707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

A new members has joined the INPLP: Alesch Staehelin

Uto Legal and its attorneys combine legal expertise with many years of experience and in-depth industry-specific knowledge. In the interest of its clients, Uto Legal always strives for tailor-made, ef…

23 January 2026

AI & automation

Israel’s Interministerial Team on AI in the Financial Sector: From Interim to Final Report

Israel’s interministerial team, formed to address the implications of artificial intelligence (AI) in the financial sector, has completed a comprehensive review culminating in a Final Report, published after extensive public consultation. While the report focuses on financial services, the authors explicitly note that its findings on data protection, governance, and transparency apply across industries. The Final Report significantly relaxes the Team’s initial position on data protection.

22 January 2026

INPLP internal

A new members has joined the INPLP: Georgios Tsouloufas

LPT Law Firm combines full-service capabilities with a strong business focus to serve both domestic and foreign clients alike. Drawing on extensive international experience, their lawyers offer sophis…

21 January 2026

Employment data

Cyprus Data Protection Commissioner Issues Guidance on Use of Personal Mobile Phones at Work

Few months ago, the Cyprus Data Protection Commissioner has issued Guidance on the use of personal mobile phones for work-related purposes, addressing the increasingly common practice known as Bring Your Own Device (BYOD).

20 January 2026

Facial recognition on the football pitch

Possibility for automatic facial recognition granted to private company.

13 January 2026

Getting to know Uruguay and Its Data Protection Framework

Uruguay, a small Latin American country situated between Argentina and Brazil with a population of approximately three million, has developed one of the region’s most advanced legal frameworks for personal data protection and digital governance. Despite its size, Uruguay has positioned itself as a reference jurisdiction in data protection and technological innovation, particularly regarding international standards.

8 January 2026

Understanding Data Protection in Anguilla

Anguilla is one of the jurisdictions in the Caribbean that does not yet have a dedicated data protection law enacted. This means that the island’s rules on privacy and personal data are not found in a single, comprehensive piece of legislation. Instead, the only legal guidance that touch on data protection is located in the Electronic Transactions Act (R.S.A. c. E38) which is a law primarily designed to regulate electronic commerce. This article explains what the Act currently provides, what is missing, and what this means for businesses, organizations, government bodies, and individuals.

18 December 2025

AI & automationLegislation

Japan’s First AI Legislation

Japan’s first AI-specific legislation came into force on September 1, 2025, establishing a basic framework that signals the government’s intent to develop more comprehensive AI regulation in the near future.

16 December 2025

GDPR knows no exceptions: Neither cities nor giants are safe!

The Office for Personal Data Protection of the Slovak Republic recently ruled in two cases that clearly show neither cities nor large companies are immune to the strict rules of the GDPR. From attendance records in public administration to handling customer requests, even seemingly routine procedures can reveal serious personal data protection violations.

11 December 2025

INPLP internal

A new member has joined the INPLP: Gustavo Vilera

Gustavo Vilera is a Venezuelan attorney and partner at FFV Legal, based in Caracas. He holds a law degree from the Central University of Venezuela (UCV) and a master’s degree in Intellectual Property…

10 December 2025

Marketing & cookiesLitigation

Polish Supreme Administrative Court Requires DPAs to Prove Identifiability Before Treating IP Addresses and Cookie IDs as Personal Data

In a significant judgment issued on 16 October 2025 (III OSK 2595/22), the Polish Supreme Administrative Court (NSA) held that the data protection authority (UODO) cannot assume that IP addresses and cookie identifiers always constitute personal data. Instead, the authority must demonstrate - based on objective, case-specific factors - that an individual is identifiable within the meaning of Article 4(1) GDPR. The ruling strengthens procedural rigor in GDPR enforcement and reinforces the contextual approach to identifiability reflected in CJEU case law, including Breyer and Planet49.

9 December 2025

AI & automationLegislation

Romania and the EU AI Act: Ready or Just Warming Up?

Artificial Intelligence is reshaping industries and societies worldwide. As the European Union rolls out the AI Act, Romania is at the boiling point: Is it prepared to navigate this complex regulatory landscape? While the country boasts a vibrant tech ecosystem, aligning its legislative and institutional structures with EU standards still remains a challenge. This article explores the country’s current stance, challenges, and opportunities in aligning with Europe’s landmark AI regulation.

4 December 2025

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership