707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

New members have joined the INPLP: Charlotte Gerrish and Anthi Pesmazoglou (France)

Gerrish Legal offers Enterprise Solutions, Law Firm Services and Automated Law to clients being a multi-national company, a small to medium business, a start-up or a freelancer under which it provides…

23 December 2021

Litigation

Data posted on Facebook vs GDPR in the light of the Warsaw WSA judgement

What the exemption from the application of the Regulation due to private and domestic purposes is? Polish Regional Administrative Court gave an answer to this question by referring to CJEU’s jurisdiction ruled before the GDPR was in force.

21 December 2021

INPLP internal

A new member has joined the INPLP: Christian Espinosa Velarde (Ecuador)

ECIJA GPA is recognized by prestigious international legal classification and research directories, offering legal services in all áreas of law. ECIJA GPA has more than 20 years of experience and has…

20 December 2021

Litigation

Constitutional Court: No IP address to be Revealed Without a Court Order

The Constitutional Court of the Republic of Slovenia annulled the criminal conviction for an online defamation, which was based on the IP address of the perpetrator acquired from the website operator, without a court order. The Supreme Court’s view that the violation of an individual’s right to communication privacy was less severe as it was not committed by the state, was rejected as flawed.

17 December 2021

Data subject rightsCloud & vendors

Are you a controller or a processor? Assess carefully.

It often happens that we get confused by the difference between a controller and a processor. The problem may arise when a controller refuses to grant certain rights to the data subject due to its assuredness that it is just a processor. This has recently happened in Serbia where Serbian Data Protection Authority issued decision with respect to this question, which is actually one of its first decisions since Serbia adopted new Law on Personal Data Protection.

13 December 2021

International transfers

Why Is Nigeria’s Obligatory Mandate And Safeguards On International Data Transfer Topical?

Transfer of data has become a major subject of international trade, and understanding the prerequisite for such transfer is necessary. This article interogates the Nigerian legal and regulatory approach and considerations for international data transfers.

1 December 2021

INPLP internal

6th INPLP conference – great success

The 6th INPLP Conference was successfully held in Vienna under the auspices of EuroCloud Europe and organised by Sourcing International.

30 November 2021

Malta amends its rules relating to personal data processing in education

Malta has recently amended its rules in relation to the processing of personal data in the educational sector.

29 November 2021

International transfersLitigation

SCCs and CoCs and BCR – Untangling the Web and Spotting the Difference

Under GDPR, data export to third countries is only permitted if the conditions under Chapter 5 are met. The adequacy decision by the commission according to art. 45 GDPR is the Chapters silver bullet. If, for lack of an adequate level of data protection, the EU Commission has not issued such an adequacy decision, the GDPR provides, among others, three alternative legal data protection tools in art. 46 and 47 GDPR: Standard Contractual Clauses (SCCs), Code of Conducts (CoCs) and Binding Corporate Rules (BCRs).

26 November 2021

Data subject rightsLegislation

New draft law on the "right to be forgotten" for those who have overcome serious illness

Last October, the Portuguese parliament approved in a final vote a draft law that establishes the "right to be forgotten", preventing people who have overcome serious illnesses from being discriminated against when accessing credit or insurance. This draft law is an important step not only in the field of data protection but also in the protection of human rights and the battle against discrimination.

22 November 2021

Legislation

China’s New Data Laws

China has recently introduced two new data laws which as well as bringing the rules in relation to personal data in China up to date also create compliance challenges for any non-Chinese entity which collects or processes data originating from China. This article outlines the new laws and their possible impact.

18 November 2021

AI & automation

When AI met privacy

How to fulfil the data protection obligations when using artificial intelligence? One of the main issues of concern is the use of personal information by the algorithms. The European AI industry encourages self-regulation.

16 November 2021

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership