being conducted against him

When establishing an employment relationship, employers often ask the candidates for a court confirmation that no criminal proceedings are being conducted against them. The adoption of the new Data Protection Law in Serbia has raised the question whether such a request is justified or it can be consedered as an excessive processing of personal data.

9 August 2022

Litigation

Finding a balance between fighting crime and privacy – the use of metadata

Last April, the Portuguese Constitutional Court declared unconstitutional the provisions of articles 4, 6, and 9 of Law 32/2008 of July 17, which transposed into Portuguese law Directive 2006/24/EC of March 15, on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks (also known as the "Metadata Law"), thereby raising the metadata subject to the top of the most discussed topics of the moment.

29 July 2022

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership