707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

On The Road Again: Practical First Steps On Your Way to Compliance with the CCPA

The California Consumer Privacy Act (CCPA), a broad-based law protecting information that identifies California residents, will take effect in 2020. The law includes detailed disclosure requirements, provides individuals with extensive rights to control how their personal information is used, imposes statutory fines and creates a private right of action. It is expected to dramatically alter the way U.S.-based companies process data.

2 September 2019

Recent decisions of the Austrian Data Protection Authority (3/3)

This article presents the third out of three interesting decisions on Austrian data protection law, in particular dealing with confirmation of the remedial measures taken during a consultation pursuant to Art 36 GDPR, the right to deletion pursuant to Art 17 GDPR and an evaluation of a data controller.

2 September 2019

Marketing & cookies

Would you like some cookies?

When users browse through the internet, cookies perform multi-faceted functions for the benefit of both the webmasters and users accordingly. Following long-established privacy protections and in light of the GDPR, users browsing through the World Wide Web must be given the opportunity to accept and/or reject the various website cookies offered.

30 August 2019

Recent decisions of the Austrian Data Protection Authority (2/3)

This article presents the second out of three interesting decisions on Austrian data protection law, in particular dealing with confirmation of the remedial measures taken during a consultation pursuant to Art 36 GDPR, the right to deletion pursuant to Art 17 GDPR and an evaluation of a data controller.

26 August 2019

Marketing & cookies

The Italian Data Protection Authority Limits the Sending of Advertising and Promotional Contents to Fidelity Cards Holders

For the first time, the Italian Data Protection Authority has exercised its power of "warning" provided by the GDPR, through which it has prohibited the unconditional sending of unsolicited advertising contents to fidelity cards holders.

20 August 2019

Recent decisions of the Austrian Data Protection Authority (1/3)

This article presents the first out of three interesting decisions on Austrian data protection law, in particular dealing with confirmation of the remedial measures taken during a consultation pursuant to Art 36 GDPR, the right to deletion pursuant to Art 17 GDPR and an evaluation of a data controller.

19 August 2019

The Spanish DPA (AEPD) issues a model report to help carry out data protection impact assessments for public administrations

The AEPD published in July 2019 a model report to help Public Administrations carry out im-pact assessments on data protection.

7 August 2019

Enforcement & finesEmployment data

€ 150.000,- GDPR fine imposed on PWC by Greek Data Protection Authority for being not accountable

The Greek HDPA (Hellenic Data Protection Authority) imposed a fine of € 150.000,- on PWC Greece.

6 August 2019

GDPR - the real threat to privacy?

Over 2 years, GDPR and personal data protection has been discussed across the EU. Vast majority of companies, public authorities and other entities, affected by the regulation, started to include the question of personal data protection into their operations. This effect of GDPR may be considered its greatest achievement up to now. But - is it really the right way?

2 August 2019

Enforcement & finesHealth data

Fine of € 460.000,- imposed on Dutch Haga Hospital by Dutch Data Protection Officer, the first Dutch fine under GDPR (July 19, 2019)

This first fine under the GDPR is imposed on the Dutch Haga Hospital for having an insufficient internal security of patient records as stated by the DPA on July 19, 2019. The DPA started an investigation after it appeared that a large amount (about 200 employees) of hospital staff had unauthorized accessed the medical records of a Dutch celebrity. Personal was leaking medical information to the press as well.

25 July 2019

Slovenia’s DPA says mere possession of processing equipment does not amount to personal data processing

Slovenian courts have in place a system for audio recording of court hearings. The data recorded (which in itself constitute personal data, as the recordings can be related to natural persons, such as the parties or their legal representatives, witnesses and expert witnesses) is stored on computer servers owned by the state and managed by the Ministry of Public Administration. The servers, however, are located on the premises of the Ministry of Justice, meaning that the latter’s employees have physical access to them.

17 July 2019

Welcome to Croatian version of GDPR - Introduction

First, I would like to thank the members and the entire EuroCloud organization for letting me join their ranks. I sincerely thank everyone for this exceptional honour. In my upcoming participation in this organization, I will try to use my knowledge to contribute to the understanding of how GDPR has been implemented in the Republic of Croatia.

15 July 2019

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership