707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

Draft Guidelines on Data Protection by Design and by Default issued by the EDPB

On 20 November 2019, the European Data Protection Board (EDPB) issued a draft of Guidelines on Data Protection by Design and by Default.

5 December 2019

Privacy News from Israel

On November 24, 2019 the Israeli Privacy Protection Authority (the “IPPA”) announced that it had hosted an inter-sectoral roundtable with regard to smart transport privacy tools.

5 December 2019

Legislation

PERSONAL DATA PROTECTION LAW IN MONACO: A “STRUCTURAL MODIFICATION” ANNOUNCED

The preparatory work for the reform of the Monegasque data protection law (Act No. 1.165 of 23 December 1993, consolidated), carried out jointly by the State services and the Commission for the control of personal data (Commission de contrôle des informations nominatives – CCIN), began in 2018, and should be completed in 2019

18 November 2019

Enforcement & fines

Significant fines imposed by the Bulgarian Commission for Personal Data Protection

Earlier in 2019 the Bulgarian data protection supervisory authority – the Bulgarian Commission for Personal Data Protection (“CPDP”)- imposed the first significant fines under the GDPR. The sanctions served as landmark cases in the post GDPR era due to the fact that they were of a significant amount and they were imposed to organizations in both the public and the private sectors – first one of the banks operating in Bulgaria suffered a fine amounting to BGN 1 000 000 (approximately 500 000 EUR) and shortly afterwards the Bulgarian tax authority – the National Revenue Agency (“NRA”) was fined with BGN 5 100 000 (approximately 2 550 000 EUR).

31 October 2019

Employment data

CNIL on monitoring employee software / internet use

Use of video recording of screens, coupled with recordings of telephone conversations in a professional setting, may be proportionate if used only for staff training

24 October 2019

Breach notification

Obligation of Notification of Personal Data Violations to Turkish DPA

Law on Protection of Personal Data numbered 6698 provides under the article titled “Data Security Liabilities” that, data controllers must take all necessary technical and administrative measures to ensure the appropriate level of security to: • Prevent unlawful processing of personal data, • Prevent unlawful access to personal data, • Maintain safeguarding of personal data.

22 October 2019

Cloud & vendorsLegislation

Serbia - readiness/lack of readiness of controllers and processors and knowledge of individuals regarding application of the new Law on Personal Data Protection

In August 2019, Serbia started applying new Law on Personal Data Protection. Many challenges were expected before initiation of the application of the new law, because this law envisions numerous new obligations for the parties processing personal data of individuals, both from private and public sector.

21 October 2019

Marketing & cookiesLitigation

New European judgment on cookies

In its recent judgment in the “Planet49 case”, the Court of Justice of the European Union (“CJEU”) held that consent for cookies cannot be lawfully established through the use of pre-ticked boxes and that clear and comprehensive information should be given to the website users on the functionality of each cookie.

11 October 2019

Enforcement & finesLegislation

New Greek law on GDPR

Following a fast track procedure, the Greek Parliament adopted Law 4624/2019, which frames the provisions of the GDPR in Greece and has come into effect as of 29 August 2019.

11 September 2019

Legislation

20 Questions (and Short Answers) on the California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (CCPA), a broad-based law protecting information that identifies California residents, was passed in June 2018 and will go into effect in 2020. Dubbed “GDPR Lite” to denote its similarities to the EU General Data Protection Regulation (GDPR), it is expected to dramatically alter the way U.S.-based companies process data. The law includes detailed disclosure requirements, provides individuals with extensive rights to control how their personal information is used, imposes statutory fines and creates a private right of action —and will require companies to rethink some of their data processing practices.

2 September 2019

Enforcement & finesLegislation

Does the California Consumer Privacy Act Apply to Me?

The California Consumer Privacy Act (CCPA), a broad-based law protecting information that identifies California residents, was passed in June 2018 and will take effect in 2020. Dubbed “GDPR Lite,” to denote its similarities to the EU General Data Protection Regulation (GDPR), it is expected to be a game-changer for U.S.-based companies that process sensitive data. With detailed disclosure requirements, a grant of extensive rights to individuals to control how their personal information is used, statutory fines and a private right of action, the law requires companies to rethink their data processing practices.

2 September 2019

If at First You GDPR, CCPA, CCPA Again

The California Consumer Privacy Act (CCPA), which takes effect in 2020, has been dubbed “GDPR-Lite” or “California GDPR” because it shares many concepts and compliance obligations with the EU General Data Protection Regulation (GDPR). Both include expanded disclosure obligations and guarantee individuals the right to receive access to their information, request that their information be deleted and opt out of the sale of their information.

2 September 2019

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership