707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

INPLP internal

Upcoming: the 6th INPLP annual conference

Vienna, Austria 19 - 21 November 2021

29 September 2021

Litigation

Polish administrative court rules that the GDPR does not grant power to the data protection to order the disclosure of personal data to third parties at their request

The Provincial Administrative Court in Warsaw ruled that Polish Data Protection Supervisory Authority is not competent to order a controller to provide a third party with access to personal data at the request of the third party. Thus it has changed the settled case law shaped under the previously applicable Act on Personal Data Protection from 1997, which was repealed by the GDPR and the new Act on Personal Data Protection from 2018.

27 September 2021

Marketing & cookiesLegislation

New Italian cookie Guidelines: this is how the regulation of users' browsing data changes.

On 9 July 2021, the Italian DPA released the new guidelines on the use of cookies. The purpose of these new guidelines is to achieve an higher level of transparency and to obtain an unambiguous consent for profiling data processing.

21 September 2021

International transfers

Nothing to risk – data transfers to third countries under the GDPR

Due to their extreme importance in an increasingly digitalised and globalised economy, data transfers to third countries have been in the focus of public attention not only since the Schrems II ruling of the European Court of Justice.

15 September 2021

Cloud & vendors

First GDPR code of conduct for a European sovereign cloud

The CISPE code of conduct simplifies data processing contracts under the GDPR and lays the foundations for a sovereign cloud.

10 September 2021

Breach notification

Data breach in the Estonian Information System Authority results in photos of almost 300,000 people stolen

A hacker was able to obtain the identification document photos of almost 300,000 people from a state database. Criminal investigations are ongoing.

9 September 2021

INPLP internal

New members have joined the INPLP: Marie-Hélène Tonnellier and Charlotte Barraco-David (France)

Latournerie Wolfrom Avocats (LWA), a multidisciplinary and independent business Law Firm, is recognised for its technical expertise, its discipline and its intent to innovate. Established in 1995 with…

8 September 2021

Ecuador: 3 challenges to progress and avoid the nightmare

The first ecuadorian data protection law have just came into force the last May 26th. Ecuador now starts a long and decesive journey for implementing a solid data protection system. In this article we review three key challanges that Ecuador has to face in order to make real progress and avoid turning this new beginning in a long nightmare.

7 September 2021

Data subject rights

Right of access pursuant to Art. 15 GDPR – News from Germany

Germany’s Federal Court of Justice decided on the scope of data subject’s rights under Art. 15 GDPR - and set certain limits. However, important questions have been left unanswered.

1 September 2021

Blockchain and the GDPR: Clash of the Titans

At the legal intersection between the emerging distributed ledger technolgies and data privacy a lot has been said and written in anticipation of the future application and the co-existence of the two giants. Regulators and technology experts hope and strive for harmony between the two.

29 August 2021

International transfers

FDPIC publishes guidance on auditing the transfer of personal data abroad

The Federal Data Protection and Information Commissioner (FDPIC) has published in its new guidance how to proceed with data transfer of personal data abroad. This is intended to facilitate the examination for the permissibility of data transfers of personal data and at the same time makes it clear that similar conceptual rules apply in Switzerland as in the EU.

18 August 2021

Technical Cooperation Agreement between the National Data Protection Authority (“ANPD”) and the Brazilian Antitrust Authority (“CADE”)

Following one of ANPD’s main goals set out in its strategic agenda for 2021-2023, which includes establishing an effective regulatory environment for the protection of personal data and strengthening of the culture of personal data protection, the ANPD has entered into a technical cooperation agreement with CADE, in order to establish coordinated action in cases of violation of the economic order involving personal data.

13 August 2021

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership