707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

The North Macedonia Government violated the Law on PDP publishing personal data of awarded applicants in front of the European Court of Human Rights

This resolution includes data for 519 applicants i.e. their names and surnames, personal identification numbers (PIN), bank accounts with data in which bank the bank accounts are maintained

22 August 2024

International transfers

Time to Legalize Data Transfers from Turkey - Deadline: September 1, 2024.

The Turkish Data Protection Law was amended to introduce new mechanisms to transfer personal data from Turkey to other countries. One of the significant changes is that consent will not be used as a legal basis as of September 1, 2024. This deadline requires controllers and processors exporting personal data from Turkey to take action and comply with the new data transfer mechanisms by September 1, 2024.

20 August 2024

China’s Data Export Landscape - An Overview of the Regulatory Framework for Multinationals

The Chinese government's focus on regulating data exports poses a major challenge for multinationals in China. This article discusses the latest legal devlopments relating to data export regulations in China and provides insightful recommendations for complying with current requirements and mitigating data export risks.

13 August 2024

Breach notification

DPC’s 2023 Report – increase in access requests, breach notifications and cross border co-operation

The Irish Data Protection Commission (“DPC”) published its 2023 Annual Report on 29 May 2024 (the “Report”). The Report can be accessed here and provides a helpful summary of the DPC’s actions over the course of 2023

8 August 2024

ACTIVITY OF THE PERSONAL DATA SUPERVISORY AUTHORITY OF MONACO (CCIN) IN 2023/24

This article is devoted to the positions of principle of the personal data supervisory authority of Monaco (hereinafter “CCIN”) formulated in the context of complaints or requests for authorisation to implement data processing in 2023 (I), as well as its recommendations and practical information sheets published in the first quarter of 2024 (II).

6 August 2024

AI & automation

Overfitting: A Conversation Starter for the Next Summer Party

Overfitting in AI, where models over-specialize in training data, exemplifies the challenge faced by Transformer-based LLMs which memorize extensive details. This raises significant legal concerns regarding data protection and copyright. Addressing these issues necessitates interdisciplinary collaboration to navigate the complexities of AI within the legal framework.

1 August 2024

INPLP internal

Upcoming: The 9th annual INPLP conference

We are excited to announce the upcoming 9th INPLP conference, set to take place this November in the lively city of Luxembourg! Traditionally held to commemorate achievements, exchange ideas, and stra…

31 July 2024

Blockchain vs Data protection

At first sight, blockchain technology and the General Data Protection Regulation (GDPR) seem to be intrinsically incompatible. The convergence of personal data protection and blockchain technology raises therefore complex issues surrounding data privacy and data protection issues.

30 July 2024

Legislation

Predicting the Next Amendment of the Japanese Privacy Law

The Personal Information Protection Commission recently publishes an interim summary of issues for the next amendment of the Japanese Privacy Law.

23 July 2024

3 Personal Data Conundrums For India’s New Government

While India’s new Government will continue to push new digital laws, successful implementation of new concepts may require a little novel thinking.

16 July 2024

Swiss-US Data Privacy Framework: Slowly But Steady?

Despite ongoing efforts to align with EU data protection standards, the Swiss-U.S. Privacy Framework remains a work in progress, leaving Swiss controllers with legal uncertainty and the burden of additional compliance measures when transferring data to the US.

11 July 2024

International transfers

Israel and the EU: Data Protection Adequacy

Adequacy is a status granted by the Commission of the European Union to countries outside the European Economic Area (EEA) that provide a level of personal data protection comparable to that provided in European law. When a country has been awarded adequacy status, personal data can flow from the EEA to that country without any further safeguards or authorizations, as if it were part of the EEA.

9 July 2024

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership