707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

Securing privacy compliance for Virtual Voice Assistants

Virtual Voice Assistants (“VVA”) continue to grow in popularity as the precision of the technology improves. The European Data Protection Board (“EDPB”) recently adopted new guidelines addressing how data controllers and data processors shall manage personal data to ensure that their VVAs are compliant with the European General Data Protection Regulation (“GDPR”).

23 February 2022

Enforcement & fines

2021 in GDPR fines

The EU General Data Regulation (GDPR) is among the world's toughest data protection laws. In this article you will have a general overview about the fines imposed by control authorities in 2021.

21 February 2022

Activity of the Personal Data Supervisory Authority in Monaco

The Personal Data Supervisory Authority (hereinafter "CCIN") has published its 12th Activity Report covering the year 2020. This article outlines its activities in the context of the Covid-19 pandemic (1) and its consultation on the government's draft law on the protection of personal data (2), which has just been tabled in Parliament.

8 February 2022

INPLP internal

A new member has joined the INPLP: Katie Hewson (United Kingdom)

Stephenson Harwood is a law firm with over 1100 people worldwide, including more than 180 partners. They assemble teams of bright thinkers to match their clients' needs and give the right advice from…

3 February 2022

AI & automation

UK’s proposed data protection reforms - a step in the wrong direction?

The proposed reforms to data protection laws by the UK government are ones that have been longed promised in a post-Brexit world and their aim is to create an ambitious, pro-growth and innovation-friendly data protection regime. This article explores some of the key proposals, the current environment in which these proposals are operating in and the effects they could have on the future of data protection laws in the UK and beyond, especially the EU adequancy decision.

2 February 2022

INPLP internal

New members have joined the INPLP: Vikram Jeet Singh and Prashant Mara (India)

BTG Legal is a disputes and transactional law firm with best-of-breed technical expertise, a culture of innovation, and an unrelenting commitment to excellence. They are particularly focused on the fo…

31 January 2022

Employment data

PROCESSING COVID-19 VACCINATION DATA OF EMPLOYEES IN ROMANIA: OPTIONS AND EXPECTATIONS

The processing of COVID-19 related health data is certainly a hot and/or unsettled legal matter everywhere in the world. This article presents the Romanian status and expectations as of 28 December 2021.

28 January 2022

Ecuador is building its future on data (protection)

Ecuador joins the party of personal data protection with the issuance of its new law on the subject and leaves the group of regional countries that do not have this type of regulations. It includes elements of the standard set by the General Data Protection Regulation (GDPR) and adapts the standard to Ecuador's complex regulatory framework.

26 January 2022

Athletes' Performance Data & Project Red Card

This article provides an insight to the ever increasing market of performance analysis and the intersection with athlete's performance data. A tool and resource used by sports clubs across the world, this article explains the current state of the market; how performance data is used and its value; and whether sports clubs may be in for a data protection 'red card' in the near future.

23 January 2022

Marketing & cookiesLegislation

The new Slovak Electronic Communication Act shall change opt-out regime to opt-in regime for cookies

The use of cookies will therefore no longer be linked to the passivity of the users concerned (opt-out). Anyone who stores or obtains access to information stored in the user's endpoint equipment (cookies) will have to have the prior consent of the user concerned (opt-in), and the consent must comply with the requirements of the GDPR.

20 January 2022

International transfersLitigation

Use of Google analytics violates the GDPR - Recent decision of the austrian data protection authority

The Austrian Data Protection Authority (DPA) decided in a recent groundbreaking decision (22nd of December 2021, D155.027 2021-0.586.257) that the use of Google Analytics is currently violating the GDPR. The DPA held that the transfer of personal data to the US in light of the Schrems II decision is particularly problematic. This is the first decision on the 101 model complaints filed by noyb. Soon similar decisions are to be expected in other EU member states.

19 January 2022

Enforcement & fines

The Norwegian Data Processing Authority issues USD 7.2 million fine to U.S. company Grindr LLC

Following an investigation carried out by the Norwegian Consumer Council, the Norwegian Data Processing Authority on 13 December 2021 issued a fine of NOK 65 million (approximately USD 7.2 million) to Grindr, a U.S. based social networking app for gay, bi, trans and queer people. The legal basis for the fine was that Grindr had disclosed personal data to advertising partners without a valid consent or other legal basis under the GDPR Article 6, and further that special categories of personal data had been disclosed without a valid exemption from the prohibition set out in Article 9.

17 January 2022

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership