711 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

711 articles

New Rules on Automotive Data Security to be Effective on 1 Oct 2021

The Cyberspace Administration of China (CAC) has circulated the Provisions on the Management of Automotive Data Security (Trial) 2021 ("Provisions") since May 2021. The Administration has passed this Provisions on 5 July 2021 and will be put in effect on 1 Oct 2021. The final released version made several changes compared to the previously circulated consultation version. This article gives a brief introduction of this Provisions.

8 October 2021

Health data

GAFAM or not GAFAM, that is (still) the question?

After the “Schrems II” decision of the European Court of Justice invalidating the Privacy Shield framework and raising further doubts about other mechanisms for transferring personal data from Europe to the USA, the French supreme administrative court (Conseil d’Etat) had to deal twice with the consequences of this decision concerning European affiliates of American GAFAMs (Google, Apple, Facebook, Amazon, Microsoft) providing hosting services in Europe.

6 October 2021

Legislation

Part II: What Could Privacy Reform Look Like in Canada? Insights from Bill C-11

Bill C-11 died on the order paper in August when the Canadian federal election was called. In this article we explore how the elements of the bill may provide some insight into what privacy reform could look like in the next parliament. We also discuss the possibility of new provincial privacy legislation in Ontario in the wake of Bill C-11’s death.

4 October 2021

Enforcement & fines

The Spanish Data Protection Authority (AEPD) publishes its Annual Report summarizing last year’s activities including enforcement cases

This Annual Report comprehensively collects the activities carried out by this institution, most relevant facts and figures, outstanding trends, the most relevant decisions and procedures of the year. It includes further an analysis of present and future challenges in the privacy arena in Spain.

30 September 2021

INPLP internal

Upcoming: the 6th INPLP annual conference

Vienna, Austria 19 - 21 November 2021

29 September 2021

Litigation

Polish administrative court rules that the GDPR does not grant power to the data protection to order the disclosure of personal data to third parties at their request

The Provincial Administrative Court in Warsaw ruled that Polish Data Protection Supervisory Authority is not competent to order a controller to provide a third party with access to personal data at the request of the third party. Thus it has changed the settled case law shaped under the previously applicable Act on Personal Data Protection from 1997, which was repealed by the GDPR and the new Act on Personal Data Protection from 2018.

27 September 2021

Marketing & cookiesLegislation

New Italian cookie Guidelines: this is how the regulation of users' browsing data changes.

On 9 July 2021, the Italian DPA released the new guidelines on the use of cookies. The purpose of these new guidelines is to achieve an higher level of transparency and to obtain an unambiguous consent for profiling data processing.

21 September 2021

International transfers

Nothing to risk – data transfers to third countries under the GDPR

Due to their extreme importance in an increasingly digitalised and globalised economy, data transfers to third countries have been in the focus of public attention not only since the Schrems II ruling of the European Court of Justice.

15 September 2021

Cloud & vendors

First GDPR code of conduct for a European sovereign cloud

The CISPE code of conduct simplifies data processing contracts under the GDPR and lays the foundations for a sovereign cloud.

10 September 2021

Breach notification

Data breach in the Estonian Information System Authority results in photos of almost 300,000 people stolen

A hacker was able to obtain the identification document photos of almost 300,000 people from a state database. Criminal investigations are ongoing.

9 September 2021

INPLP internal

New members have joined the INPLP: Marie-Hélène Tonnellier and Charlotte Barraco-David (France)

Latournerie Wolfrom Avocats (LWA), a multidisciplinary and independent business Law Firm, is recognised for its technical expertise, its discipline and its intent to innovate. Established in 1995 with…

8 September 2021

Ecuador: 3 challenges to progress and avoid the nightmare

The first ecuadorian data protection law have just came into force the last May 26th. Ecuador now starts a long and decesive journey for implementing a solid data protection system. In this article we review three key challanges that Ecuador has to face in order to make real progress and avoid turning this new beginning in a long nightmare.

7 September 2021

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership