710 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

710 articles

The Looming Clouds: How and why cloud services are reshaping the future of financial services in Europe

EuroCloud Europe publishes a new whitepaper in partnership with RedHat and Accenture, tracing the drivers of change across the financial services industry in order to illustrate the trend towards cloud computing,

26 February 2019

Cloud & vendors

To be or not to be (a processor). That is the question.

In the case of a service provider that is not contracted by a controller to process personal data on its behalf but may gain custody of the controller’s personal data incidentally to the core services provided, should a contract with the controller-processor clauses required under GDPR Article 28 be drawn up?

21 February 2019

International transfers

EU–U.S. Privacy Shield adequacy decision (“Privacy Shield”) adopted on 12 July 2016, assessed by EDPB in report January 22, 2019

The EDPB (European Data Protection Board) assessed in its January 22, 2019 report once again whether the safeguards provided under the EU-U.S. Privacy Shield are workable and effective and the EDPB assessed the robustness of its adequacy decision and its practical implementation.

4 February 2019

Breach notification

Data Breach Report

EuroCloud Europe will undertake to create a European database of data-breach-related DPA decisions and court judgments.

20 January 2019

Joint Controllership Report

EuroCloud Europe will establish a European database of case-studies describing sector specific joint-controllership relations, as well as controller-processor and processor-processor relations"

20 January 2019

LitigationLegislation

Is a violation of a GDPR rule at the same time a violation of competition law?

According to the Oberlandesgericht Hamburg (Higher Regional Court Hamburg) violations of data protection rules can also mean a violation of German competition law and can therefore be actionable by competitors in accordance with the German Unfair Competition Act (Gesetz gegen den unlauteren Wettbewerb).

16 January 2019

Litigation

Properly identifying roles in processing personal data: the latest from the EU Court of Justice

In the last six months, the EU Court of Justice has provided its views on the roles of different parties processing personal data on many occasions, whether it is as regards Facebook fan pages, Facebook like buttons or Jehovah’s Witnesses. With it, the notion of joint controllership has become especially topical.

3 January 2019

2018 Highlights of data protection in Monaco

The year 2018 was for Monaco a preparatory year for the forthcoming adaptation of Act No. 1.165 on the protection of personal data, in the light of the modernized “Convention 108” (Council of Europe) and the GDPR (EU).

20 December 2018

Health data

The Dutch Data Protection Authority (Dutch DPA) clarifies the concept “large scale” for the Data Protection Officer (DPO)

Government agencies and public organisations have the obligation to appoint a DPA, regardless the type of data they process.

17 December 2018

Joint Controllership Sub-group News

During 2018, the Not-for-Profit International Network CPC set up some study groups with the aim to analyze and compare the Member States laws and Data Protection Authorities’ interpretations on some specific legal arrangements provided by the EU Regulation 679/2016, GDPR.

13 December 2018

Cloud & vendors

Compete for the best cloud solution worldwide – the EuroCloud Awards 2019 start now

The EuroCloud Awards recognize the best digital services from Europe and around the world based on their underlying cloud computing technology.

10 December 2018

Breach notificationLitigation

Supreme Court Finds the Publisher and the State Liable for Personal Data Breach

In August 2018, the Supreme Court of the Republic of Slovenia upheld the judgements of the lower courts finding the publisher and the state (Republic of Slovenia) jointly liable for the publication in a secondary school textbook of a set of data which allowed for the indirect identification of the plaintiff.

10 December 2018

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership