707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

Oliver – Helping the Masses Navigate GDPR through Artificial Intelligence

Privacy is key to a healthy information society and the recently-enacted GDPR offers EU citizens significant control over how their data can be collected, used and stored. But as with many important acts of legislation, as noble as they may be, it’s only once citizens fully understand their rights that legislators’ good intentions can be realised. So how do we inform the general public, most of whom don’t have a legal background, the complexities of GDPR? And how can we reach over 700 million EU citizens across different time zones?

30 August 2018

Breach notificationHealth data

Portuguese Data Protection Authority activities - Data Protection Impact Assessment List and notifications for DPO and Data Breaches

The Portuguese Data Protection Authority (“DPA”) recently announced a public consultation on the list of processing activities that requires a Data Protection Impact Assessment (“DPIA”). This public consultation arises from the obligation imposed to the Data Protection Authorities across the European Union to establish and make public a list of kind of processing operations which are subject to the requirement for a DPIA, under paragraph 4 of Article 35 and item k) of paragraph 1 of Article 57 of the GDPR.

20 August 2018

The Estonian data protection authority issued guidance on the definition of “large scale” processing

The Estonian data protection authority (Data Protection Inspectorate, DPI) issued guidance on the definition of “large scale” processing, relevant as regards the appointment of data protection officers (DPOs) and carrying out data protection impact assessments (DPIAs).

2 August 2018

Legislation

Latvia has adopted the Law on Personal Data Processing

The national Law on Personal Data Processing (the National Law) has entered into force on July 5th, 2018, which made Latvia the first Baltic state who adopted its own national legislation based on the General Data Protection Regulation (GDPR).

31 July 2018

Health data

“White list” – (Austrian) Exceptions to the Privacy Impact Assessment

The General Data Protection Regulation (GDPR) stipulates that (data) controllers must carry out what is known as a "data protection impact assessment" (DPIA) before data processing is likely to entail a high risk for the rights and freedoms of natural persons.

18 July 2018

Cloud & vendorsLegislation

A European Sovereign Cloud: the Silver Lining to the U.S. CLOUD Act

The adoption of the U.S. Cloud Act weakens the integrity and security model of leading public cloud providers.

12 July 2018

The Spanish Data Protection Authority (AEPD) issues a check-list on regulatory compliance

The Spanish DPA issued a check-list regarding regulatory compliance to facilitate the implementation of GDPR.

6 July 2018

Employment dataLegislation

Employee monitoring under the Romanian law implementing GDPR

On 27 June 2018, the Romanian Parliament finally approved the Romanian law intending to cover the open clauses under the General Data Protection Regulation ("GDPR"). The new law ("GDPR Implementing Law") is not yet in force; at the date of this article (4 July 2018) it still lacks ratification from the Romanian President and publication with the Romanian Official Gazette.

5 July 2018

Enforcement & fines

GDPR in a Post-Brexit Era: Some New Challenges?

The General Data Protection Regulation (GDPR) came into full operation on 25 May 2018 and was described by the Information Commissioner's Office (ICO) as the "new normal". However, the "new normal" expires on Brexit day when the UK moves to a separate data protection regime known as applied GDPR.

3 July 2018

CPC Presentation Brochure 2018

Halfway through 2018, we have published a presentation brochure detailing the status and results the Cloud Privacy Check (CPC) project has achieved so far.

25 June 2018

Cloud & vendorsLegislation

The Impact of the GDPR in Monaco until the Revision of the Monegasque Data Protection Legislation

The Monegasque Data Protection Authority has published on its website on May 2, 2018 a list of the key questions on the GDPR recurrently asked by the Monegasque companies, and has clarified its impact in Monaco.

8 June 2018

Litigation

A brief history of data protection: How did it all start?

With the GDPR being enforced on 25th of May, we decided to take a glimpse back into the history of data privacy and traced it's first precursors as originating more than 100 years ago.

1 June 2018

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership