709 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

709 articles

The days after the GDPR – The Cyprus Law on the Protection of Natural Persons against the Processing of Personal Data and the Free Movement of this Data

This year, on the 25th of May 2018, the highly anticipated and monumental EU General Data Protection Regulation (henceforth “the GDPR”) was fully enforced and applied in all Member States of the EU, replacing the previous Data Protection Directive 95/46/EC.

1 October 2018

Enforcement & finesLegislation

GDPR With an Irish Flavour – The Irish Data Protection Act 2018

Ireland's Data Protection Act 2018 (the "DPA"), which implements elements of the European Union's General Data Protection Regulation (the "GDPR"), was formally passed in the nick of time on 24 May 2018 and together the DPA and the GDPR will have significant impact for the operations of those working in the cloud in or through Ireland. Here we outline and clarify some of the key aspects of the DPA.

5 September 2018

AI & automation

Oliver – Helping the Masses Navigate GDPR through Artificial Intelligence

Privacy is key to a healthy information society and the recently-enacted GDPR offers EU citizens significant control over how their data can be collected, used and stored. But as with many important acts of legislation, as noble as they may be, it’s only once citizens fully understand their rights that legislators’ good intentions can be realised. So how do we inform the general public, most of whom don’t have a legal background, the complexities of GDPR? And how can we reach over 700 million EU citizens across different time zones?

30 August 2018

Breach notificationHealth data

Portuguese Data Protection Authority activities - Data Protection Impact Assessment List and notifications for DPO and Data Breaches

The Portuguese Data Protection Authority (“DPA”) recently announced a public consultation on the list of processing activities that requires a Data Protection Impact Assessment (“DPIA”). This public consultation arises from the obligation imposed to the Data Protection Authorities across the European Union to establish and make public a list of kind of processing operations which are subject to the requirement for a DPIA, under paragraph 4 of Article 35 and item k) of paragraph 1 of Article 57 of the GDPR.

20 August 2018

The Estonian data protection authority issued guidance on the definition of “large scale” processing

The Estonian data protection authority (Data Protection Inspectorate, DPI) issued guidance on the definition of “large scale” processing, relevant as regards the appointment of data protection officers (DPOs) and carrying out data protection impact assessments (DPIAs).

2 August 2018

Legislation

Latvia has adopted the Law on Personal Data Processing

The national Law on Personal Data Processing (the National Law) has entered into force on July 5th, 2018, which made Latvia the first Baltic state who adopted its own national legislation based on the General Data Protection Regulation (GDPR).

31 July 2018

Health data

“White list” – (Austrian) Exceptions to the Privacy Impact Assessment

The General Data Protection Regulation (GDPR) stipulates that (data) controllers must carry out what is known as a "data protection impact assessment" (DPIA) before data processing is likely to entail a high risk for the rights and freedoms of natural persons.

18 July 2018

Cloud & vendorsLegislation

A European Sovereign Cloud: the Silver Lining to the U.S. CLOUD Act

The adoption of the U.S. Cloud Act weakens the integrity and security model of leading public cloud providers.

12 July 2018

The Spanish Data Protection Authority (AEPD) issues a check-list on regulatory compliance

The Spanish DPA issued a check-list regarding regulatory compliance to facilitate the implementation of GDPR.

6 July 2018

Employment dataLegislation

Employee monitoring under the Romanian law implementing GDPR

On 27 June 2018, the Romanian Parliament finally approved the Romanian law intending to cover the open clauses under the General Data Protection Regulation ("GDPR"). The new law ("GDPR Implementing Law") is not yet in force; at the date of this article (4 July 2018) it still lacks ratification from the Romanian President and publication with the Romanian Official Gazette.

5 July 2018

Enforcement & fines

GDPR in a Post-Brexit Era: Some New Challenges?

The General Data Protection Regulation (GDPR) came into full operation on 25 May 2018 and was described by the Information Commissioner's Office (ICO) as the "new normal". However, the "new normal" expires on Brexit day when the UK moves to a separate data protection regime known as applied GDPR.

3 July 2018

CPC Presentation Brochure 2018

Halfway through 2018, we have published a presentation brochure detailing the status and results the Cloud Privacy Check (CPC) project has achieved so far.

25 June 2018

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership