709 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

709 articles

Does the California Consumer Privacy Act Apply to Me?

The California Consumer Privacy Act (CCPA), a broad-based law protecting information that identifies California residents, was passed in June 2018 and will take effect in 2020. Dubbed “GDPR Lite,” to denote its similarities to the EU General Data Protection Regulation (GDPR), it is expected to be a game-changer for U.S.-based companies that process sensitive data. With detailed disclosure requirements, a grant of extensive rights to individuals to control how their personal information is used, statutory fines and a private right of action, the law requires companies to rethink their data processing practices.

2 September 2019

If at First You GDPR, CCPA, CCPA Again

The California Consumer Privacy Act (CCPA), which takes effect in 2020, has been dubbed “GDPR-Lite” or “California GDPR” because it shares many concepts and compliance obligations with the EU General Data Protection Regulation (GDPR). Both include expanded disclosure obligations and guarantee individuals the right to receive access to their information, request that their information be deleted and opt out of the sale of their information.

2 September 2019

On The Road Again: Practical First Steps On Your Way to Compliance with the CCPA

The California Consumer Privacy Act (CCPA), a broad-based law protecting information that identifies California residents, will take effect in 2020. The law includes detailed disclosure requirements, provides individuals with extensive rights to control how their personal information is used, imposes statutory fines and creates a private right of action. It is expected to dramatically alter the way U.S.-based companies process data.

2 September 2019

Recent decisions of the Austrian Data Protection Authority (3/3)

This article presents the third out of three interesting decisions on Austrian data protection law, in particular dealing with confirmation of the remedial measures taken during a consultation pursuant to Art 36 GDPR, the right to deletion pursuant to Art 17 GDPR and an evaluation of a data controller.

2 September 2019

Marketing & cookies

Would you like some cookies?

When users browse through the internet, cookies perform multi-faceted functions for the benefit of both the webmasters and users accordingly. Following long-established privacy protections and in light of the GDPR, users browsing through the World Wide Web must be given the opportunity to accept and/or reject the various website cookies offered.

30 August 2019

Recent decisions of the Austrian Data Protection Authority (2/3)

This article presents the second out of three interesting decisions on Austrian data protection law, in particular dealing with confirmation of the remedial measures taken during a consultation pursuant to Art 36 GDPR, the right to deletion pursuant to Art 17 GDPR and an evaluation of a data controller.

26 August 2019

Marketing & cookies

The Italian Data Protection Authority Limits the Sending of Advertising and Promotional Contents to Fidelity Cards Holders

For the first time, the Italian Data Protection Authority has exercised its power of "warning" provided by the GDPR, through which it has prohibited the unconditional sending of unsolicited advertising contents to fidelity cards holders.

20 August 2019

Recent decisions of the Austrian Data Protection Authority (1/3)

This article presents the first out of three interesting decisions on Austrian data protection law, in particular dealing with confirmation of the remedial measures taken during a consultation pursuant to Art 36 GDPR, the right to deletion pursuant to Art 17 GDPR and an evaluation of a data controller.

19 August 2019

The Spanish DPA (AEPD) issues a model report to help carry out data protection impact assessments for public administrations

The AEPD published in July 2019 a model report to help Public Administrations carry out im-pact assessments on data protection.

7 August 2019

Enforcement & finesEmployment data

€ 150.000,- GDPR fine imposed on PWC by Greek Data Protection Authority for being not accountable

The Greek HDPA (Hellenic Data Protection Authority) imposed a fine of € 150.000,- on PWC Greece.

6 August 2019

GDPR - the real threat to privacy?

Over 2 years, GDPR and personal data protection has been discussed across the EU. Vast majority of companies, public authorities and other entities, affected by the regulation, started to include the question of personal data protection into their operations. This effect of GDPR may be considered its greatest achievement up to now. But - is it really the right way?

2 August 2019

Enforcement & finesHealth data

Fine of € 460.000,- imposed on Dutch Haga Hospital by Dutch Data Protection Officer, the first Dutch fine under GDPR (July 19, 2019)

This first fine under the GDPR is imposed on the Dutch Haga Hospital for having an insufficient internal security of patient records as stated by the DPA on July 19, 2019. The DPA started an investigation after it appeared that a large amount (about 200 employees) of hospital staff had unauthorized accessed the medical records of a Dutch celebrity. Personal was leaking medical information to the press as well.

25 July 2019

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership