707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

New guidelines on teleworking by the Greek Data Protection Authority

Responding to the extensive and intensive remote working during the Covid-19 pandemic and the risks that are lurking for employees’ privacy through the use of information and communication technologies, on 4.8.2021 the Greek Data Protection Authority (DPA) issued its Guidelines 1/2021 on the protection of personal data in the context of teleworking.

9 November 2021

Class actions against big tech in the Netherlands

Big tech is getting sued for billions. What are these claims based on and who is supporting them? A short article on the recent developments of Dutch class actions.

5 November 2021

Employment data

Back to work: open sesame!

The health situation in Luxembourg has been stable for several weeks now which allows for a possible return to a pre-crisis situation, in particular for companies. Athough teleworking should remain in the spotlight, companies are willing to see their employees again physically at work.

1 November 2021

Legislation

Additional Six Months Period For Implementation Of The New Law On Personal Data Protection

Facing the fact that the complaince with the new Law on Personal Data Protection was not in line with the planned dynamics, the Ministry of justice announced that in the next six months the Agency for Personal Data Protection while supervising, will not issue fines for noncompliance.

29 October 2021

International transfers

Cry and pray some more: Garante issues Schrems II decision

Garante prohibits further data transfer and fines university 200,000EUR and for SchremsII failures in retaining a US based processor of student exam proctoring data (including facial recognition and profiling) and the us of a US-based cloud storage sub-processor.

22 October 2021

Legislation

Third Amendment of the Japanese Privacy Law – Amendment based on the Digital Arrangement Act

The Digital Arrangement Act was promuglated on May 19 of this year, which requires the Act on the Protection of Personal Information to be amended. This will be the third amendment to be made on the Japanese privacy law. The amendment is likely to have a major impact on the medical and academic fields, especially since the rules applied to incorporated administrative agencies will undergo major changes.

20 October 2021

Enforcement & finesBreach notificationHealth data

Ministry of Health of the Province of San Juan Receives Sanction for Database Vulnerability

Argentina’s data protection authority, the Agency of Access to Public Information, i.e. the controlling authority pursuant to Data Protection Law No. 25,326, fined the Ministry of Health of an argenine Province based on their lack of security measures which affected the confidentiality and secuirty of personal data of covid-19 patients.

18 October 2021

Employment dataMarketing & cookies

Tracking of employee location data is a significant violation of privacy according to the Israeli Privacy Protection Authority

In recent years, and especially in recent times when remote work has become more common, the practice of employers using technological tools to supervise their employees and the quality of their work is increasingly widespread. The Israeli Privacy Protection Authority (“PPA”) published an opinion which emphasized their position that collecting and processing a person's location data is a significant violation of privacy, even when done during work hours

14 October 2021

New Rules on Automotive Data Security to be Effective on 1 Oct 2021

The Cyberspace Administration of China (CAC) has circulated the Provisions on the Management of Automotive Data Security (Trial) 2021 ("Provisions") since May 2021. The Administration has passed this Provisions on 5 July 2021 and will be put in effect on 1 Oct 2021. The final released version made several changes compared to the previously circulated consultation version. This article gives a brief introduction of this Provisions.

8 October 2021

Health data

GAFAM or not GAFAM, that is (still) the question?

After the “Schrems II” decision of the European Court of Justice invalidating the Privacy Shield framework and raising further doubts about other mechanisms for transferring personal data from Europe to the USA, the French supreme administrative court (Conseil d’Etat) had to deal twice with the consequences of this decision concerning European affiliates of American GAFAMs (Google, Apple, Facebook, Amazon, Microsoft) providing hosting services in Europe.

6 October 2021

Legislation

Part II: What Could Privacy Reform Look Like in Canada? Insights from Bill C-11

Bill C-11 died on the order paper in August when the Canadian federal election was called. In this article we explore how the elements of the bill may provide some insight into what privacy reform could look like in the next parliament. We also discuss the possibility of new provincial privacy legislation in Ontario in the wake of Bill C-11’s death.

4 October 2021

Enforcement & fines

The Spanish Data Protection Authority (AEPD) publishes its Annual Report summarizing last year’s activities including enforcement cases

This Annual Report comprehensively collects the activities carried out by this institution, most relevant facts and figures, outstanding trends, the most relevant decisions and procedures of the year. It includes further an analysis of present and future challenges in the privacy arena in Spain.

30 September 2021

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership