711 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

711 articles

Athletes' Performance Data & Project Red Card

This article provides an insight to the ever increasing market of performance analysis and the intersection with athlete's performance data. A tool and resource used by sports clubs across the world, this article explains the current state of the market; how performance data is used and its value; and whether sports clubs may be in for a data protection 'red card' in the near future.

23 January 2022

Marketing & cookiesLegislation

The new Slovak Electronic Communication Act shall change opt-out regime to opt-in regime for cookies

The use of cookies will therefore no longer be linked to the passivity of the users concerned (opt-out). Anyone who stores or obtains access to information stored in the user's endpoint equipment (cookies) will have to have the prior consent of the user concerned (opt-in), and the consent must comply with the requirements of the GDPR.

20 January 2022

International transfersLitigation

Use of Google analytics violates the GDPR - Recent decision of the austrian data protection authority

The Austrian Data Protection Authority (DPA) decided in a recent groundbreaking decision (22nd of December 2021, D155.027 2021-0.586.257) that the use of Google Analytics is currently violating the GDPR. The DPA held that the transfer of personal data to the US in light of the Schrems II decision is particularly problematic. This is the first decision on the 101 model complaints filed by noyb. Soon similar decisions are to be expected in other EU member states.

19 January 2022

Enforcement & fines

The Norwegian Data Processing Authority issues USD 7.2 million fine to U.S. company Grindr LLC

Following an investigation carried out by the Norwegian Consumer Council, the Norwegian Data Processing Authority on 13 December 2021 issued a fine of NOK 65 million (approximately USD 7.2 million) to Grindr, a U.S. based social networking app for gay, bi, trans and queer people. The legal basis for the fine was that Grindr had disclosed personal data to advertising partners without a valid consent or other legal basis under the GDPR Article 6, and further that special categories of personal data had been disclosed without a valid exemption from the prohibition set out in Article 9.

17 January 2022

INPLP internal

New members have joined the INPLP: Charlotte Gerrish and Anthi Pesmazoglou (France)

Gerrish Legal offers Enterprise Solutions, Law Firm Services and Automated Law to clients being a multi-national company, a small to medium business, a start-up or a freelancer under which it provides…

23 December 2021

Litigation

Data posted on Facebook vs GDPR in the light of the Warsaw WSA judgement

What the exemption from the application of the Regulation due to private and domestic purposes is? Polish Regional Administrative Court gave an answer to this question by referring to CJEU’s jurisdiction ruled before the GDPR was in force.

21 December 2021

INPLP internal

A new member has joined the INPLP: Christian Espinosa Velarde (Ecuador)

ECIJA GPA is recognized by prestigious international legal classification and research directories, offering legal services in all áreas of law. ECIJA GPA has more than 20 years of experience and has…

20 December 2021

Litigation

Constitutional Court: No IP address to be Revealed Without a Court Order

The Constitutional Court of the Republic of Slovenia annulled the criminal conviction for an online defamation, which was based on the IP address of the perpetrator acquired from the website operator, without a court order. The Supreme Court’s view that the violation of an individual’s right to communication privacy was less severe as it was not committed by the state, was rejected as flawed.

17 December 2021

Data subject rightsCloud & vendors

Are you a controller or a processor? Assess carefully.

It often happens that we get confused by the difference between a controller and a processor. The problem may arise when a controller refuses to grant certain rights to the data subject due to its assuredness that it is just a processor. This has recently happened in Serbia where Serbian Data Protection Authority issued decision with respect to this question, which is actually one of its first decisions since Serbia adopted new Law on Personal Data Protection.

13 December 2021

International transfers

Why Is Nigeria’s Obligatory Mandate And Safeguards On International Data Transfer Topical?

Transfer of data has become a major subject of international trade, and understanding the prerequisite for such transfer is necessary. This article interogates the Nigerian legal and regulatory approach and considerations for international data transfers.

1 December 2021

INPLP internal

6th INPLP conference – great success

The 6th INPLP Conference was successfully held in Vienna under the auspices of EuroCloud Europe and organised by Sourcing International.

30 November 2021

Malta amends its rules relating to personal data processing in education

Malta has recently amended its rules in relation to the processing of personal data in the educational sector.

29 November 2021

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership