707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

Personal data breaches: guidelines to support data controllers released

The Spanish Data Protection Authority (AEPD) has just released a tool to help data controllers decide whether to communicate or not a data breach to data subjects.

4 December 2020

Legislation

Data Privacy And Protection Regulations In Nigeria

Challenges Confronting Implementation Of Data Privacy And Protection Regulations In Nigeria

2 December 2020

International transfers

U.S. Outlines Privacy Safeguards for Post-Schrems II Data Transfers

The U.S. government has published a whitepaper that outlines the robust limits and safeguards in the United States pertaining to government access to data in an effort to assist organizations in assessing whether their transfers offer appropriate data protection in accordance with the European Court of Justice's (ECJ) Schrems II ruling.

30 November 2020

International transfers

Schrems II recommendations

Important recommendations EDPB (European Data Protection Board) after Schrems II and new standard contractual clauses

27 November 2020

INPLP internal

5th annual INPLP conference

The International Network of Privacy Law Professionals hosted its 5th annual conference

25 November 2020

The Czech Republic: Is There A Possibility To Further Process Legally Published Personal Data That Are Not Open Data?

The concept of open data in the European Union was firstly brought up by directive 2003/98/EC on the re-use of public sector information that “establishes a minimum set of rules governing the re-use and the practical means of facilitating re-use of existing documents held by public sector bodies of the member states” and was subsequently amended by directive 2013/37/EU. However, due to high increase of data on the global level (including public data) as well as new types of data that are being generated and collected and due to technological evolution in general, the rules adopted in 2003, and amended in 2013, became insufficient and could not efficiently keep pace with the ongoing and rapid changes. Also, different rules applied by member states could possibly act as a barrier and prevent reusage of comparable public data for pan-European applications. Therefore, these directives are to be replaced, with effect on 7th of July 2021, by a new directive EU 2019/1024 “in order to promote the use of open data and stimulate innovation in products and services”.

23 November 2020

Enforcement & finesData subject rights

600.000 EUR fine to Google Belgium for misapplying the right to be forgotten

The right to be forgotten is one of the more complex rights in the GDPR, requiring a careful balancing of principles and interests. In a recent case before the Belgian data protection authority, Google Belgium was accused of interpreting the right too narrowly. The authority agreed, and imposed a significant fine.

19 November 2020

Legislation

Draft Code of Conduct of lawyers, law firms and lawyers’ unions on the processing of personal data issued in Greece

Under the GDPR, Codes of Conduct (CoC) constitute an effective accountability tool for achieving self-regulation and transparency of processing activities of a business industry or sector. The main goal of such non-binding texts is to create a uniform and harmonised approach towards data protection compliance among the relevant professionals by taking into consideration the specific characteristics of processing and the special needs of each sector. Various trade associations and professional representative bodies across the EU have submitted CoC for approval to their competent supervisory authorities since the entry into force of the GDPR.

9 November 2020

Enforcement & fines

Romanian DPA fines the lack of cooperation with the supervisory authority

The Romanian Data Protection Authority ("Romanian DPA") has recently sanctioned three entities (two private companies and a homeowners association) for lack of cooperation with the supervisory authority, imposing on these entities administrative fines of EUR 2,000 (twice), respectively EUR 3,000. All three sanctions were announced during October 2020 on the website of the Romanian DPA.

5 November 2020

Health data

Slovak country-wide COVID-19 testing from the perspective of personal data protection

Slovakia has recently witnessed a significant increase in the number of confirmed COVID-19 cases. The country exceeded the threshold of one thousand cases per day on Oct. 7. Only about a week later, tests revealed over 2.000 infected people per day.

2 November 2020

The Danish Data Protection Agency is investigating the research area

The Danish Data Protection Agency has decided to supervise a number of activities in the research area. The Authority also initiates a collaboration with the Ministry of Health with a view to more concrete and targeted guidance for the area.

29 October 2020

Facial recognition technologies from a Swedish data protection perspective

Technologies for facial recognition - capable of identifying and/or verifying a physical person automatically from a digital image or video - are developing at a fast pace and continue to emerge in the markets. Facial recognition technologies are normally based on the identification of certain facial features from an image and comparing it with images of faces collected in a database. The technologies available for facial recognition are many and the ways in which the technology can be used are countless.

26 October 2020

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership