707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

DATA PROTECTION AND CORONAVIRUS: A difficult challenge for Businesses.

In the context of the coronavirus pandemic, companies are implementing exceptional measures to protect the health and safety of their employees and clients. As a result of these measures, employers may collect new types of personal data, for example they might want to check whether employees have symptoms of the virus.

3 September 2020

AI & automation

GDPR and Artificial Intelligence – A Conscious Coupling

It is an undeniable fact that Artificial Intelligence (“AI”) has rapidly evolved in recent years and has even more swiftly been integrated in the everyday lives of families and professionals worldwide. The sociotechnical environment of today’s world is a reality and with every passing day AI technology is added to different digital or previously manual functions as part of a cross-industry technological leap. The use of AI technology is seemingly the new normal and is no longer a science fiction work of entertainment. As impressive as the technology’s range of uses and offered benefits are, the use of AI has been a hotly debated subject in relation to its compatibility and coexistence with the General Data Protection Regulation (“GDPR”).

31 August 2020

Legislation

New Dutch class action legislation makes it possible to claim damages in a collective action to ensure enforcement of the GDPR

On 1 January 2020, a new Act allowing representative entities to seek damages in a collective action came into effect in the Netherlands. This Act on redress of mass damages in a collective action (Wet afwikkeling massaschade in collectieve actie (WAMCA), under article article 3:305a Dutch Civil Code) introduces stricter requirements for filing a valid claim vehicle and for the scope of collective actions. It also introduces procedural changes to enhance the efficiency and effectiveness of the proceedings.

27 August 2020

The Italian Data Protection Authority Published Its Annual Report: In 2019, Public And Private Entities Notified 1443 Data Breaches

The annual report summaries the different issues on which the Italian Data Protection Authority (“Italian DPA” or “Authority”) worked over the past year; it also shows the state of implementation of privacy legislation in Italy, as well as an overview of the data breaches notified and the related measures taken.

24 August 2020

Enforcement & fines

The Unauthorised Access to Personal Data by the Slovenian Police

On July 10, 2020, a press conference was held in the hall of Slovenia’s legislative body by Jožef Horvat, MP, a member of one of the coalition parties which until early this year had spent many years in the opposition. The MP explained that his subject access request (SAR) filed with the Police in May produced evidence of 22 instances of access to his personal data, 13 of which contained no explanation as to the purpose thereof.

20 August 2020

Cloud & vendors

Gaia-X: European sovereign cloud guidelines unveiled

The guidelines of the European Gaia-X cloud are now known.

17 August 2020

Marketing & cookiesLitigation

German Federal Court - Finally clarified: tracking cookies not without active consent

The discussion is not new. The European Court of Justice (ECJ) had already decided on 01.10.2019. But only the German Federal Court of Justice (judgement of 28.05.2020, ref.: I ZR 7/16) enforces now a consent as a prerequisite for a tracking cookie.

13 August 2020

Enforcement & finesLegislation

Estonia wants to introduce administrative fines into its legal system to allow for a more effective response to data protection law violations

On 6 May 2020, the Estonian Ministry of Justice sent for coordination round the concept of administrative fines. The goal is to introduce into the Estonian legal system a new administrative penalty – administrative fine – in order to react more efficiently to financial, competition and data protection law violations.

27 July 2020

Appointment of director of Croatian supervisory authority

As everyone already knows, Article 53(2) of the General Data Protection Regulation prescribes the criteria that the director of a supervisory authority should fulfil. The above provision reads: “Each member shall have the qualifications, experience and skills, in particular in the area of the protection of personal data, required to perform its duties and exercise its powers.”

20 July 2020

INPLP internal

New member has joined the INPLP. Mr. Uche Val Obi SAN (Nigeria)

Alliance Law Firm is a dynamic partnership registered under the laws of the Federal Republic of Nigeria. With a seamless blend of industry-recognised partners, consultants and other lawyers, operating…

20 July 2020

Employment data

Is it possible and if it is, how can an employer in Serbia collect personal data of the employees that refer to their criminal records

Criminal records contain personal data on the perpetrator of a criminal offense, on the criminal offense for which he was convicted, data on the sentence, suspended sentence, court warning, release from penalty and pardon, as well as the data on the legal consequences of the conviction. Later changes in the data contained in the criminal records, data on serving of the sentence, and the annulment of the records on the wrong conviction are also entered in the criminal records.

13 July 2020

Enforcement & finesBreach notificationChildren

First GDPR fines in Ireland: Big Tech Fines on the horizon

In May 2020 the Data Protection Commission (DPC) in Ireland issued its first fines under the GDPR, just prior to the second anniversary of the GDPR coming into effect. Additionally, extensive work has been under way for many months on cross border fines against big tech companies whose main establishments are in Ireland. Larger fines are expected to be announced later this year.

6 July 2020

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership