707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

While preparing for the GDPR – Romania's perspective

Data protection becomes hotter and hotter. Years ago a rather low tier area of law and practice, data protection is now being perceived as one of the coolest area to be within. High fines raise awareness and interest from the business environment. The Data Protection Authority is the new Competition Council, empowered to calculate and apply fines at the level of global revenues of an organization.

2 May 2017

Legislation

Characteristics of the General Data Protection Regulation

A look at the new European Regulation which is bringing Data Protection law into the new century.

1 May 2017

Personal Data Protection vis-à-vis Freedom of Expression and Information

Respect for basic human rights and freedoms is a conditio sina qua non for continuous and proper development of individuals and democratic society as a whole. Any human right or freedom cannot be achieved at expense of other rights, nor has supremacy over them. In this regard, it is necessary to ensure an appropriate balance between human rights and freedoms in practice.

27 April 2017

Legislation

The Spanish DPA (AEPD) presented new materials to help SMEs comply with the European Data Protection Regulation

The Spanish DPA intends to make it easier for SMEs to be aware -during the transitional period until May 25, 2018- of the impact that the Regulation will have on the way in which they deal with data and the measures to be adopted.

26 April 2017

Irish DPC Issues Guidance Note on the GDPR

The Irish Data Protection Commissioner ("DPC") published a guidance note on the General Data Protection Regulation ("GDPR") in preparation for the most significant overhaul on data protection within the EU in over 20 years. The GDPR will apply from 25 May 2018 and aims to harmonise existing EU-wide data protection laws and will replace the existing framework introduced by the EU Data Protection Directive 95/46 EC.

13 April 2017

Data State Inspectorate examines the obtaining and saving personal data by third persons

While the Ministry of Justice of the Republic of Latvia is working on the changes of national legislation for the application of the new General Data Protection Regulation, which entered into force on May 24th, 2016, the national Data State Inspectorate (the “DSI”) has recently examined several cases causing controversies among the public and touching important issues of security of personal data:

4 April 2017

Data subject rights

The Right to be forgotten - Practical perspective

The right to be forgotten under article 17 of GDPR brought up conflict between the right of an individual to object to processing his or her personal data by data controllers and the right of the society to be well informed through the media, having direct impact on the freedom of expression.

2 April 2017

Data Protection Compliance in Monaco: new online preregistration and new modalities for the declaration forms

The Monegasque Data Protection Authority (CCIN) announced on the European Data Protection Day (28 January 2017) the possibility for data controllers to complete online their declaration forms. The new Internet Site of the CCIN offers data controllers the choice to preregister their dossier.

31 March 2017

Data Protection Compliance in Turkey

On April 7th 2016, the long awaited Law on the Protection of Personal Data was enacted (the “Law”) in Turkey to regulate process and transfer of personal data. Some of the provisions of the Law entered into force immediately upon its enactment whereas some of them entered into force after six months as of its enactment, and currently the Law is fully in force including a transition period of two years, during which the companies must bring the personal data that has been processed unlawfully prior to the enactment of the Law in compliance with the Law. Otherwise, the Law envisages administrative fines.

27 March 2017

Employment dataLitigation

The Greek Supreme Court opens the way for employers to review electronic communications of employees

The access to and review of corporate emails, other electronic communications and electronic files stored on the business computers of employees by the employers has always been a serious practical concern for Greek employers. It often arises especially in the context of internal audits or in cases of serious suspicions for breach of the employment obligations by the employees when the only available evidence is to be found in the electronic communications.

25 March 2017

The Belgian data protection authority provides its perspective on Data Protection Impact Assessments

The upcoming General Data Protection Regulation contains an obligation to conduct a data protection impact assessment (DPIA) for highly innovative or higher-risk data processing activities. But when should a DPIA precisely be conducted, and how? The Belgian DPA has published draft guidelines to clarify these topics.

21 March 2017

Cloud & vendors

Cloud Conference 2017 discussed the best practices, recent developments and risks of the cloud

On 8 March 2017, the annual Cloud Conference organised by IT News (in Estonian: ITuudised) took place in Tallinn, Estonia. The conference, titled “To be in the cloud or not – that’s the business risk” (in Estonian: “Olla pilves või mitte – selles on äririsk”), brought together stakeholders from both the private and the public sector to discuss best practices, recent developments and risks in moving to the cloud.

18 March 2017

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership