709 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

709 articles

Part II: What Could Privacy Reform Look Like in Canada? Insights from Bill C-11

Bill C-11 died on the order paper in August when the Canadian federal election was called. In this article we explore how the elements of the bill may provide some insight into what privacy reform could look like in the next parliament. We also discuss the possibility of new provincial privacy legislation in Ontario in the wake of Bill C-11’s death.

4 October 2021

Enforcement & fines

The Spanish Data Protection Authority (AEPD) publishes its Annual Report summarizing last year’s activities including enforcement cases

This Annual Report comprehensively collects the activities carried out by this institution, most relevant facts and figures, outstanding trends, the most relevant decisions and procedures of the year. It includes further an analysis of present and future challenges in the privacy arena in Spain.

30 September 2021

INPLP internal

Upcoming: the 6th INPLP annual conference

Vienna, Austria 19 - 21 November 2021

29 September 2021

Litigation

Polish administrative court rules that the GDPR does not grant power to the data protection to order the disclosure of personal data to third parties at their request

The Provincial Administrative Court in Warsaw ruled that Polish Data Protection Supervisory Authority is not competent to order a controller to provide a third party with access to personal data at the request of the third party. Thus it has changed the settled case law shaped under the previously applicable Act on Personal Data Protection from 1997, which was repealed by the GDPR and the new Act on Personal Data Protection from 2018.

27 September 2021

Marketing & cookiesLegislation

New Italian cookie Guidelines: this is how the regulation of users' browsing data changes.

On 9 July 2021, the Italian DPA released the new guidelines on the use of cookies. The purpose of these new guidelines is to achieve an higher level of transparency and to obtain an unambiguous consent for profiling data processing.

21 September 2021

International transfers

Nothing to risk – data transfers to third countries under the GDPR

Due to their extreme importance in an increasingly digitalised and globalised economy, data transfers to third countries have been in the focus of public attention not only since the Schrems II ruling of the European Court of Justice.

15 September 2021

Cloud & vendors

First GDPR code of conduct for a European sovereign cloud

The CISPE code of conduct simplifies data processing contracts under the GDPR and lays the foundations for a sovereign cloud.

10 September 2021

Breach notification

Data breach in the Estonian Information System Authority results in photos of almost 300,000 people stolen

A hacker was able to obtain the identification document photos of almost 300,000 people from a state database. Criminal investigations are ongoing.

9 September 2021

INPLP internal

New members have joined the INPLP: Marie-Hélène Tonnellier and Charlotte Barraco-David (France)

Latournerie Wolfrom Avocats (LWA), a multidisciplinary and independent business Law Firm, is recognised for its technical expertise, its discipline and its intent to innovate. Established in 1995 with…

8 September 2021

Ecuador: 3 challenges to progress and avoid the nightmare

The first ecuadorian data protection law have just came into force the last May 26th. Ecuador now starts a long and decesive journey for implementing a solid data protection system. In this article we review three key challanges that Ecuador has to face in order to make real progress and avoid turning this new beginning in a long nightmare.

7 September 2021

Data subject rights

Right of access pursuant to Art. 15 GDPR – News from Germany

Germany’s Federal Court of Justice decided on the scope of data subject’s rights under Art. 15 GDPR - and set certain limits. However, important questions have been left unanswered.

1 September 2021

Blockchain and the GDPR: Clash of the Titans

At the legal intersection between the emerging distributed ledger technolgies and data privacy a lot has been said and written in anticipation of the future application and the co-existence of the two giants. Regulators and technology experts hope and strive for harmony between the two.

29 August 2021

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership