707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

The discussions around the national law on personal data processing

The Latvian legislator is facing delays with the adaptation of the national Law on Personal Data Processing (the Draft Law). On April 12, the Latvian Parliament, the Saeima, has conceptually supported the Draft Law in the first sitting. The date of the second sitting is unknown yet, however, the table of proposals submitted until April 20 (the final deadline) is pretty long, and the most of proposals relate to the duties and functions of the Data State Inspectorate along with the certification of the data protection officer appointed by the data controller (i.e. should it be a person included in an official list of a Data State Inspectorate, or the data controller may choose any person in accordance with the requirements of GDPR).

29 May 2018

Enforcement & fines

A guide to the insurability of GDPR fines across Europe: the price of data security

Zepos & Yannopoulos, partners of the EuroCloud CPC network, participated in a multi jurisdictional exercise organised by the international law firm DLA Piper and AON, which addresses the local laws on the issue of insurability of non-GDPR regulatory fines, GDPR-fines and insurability of costs associated with GDPR non-compliance.

23 May 2018

Legislation

The Danish Parliament has adopted the Danish Data Protection Act

The act will to some extent replace the Danish Act on Processing of Personal Data and it will enter into force simultaneously with the General Data Protection Regulation on 25 May 2018.

18 May 2018

GDPR and its influence outside EU - Why, What, Who, When, How (Macedonia’s case study)

GDPR is knocking on the door. Being a Europe’s country, and not being a European Union member country yet, does not release the country from its duty to do its best, to be compliant with GDPR.

15 May 2018

Cloud & vendors

Cloud Contracts, GDPR and Liability Caps

Liability caps in contracts under the GDPR is a hot-button issue for data controllers and data processors. A few days before the application of the General Data Protection Regulation, the allocation of risk — and thus the issue of the liability cap — plays an important role in the negotiations of data processing agreements.

11 May 2018

Employment data

Consent in imbalance of power

Consent of a data subject is often used by data controllers in order to ensure lawful data processing. Still, processing on the single ground of consent may be considered unstable from legal perspective due to a number of reasons – it may be withdrawn at any time, it may be considered invalid in case it has not been given freely etc.

26 April 2018

Data subject rightsLitigation

The right to be forgotten… for convicted criminals?

Earlier in March 2018, the Maltese press reported and revealed that private individuals have successfully requested that court cases decided against them be deleted from local online databases of such judgements. The request was purportedly made on the basis of ‘the right to be forgotten’ yet ignored the legal principles of transparency, legitimacy, justifiability, necessity and proportionality. This matter led MITLA to review the right of erasure against other considerations at the law.

10 April 2018

Legislation

Portuguese GDPR implementation legislation

Even though the GDPR is directly applicable in the Member States, it has left open the possibility for Member States to enact national legislation implementing different solutions for certain aspects, the so called opening clauses.

15 March 2018

Enforcement & finesCloud & vendors

Every Irish Cloud Has A GDPR Lining

Ireland's Data Protection Bill 2018 (the "Bill"), which will implement elements of the European Union's General Data Protection Regulation (the "GDPR"), was published on 1 February 2018 and together the Bill and the GDPR will have impacts on the operations of those working in the cloud.

13 March 2018

Data Processing Agreement and its new challenges

The long-expected General Data Protection Regulation (GDPR) comes with new, specific requirements for data processing agreements, as the required pre-requisite for co-operation between the data controller and processor.

9 March 2018

The recent provisions of the Italian legislator on data protection

The Italian Legislator recently adopted two new laws on data protection matter, Law. n. 167/2017 and Law n. 205/2017, with the aim of coordinating current Italian regulation on privacy matter with the GDPR. These first provisions, which the doctrine considers to be unclear, are expected to be shortly integrated by the Italian privacy harmonization law.

5 March 2018

The GDPR and the Fall of Biometrics

In a world where smart technology has become the norm, where people access their phones and TVs with fingerprints and voice commands, the use of biometrics has entered our lives and has become an intrinsic part of our daily routines. With the implementation of the GDPR, however, the use and rise of biometric systems have been leashed.

2 March 2018

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership