Skip to content
INPLP — International Network of Privacy Law Professionals
Member log in

710 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

710 articles
Enforcement & fines

The Belgian data protection authority bans the use of private sector logins as an access condition to public sector websites

The Belgian tax authorities maintain an online repository called FisconetPlus, on which tax payers can find key information and guidance on taxation questions. However, the information was only available after loggin on to the portal with a Microsoft user account. Unacceptable and in violation of the GDPR, says the Belgian data protection authority.

9 May 2019

Slovak list of processing operations which are subject to the requirement for a data protection impact assessment

Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall, prior to the processing, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data (hereinafter “DPIA”).

6 May 2019

Challenges for Companies with an Israel Nexus

In May 2018, the Israeli Protection Of Privacy Regulations (Data Security 2017) (the “Regulations”) came into effect. The Regulations promulgated under the Israeli Protection of Privacy Law, 1981 (the “Law”), include specific and exacting requirements with respect to data security, which may exceed formal requirements under EU law. In addition has Israel has regulations regarding the transfer of data abroad, which is not entirely consistent with the GDPR, and has a mandatory database registration requirement, for databases which meet certain conditions.

15 April 2019

Norwegian DPA publishes list of processing activities with mandatory DPIA

Under Article 35 of the GDPR, the national Data Processing Authority (DPA) shall establish and make public a list of processing operations which are subject to the requirement for a DPIA. The Norwegian DPA recently published a list of processing activities that the Norwegian DPA considers likely to result in a high risk to the rights and freedoms of data subjects, and which will therefore always require the controller to carry out a DPIA. The Norwegian DPA's list is based on the Working Party 29's analysis in the Guidelines on DPIA (WP 248).

10 April 2019

Enforcement & fines

On 19 February 2019, the Dutch Data Protection Authority has come up with its own policy for determining the levels of administrative fines

On the basis of the guidelines of the article 29 working party of what now is the EDPB (European Data Protection Board) and the stipulations on imposing and setting administrative fines as laid down in the GDPR, the Dutch DPA has now formulated its own policy. This to achieve a consistent approach when administrative fines are imposed. The policy adequately reflects all of the principles listed in the EDPB guidelines, which are intended to come to a common understanding of the assessment criteria laid down in article 83 (2) of the GDPR.

2 April 2019

Legislation

Implications on Data Protection law in the event of a no-deal Brexit

Since the 2016 referendum whereby voters expressed their wish for the United Kingdom (the “UK”) to leave the European Union (the “EU”), and the subsequent notification made by the UK on the 29th of March 2017 to the European Council of its intention to withdraw from the Union pursuant to Article 50 of the Treaty on European Union (also known as “Brexit”), rigorous negotiations between the UK and other EU countries have been taking place with one of the main topics of discussion being the “divorce deal”; in other words, the way in which the UK will leave the EU by the 29th of March 2019.

21 March 2019

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership