710 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

710 articles

The largest bank in Denmark - Danske Bank - is set to be fined DKK 10 million (approximately € 1.35 million)

The Danish Data Protection Authority has found that the largest bank in Denmark - Danske Bank - has failed to demonstrate that it has deleted personal data in accordance with GDPR and has therefore reported Danske Bank to the police and imposed a fine of DKK 10 million (approximately € 1.35 million) on the bank.

14 March 2023

Enforcement & fines

Data Controller Registry Requirement in Turkey

In accordance with Personal Data Protection Law No. 6698 (the “DPL”) and the Regulation on Data Controllers’ Registry (“Regulation”), data controllers must be registered with the Data Controllers’ Registry (“VERBIS”) in Turkey. There are certain thresholds in terms of employee number and financial figures for local data controllers to be subject to registration requirement but there is no threshold or other conditions applicable for foreign data controllers and they are subject to registration requirement in case they process personal data in Turkey and act as data controller.

10 March 2023

Do you think that a black van serves only transportation purposes? Well, maybe you want to reconsider your opinion!

How Cyprus found itself in the epicenter of the spy scandal in Greece

8 March 2023

The lists for financial support for vulnerable categories of citizens must be removed from the web sites of the competent authorities.

The lists for financial support for vulnerable categories of citizens may be available to the public only during the duration of the deadline for submitting of an objection by the affected beneficiary

7 March 2023

Legislation

Personal Data Protection Act: Ecuador’s Current Challenges

A highly advanced Personal Data Protection Law to become into force on May 31st 2023, brings some challenges to Ecuador’s economy while preparing for compliance. We will get into some challenges Ecuador is facing on these last months of preparations.

3 March 2023

Litigation

The year of “Google Fonts” warning letters

Last year, there were some positive developments in related to data protection law. Unfortunately there were also bad ones in which Google Fonts were involved and had some impact on how German websites are build.

1 March 2023

Is There Any Legal Protection for the Personal Data of a Tourist in Nigeria?

Article 1.2 of the Nigeria Data Protection Regulation (NDPR) 2019 provides the extent and limit of the territorial application of the NDPR and NDPR Implementation Framework (Framework) 2020. According to Article 1.2(b), NDPR, applies to natural persons residing in Nigeria or residing outside Nigeria who are citizens of Nigeria.

28 February 2023

Facial Recognition Technology and Data Protection: How to comply?

The development of facial recognition technology has introduced many possibilities to increase cybersecurity, productivity, and public safety. However, the Serbian Law on Personal Data Protection calls for increased attention to compliance among both governmental and private organizations, raising range of questions regarding the use of facial recognition technology in compliance with privacy regulations.

9 February 2023

Cloud & vendors

The French doctrine on the use of the cloud tested against free American solutions for education

After a member of the French Parliament warned about the potential unlawfulness of using Office 365 and Google Workspace for free in schools, the French Minister of Education and Youth decided to ban their use in French schools.

9 February 2023

Litigation

‘Mere Upset’ Not Sufficient for GDPR Compensation Claims

On 6 October 2022, Advocate General Manuel Campos Sánchez-Bordona issued an opinion concerning the right to compensation for non-material damage under the GDPR (the “Opinion”). The Advocate General found that data subjects are not entitled to compensation for non-material damage by showing “mere upset” at an infringement of the GDPR. Article 82(1) GDPR provides that a data subject has the right to receive compensation for material or non-material damage suffered as a result of a breach of the GDPR.

7 February 2023

Employment data

Activity of the personal data supervisory authority of Monaco in 2021

The Personal Data Supervisory Authority (hereinafter "CCIN") has published its 13th Activity Report covering the year 2021. This article outlines the interventions of the CCIN regarding complaints addressed to it by data subjects (1) and the decisions of the Monegasque courts related to personal data protection (2).

2 February 2023

AI & automationHealth data

Responsible use of AI based tools in medical diagnosis and treatment – the AI sandbox

In 2021, the Norwegian Data Processing Authority (DPA) established a regulatory test environment (“sandbox”) for Artificial Intelligence (AI). The purpose of the sandbox is that companies and government agencies can collaborate with the DPA when developing and testing AI based technology which is likely to have privacy implications. The DPA will provide guidance during the development and testing phases, to ensure that the resulting AI tools will be responsible and in compliance with personal data processing rules.

31 January 2023

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership