710 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

710 articles

New cybersecurity law imposes security and reporting obligations to Operators of Essential Services and Digital Service Providers

The Greek Parliament recently enacted Law 4577/2018, the purpose of which is to transpose Directive (EU) 2016/1148 on security of network and information systems (the NIS Directive) into Greek law.

6 December 2018

Enforcement & fines

Uber fined £385,000 in the UK and €600,000 in the Netherlands

Uber US and Uber Netherlands were considered to be joint controllers which made them both separately liable for claims of customers of Uber. Uber was fined after a 'serious breach' allowing hackers to download worldwide 54 million customer data.

30 November 2018

3rd CPC Conference of the members of the EuroCloud CPC Network

Vienna, 24 Nov 2018: This year, lawyers from 13 countries attended the event in Vienna and approved a comprehensive list of activities to do with the European General Data Protection Regulation.

24 November 2018

Slovenia’s ICO defines DPO’s additional tasks that could result in a conflict of interests

Paragraph 6, Article 38 of the General Data Protection Regulation (GDPR) allows the Data Protection Officer (DPO) to fulfil other tasks and duties (beside serving as the DPO) for the controller or processor, provided however, that fulfilling such additional assignments doesn’t amount to a conflict of interest.

23 November 2018

Breach notification

The Spanish DPA (AEPD) issues guidelines regarding the management and notification of security breaches according to GDPR

The Agencia Española de Protección de Datos ( AEPD) presented guidelines regarding the management and notification of security breaches in compliance with GDPR.

21 November 2018

Turkey: Data Protection Matters in M&A Transactions

Privacy issues in mergers and acquisitions take the attention of transaction parties among other things in these days.

20 November 2018

ChildrenLegislation

With Legislative Decree 101/2018, Italy harmonized the national privacy legislation to the GDPR

With Legislative Decree n. 101/2018 the Italian legislator has finally taken the last necessary step in order to coordinate the local privacy law to the GDPR. This intervention, in particular, entailed the repealing of the rules considered incompatible with the European dispositions and the regulation of certain issues left to the possible further discipline by each Member State.

16 November 2018

Health data

Doping control in sport – how about personal data?

As the legal representatives of the Slovak Anti-doping Agency (hereinafter referred to as “SADA”), we have taken part in several proceedings known as anti-doping rule violations (hereinafter referred to as “ADRV”). ADRV is considered as conduct of an athlete which breaches rules identified either by the World Anti-doping Code (2015) or certain provisions within national legislation. In the case of the Slovak Republic this legislation is Act No. 440/2015 Coll. on Sports (hereinafter referred to as “Act”).

15 November 2018

List of personal data processing activities that must be subject to a Data Protection Impact Assessment (“DPIA”)

The CNPD (Portuguese Data Protection National Commission), as the Portuguese supervisory authority, has approved Regulation nr. 1/2018 (“Regulation”), pursuant to Articles 35, no. 4 and 57, no. 1, k) of the General Data Protection Regulation (“GDPR”), that provides a list of personal data processing activities that must be subject to a Data Protection Impact Assessment (“DPIA”).

14 November 2018

In-vehicle emergency call systems (e-call) in Turkey

In-vehicle emergency call (eCall) systems, which have been in use for a long time, are defined as systems within vehicles being activated either automatically or manually, that establish connection with the 112 emergency call centers in cases of an emergency.

9 November 2018

Privacy Shield: Brace Yourself, Changes are Coming

Since the application of the GDPR, the days of the EU-U.S. Privacy Shield may be numbered and parties to an IT contract must be on the alert.

8 October 2018

Cloud & vendors

Controller-Processor relationship in public sector (Bulgaria)

With the entry into force of Regulation (EU) 2016/679 (the “General Data Protection Regulation”) on 25th May 2018, the matter of harmonization with the current EU legal framework appeared on the agenda in Bulgaria. The need for EU legal framework harmonization was further enhanced by Directive 2016/680 on data protection in the field of criminal investigations and other related activities. As of today, Bill for amendment and supplementation to the Bulgarian Personal Data Protection Act (“ Draft Bill”) is submitted with the Bulgarian National Assembly and is to be discussed and voted by the competent parliamentary committees. Although the Draft Bill has not yet been passed, this article outlines the main features, which are to be expected.

4 October 2018

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership