710 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

710 articles

GDPR: Read from a CPC perspective

I write this text assuming that the reader already knows well about the four-step test implemented by the CPC (http://cloudprivacycheck.eu), and how the CPC otherwise works.

29 May 2017

The impact of Brexit on EEA-UK data flows

The free movement of personal data within the EEA is a cornerstone of the Single Market – crucial to businesses and consumers operating in the EEA. For users and providers of cloud services within the EEA, it is essential for frictionless data transfers. However, the UK government has confirmed that it will not be seeking membership of the Single Market as part of its Brexit negotiation strategy. In this article we examine comments in the UK government's white paper on principles underpinning its Brexit negotiation strategy and from the UK Minister of State for Digital and Culture, which shed some initial light on how the UK government intends to negotiate uninterrupted EEA-UK data flows.

21 May 2017

Legislation

Draft Regulation on Data Controllers’ Registry

On May 5th, 2017 the Turkish Data Protection Authority published the Draft Regulation on Data Controllers’ Registry (“Draft Regulation”) for comments to be submitted. The Draft Regulation is based on Article 16 of the Law on the Protection of Personal Data (“Law”) which came into force last year on April 7th, which states under the supervision of the Board of Protection of Personal Data (“Board”), Data Controllers Registry (“Registry”) will be kept by the Presidency of the Personal Data Protection Authority in a publicly available manner.

18 May 2017

While preparing for the GDPR – Romania's perspective

Data protection becomes hotter and hotter. Years ago a rather low tier area of law and practice, data protection is now being perceived as one of the coolest area to be within. High fines raise awareness and interest from the business environment. The Data Protection Authority is the new Competition Council, empowered to calculate and apply fines at the level of global revenues of an organization.

2 May 2017

Legislation

Characteristics of the General Data Protection Regulation

A look at the new European Regulation which is bringing Data Protection law into the new century.

1 May 2017

Personal Data Protection vis-à-vis Freedom of Expression and Information

Respect for basic human rights and freedoms is a conditio sina qua non for continuous and proper development of individuals and democratic society as a whole. Any human right or freedom cannot be achieved at expense of other rights, nor has supremacy over them. In this regard, it is necessary to ensure an appropriate balance between human rights and freedoms in practice.

27 April 2017

Legislation

The Spanish DPA (AEPD) presented new materials to help SMEs comply with the European Data Protection Regulation

The Spanish DPA intends to make it easier for SMEs to be aware -during the transitional period until May 25, 2018- of the impact that the Regulation will have on the way in which they deal with data and the measures to be adopted.

26 April 2017

Irish DPC Issues Guidance Note on the GDPR

The Irish Data Protection Commissioner ("DPC") published a guidance note on the General Data Protection Regulation ("GDPR") in preparation for the most significant overhaul on data protection within the EU in over 20 years. The GDPR will apply from 25 May 2018 and aims to harmonise existing EU-wide data protection laws and will replace the existing framework introduced by the EU Data Protection Directive 95/46 EC.

13 April 2017

Data State Inspectorate examines the obtaining and saving personal data by third persons

While the Ministry of Justice of the Republic of Latvia is working on the changes of national legislation for the application of the new General Data Protection Regulation, which entered into force on May 24th, 2016, the national Data State Inspectorate (the “DSI”) has recently examined several cases causing controversies among the public and touching important issues of security of personal data:

4 April 2017

Data subject rights

The Right to be forgotten - Practical perspective

The right to be forgotten under article 17 of GDPR brought up conflict between the right of an individual to object to processing his or her personal data by data controllers and the right of the society to be well informed through the media, having direct impact on the freedom of expression.

2 April 2017

Data Protection Compliance in Monaco: new online preregistration and new modalities for the declaration forms

The Monegasque Data Protection Authority (CCIN) announced on the European Data Protection Day (28 January 2017) the possibility for data controllers to complete online their declaration forms. The new Internet Site of the CCIN offers data controllers the choice to preregister their dossier.

31 March 2017

Data Protection Compliance in Turkey

On April 7th 2016, the long awaited Law on the Protection of Personal Data was enacted (the “Law”) in Turkey to regulate process and transfer of personal data. Some of the provisions of the Law entered into force immediately upon its enactment whereas some of them entered into force after six months as of its enactment, and currently the Law is fully in force including a transition period of two years, during which the companies must bring the personal data that has been processed unlawfully prior to the enactment of the Law in compliance with the Law. Otherwise, the Law envisages administrative fines.

27 March 2017

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership