709 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

709 articles

To be or not to be (a processor). That is the question.

In the case of a service provider that is not contracted by a controller to process personal data on its behalf but may gain custody of the controller’s personal data incidentally to the core services provided, should a contract with the controller-processor clauses required under GDPR Article 28 be drawn up?

21 February 2019

International transfers

EU–U.S. Privacy Shield adequacy decision (“Privacy Shield”) adopted on 12 July 2016, assessed by EDPB in report January 22, 2019

The EDPB (European Data Protection Board) assessed in its January 22, 2019 report once again whether the safeguards provided under the EU-U.S. Privacy Shield are workable and effective and the EDPB assessed the robustness of its adequacy decision and its practical implementation.

4 February 2019

Breach notification

Data Breach Report

EuroCloud Europe will undertake to create a European database of data-breach-related DPA decisions and court judgments.

20 January 2019

Joint Controllership Report

EuroCloud Europe will establish a European database of case-studies describing sector specific joint-controllership relations, as well as controller-processor and processor-processor relations"

20 January 2019

LitigationLegislation

Is a violation of a GDPR rule at the same time a violation of competition law?

According to the Oberlandesgericht Hamburg (Higher Regional Court Hamburg) violations of data protection rules can also mean a violation of German competition law and can therefore be actionable by competitors in accordance with the German Unfair Competition Act (Gesetz gegen den unlauteren Wettbewerb).

16 January 2019

Litigation

Properly identifying roles in processing personal data: the latest from the EU Court of Justice

In the last six months, the EU Court of Justice has provided its views on the roles of different parties processing personal data on many occasions, whether it is as regards Facebook fan pages, Facebook like buttons or Jehovah’s Witnesses. With it, the notion of joint controllership has become especially topical.

3 January 2019

2018 Highlights of data protection in Monaco

The year 2018 was for Monaco a preparatory year for the forthcoming adaptation of Act No. 1.165 on the protection of personal data, in the light of the modernized “Convention 108” (Council of Europe) and the GDPR (EU).

20 December 2018

Health data

The Dutch Data Protection Authority (Dutch DPA) clarifies the concept “large scale” for the Data Protection Officer (DPO)

Government agencies and public organisations have the obligation to appoint a DPA, regardless the type of data they process.

17 December 2018

Joint Controllership Sub-group News

During 2018, the Not-for-Profit International Network CPC set up some study groups with the aim to analyze and compare the Member States laws and Data Protection Authorities’ interpretations on some specific legal arrangements provided by the EU Regulation 679/2016, GDPR.

13 December 2018

Cloud & vendors

Compete for the best cloud solution worldwide – the EuroCloud Awards 2019 start now

The EuroCloud Awards recognize the best digital services from Europe and around the world based on their underlying cloud computing technology.

10 December 2018

Breach notificationLitigation

Supreme Court Finds the Publisher and the State Liable for Personal Data Breach

In August 2018, the Supreme Court of the Republic of Slovenia upheld the judgements of the lower courts finding the publisher and the state (Republic of Slovenia) jointly liable for the publication in a secondary school textbook of a set of data which allowed for the indirect identification of the plaintiff.

10 December 2018

Legislation

New cybersecurity law imposes security and reporting obligations to Operators of Essential Services and Digital Service Providers

The Greek Parliament recently enacted Law 4577/2018, the purpose of which is to transpose Directive (EU) 2016/1148 on security of network and information systems (the NIS Directive) into Greek law.

6 December 2018

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership