707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

Hong Kong’s Stale Data Protection Laws

When it was introduced twenty years ago, Hong Kong’s data protection law was one of the leading regimes of its type in Asia. But time has not been kind, and the lack of updates to the law have made it both outdated, toothless, and bereft of the protections offered by more modern counterparts.

9 April 2021

INPLP internal

A new member has joined the INPLP: Justyna Matuszak-Leśny (Poland)

e|s|b Adwokaci i Radcowie Prawni (e|s|b Legal) is a boutique law firm with an international atmosphere and scale of activity, located in Warsaw, Poland. They specialise in civil and economic cases, in…

8 April 2021

Legislation

Does the draft Data Governance Act signal a more economic approach of personal data in the EU?

The draft Data Governance Act, which was published by the European Commission last November, aims to foster the availability of both personal and non-personal data by increasing trust in data intermediaries and to strengthen data sharing mechanisms across the EU. It is the first EU legal instrument clearly reflecting an EU policy trend towards a data-driven economy, where personal data are regarded as a commodity for unlocking key innovations and ultimately promoting economic growth within the EU.

6 April 2021

Litigation

Swiss Federal Supreme Court rules: Smart Metering infringes informational self-determination right

In one of its most recent decisions, the Swiss Federal Supreme Court ruled on smart metering. It decided that the permanent collection of water consumption data through smart metering infringes the right of informational self-determination.

31 March 2021

INPLP internal

A new member has joined the INPLP: Ana Popović (Republic of Serbia)

Živković Samardžić is one of the Serbia’s leading full-service independent law firms. Their 10 partners / 23 lawyers strong team provide top quality legal service to a diverse range of international a…

27 March 2021

Romanian public authorities sanctioned for GDPR breaches

Towards the end of 2020, the Romanian Data Protection Authority (ANSPDCP) disclosed on its website information regarding the sanctioning of two Romanian public authorities for GDPR breaches while processing personal data. This stands out as one of the first instances when the Romanian regulator applied sanctions to entities in the public sector. Moreover, the underlying facts are extremely similar.

26 March 2021

Employment data

When Can Information On Criminal Records Be Requested By Employers

A recent Opinion of the Bulgarian data protection authority and certain legislative changes lead to the conclusion that in Bulgaria information on criminal convictions and offences of present or future employees can be requested by employers in very limited number of cases.

23 March 2021

INPLP internal

A new member has joined the INPLP: Kirsten Wolgast (Germany)

Pinsent Masons is a full-service international law firm. They respond to the pressures and opportunities facing businesses globally with legal excellence and innovation. With office locations on four…

20 March 2021

Enforcement & finesLitigation

Denmark´s first GDPR fine to date

On February 12th 2021 the city Court in Aarhus handed down the first verdict in Denmark that has led to a fine based on GDPR. The Court imposed a fine of DKK 100,000 (appr. EUR 13,500) on the Danish furniture chain ILVA, which is part of the Danish multibillion concern Jysk Group. ILVA was found guilty of having stored around 350,000 unnecessary personal data. It was the Danish Data Protection Agency (DDPA) that had forwarded the case to the prosecution with the proposal that ILVA should be fined with DKK 1.5 mio (appr. EUR 201,700). The prosecution agreed with the proposal of the DDPA.

19 March 2021

Legislation

Right to access of origin of the information based on Swiss Federal Act on Data Protection (FADP)

The Swiss Federal Supreme Court has made an interesting decision on the scope of the right to information under Swiss Federal Act on Data Protection (FADP) and also addressed an abusive assertion (decision of 10th December 2020, ref. 4A_125/2020). The judges decided that there is no right to information about the origin of certain data if such origin information has not been recorded. In individual cases, the situation could be different due to special legal regulations. However, only if such data exist at all.

18 March 2021

International transfersCloud & vendorsLitigation

Schrems II: An opportunity for the Sovereign Cloud

As personal data crossborder flows cannot benefit from the “EU-US privacy shield” anymore, as a consequence of the Schrems II judgment, that creates an opportunity for the European sovereign cloud. This article provides the overview of the general situation, focusing on French case law encouraging the overall trend.

16 March 2021

Breach notification

When privacy became an investment risk. Shall companies report its security incidents to the market?

Potential investors are being warned of the negative impact that the GDPR sanctions may have on the expected profitability of the business. Cyberattacks on listed companies should be reported to the market as a warning to the investors. Privacy is a business risk, and their management bodies must adopt effective measures to prevent it.

12 March 2021

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership