707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

Authority is planning to overhaul the decade old data protection regime in Hong Kong – business should prepare for changes

The Hong Kong Privacy Commissioner for Personal Data has release signs of revamping the data protection regime in the region that will bring the standard of personal data protection in Hong Kong closer to her international counterparts. Detailed proposals remain to be seen.

19 May 2023

Enforcement & fines

Brazilian DPA can start to apply fines now

After two years of the law in force, and a countless actions to ensure compliance with the data protection regulation in Brazil, the parameters and criteria for applying fines of LGPD (Brazilian General Law of Personal Data Protection) were finally defined.

12 May 2023

Enforcement & fines

The Data Protection Commission’s 2022 Annual Report

On 7 March 2023, the Data Protection Commission (“DPC”) released its 2022 Annual Report. We have summarized the key points from the 90-page Report below.

11 May 2023

Enforcement & fines

2022 was a busy year for all privacy practitioners. This active spirit did not skip over Israel and its citizens

Among the privacy changes some interesting Legislative amendments were proposed to the Israeli Privacy Protection Law (correction number 14) dated January 2022:

10 May 2023

Transparency in the sights of the Luxembourg data protection Authority

As in the past, the Luxembourg data protection Authority (the “CNPD”) launched in 2020 a thematic investigation on transparency (Article 12.1 of the GDPR). This investigation resulted in interesting and useful decisions of 13 December 2022 on the Authority's expectations regarding the application of the principle of transparency in the context of web services.

9 May 2023

International transfersMarketing & cookiesLitigation

I Meta Tracking Tools Illegal – Austrian Data Protection Authority Holds That the Use Directly Violates the Gdpr and the “Schrems II” Decision

The Austrian Data Protection Authority (DPA) decided (6th of March 2023, D155.028, 2022-0.726.643) that the use of the Facebook Business Tools “Facebook Login” and “Facebook Pixel is violating the GDPR. The DPA held that the findings made in the “Google Analytics Decision” (22nd of December 2021, D155.027, 2021-0.586.2579; “GA”) were applicable to this case.

8 May 2023

Facebook is in trouble again …

… And this time it’s not Max Schrems who’s behind it. On March 15, 2023, the Amsterdam District Court ruled that Facebook Ireland violated the law by unlawfully processing the personal data of Dutch Facebook users. The Schrems rulings had already made it clear that Facebook does not always comply with European privacy rules. With the March 15, 2023 ruling, another case was added. This time, however, it was not Max Schrems who sued Facebook, but a Dutch foundation: the Data Privacy Foundation.

5 May 2023

Am I My Brother’s Keeper?

Understanding the Importance of Data Protection Compliance Management in Processing Chains: Key Takeaways from the CJEU’s “Proximus” Judgement C-129/21

4 May 2023

Children

The privacy risks of the “virtual friend”: the Italian DPA clamps down Replika

The Italian Data Protection Authority (“Garante Privacy”) has ordered the limitation of the data processing activities carried out by the Replika chatbot due to minors’ data protection concerns.

21 April 2023

AI & automationLegislation

The ‘Chat GPT Effect’ – Parsing Privacy and AI Regulation in India

The increasingly common use of AI in our daily lives raises multiple concerns, particularly around data privacy and regulatory preparedness. In this article, we discuss the privacy risks associated with AI and the position under Indian law.

19 April 2023

2022 and 2023 in Baltic Data Protection

At the end of January, we celebrated Data Protection Day. To mark that annual occasion, TGS Baltic’s Data Protection Team compiled an overview of the key market and enforcement trends in the Baltic region in 2022 and our predictions and recommendations for 2023.

17 April 2023

China first attempt to regulate deepfake-like risks.

China recently released an administration regulation on the use of deep synthesis technologies and their use on the internet. The regulation regulates some of the typical technologies and scenarios that are commonly seen on the internet nowadays.

12 April 2023

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership