707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

Slovenia’s ICO defines DPO’s additional tasks that could result in a conflict of interests

Paragraph 6, Article 38 of the General Data Protection Regulation (GDPR) allows the Data Protection Officer (DPO) to fulfil other tasks and duties (beside serving as the DPO) for the controller or processor, provided however, that fulfilling such additional assignments doesn’t amount to a conflict of interest.

23 November 2018

Breach notification

The Spanish DPA (AEPD) issues guidelines regarding the management and notification of security breaches according to GDPR

The Agencia Española de Protección de Datos ( AEPD) presented guidelines regarding the management and notification of security breaches in compliance with GDPR.

21 November 2018

Turkey: Data Protection Matters in M&A Transactions

Privacy issues in mergers and acquisitions take the attention of transaction parties among other things in these days.

20 November 2018

ChildrenLegislation

With Legislative Decree 101/2018, Italy harmonized the national privacy legislation to the GDPR

With Legislative Decree n. 101/2018 the Italian legislator has finally taken the last necessary step in order to coordinate the local privacy law to the GDPR. This intervention, in particular, entailed the repealing of the rules considered incompatible with the European dispositions and the regulation of certain issues left to the possible further discipline by each Member State.

16 November 2018

Health data

Doping control in sport – how about personal data?

As the legal representatives of the Slovak Anti-doping Agency (hereinafter referred to as “SADA”), we have taken part in several proceedings known as anti-doping rule violations (hereinafter referred to as “ADRV”). ADRV is considered as conduct of an athlete which breaches rules identified either by the World Anti-doping Code (2015) or certain provisions within national legislation. In the case of the Slovak Republic this legislation is Act No. 440/2015 Coll. on Sports (hereinafter referred to as “Act”).

15 November 2018

List of personal data processing activities that must be subject to a Data Protection Impact Assessment (“DPIA”)

The CNPD (Portuguese Data Protection National Commission), as the Portuguese supervisory authority, has approved Regulation nr. 1/2018 (“Regulation”), pursuant to Articles 35, no. 4 and 57, no. 1, k) of the General Data Protection Regulation (“GDPR”), that provides a list of personal data processing activities that must be subject to a Data Protection Impact Assessment (“DPIA”).

14 November 2018

In-vehicle emergency call systems (e-call) in Turkey

In-vehicle emergency call (eCall) systems, which have been in use for a long time, are defined as systems within vehicles being activated either automatically or manually, that establish connection with the 112 emergency call centers in cases of an emergency.

9 November 2018

Privacy Shield: Brace Yourself, Changes are Coming

Since the application of the GDPR, the days of the EU-U.S. Privacy Shield may be numbered and parties to an IT contract must be on the alert.

8 October 2018

Cloud & vendors

Controller-Processor relationship in public sector (Bulgaria)

With the entry into force of Regulation (EU) 2016/679 (the “General Data Protection Regulation”) on 25th May 2018, the matter of harmonization with the current EU legal framework appeared on the agenda in Bulgaria. The need for EU legal framework harmonization was further enhanced by Directive 2016/680 on data protection in the field of criminal investigations and other related activities. As of today, Bill for amendment and supplementation to the Bulgarian Personal Data Protection Act (“ Draft Bill”) is submitted with the Bulgarian National Assembly and is to be discussed and voted by the competent parliamentary committees. Although the Draft Bill has not yet been passed, this article outlines the main features, which are to be expected.

4 October 2018

Mandatory e-mail encryption from January 1st 2019 in Denmark

The new practice of the Danish Data Protection Agency requires all work related e-mails containing personal data is to be encoded according to the GDPR.

3 October 2018

Legislation

The days after the GDPR – The Cyprus Law on the Protection of Natural Persons against the Processing of Personal Data and the Free Movement of this Data

This year, on the 25th of May 2018, the highly anticipated and monumental EU General Data Protection Regulation (henceforth “the GDPR”) was fully enforced and applied in all Member States of the EU, replacing the previous Data Protection Directive 95/46/EC.

1 October 2018

Enforcement & finesLegislation

GDPR With an Irish Flavour – The Irish Data Protection Act 2018

Ireland's Data Protection Act 2018 (the "DPA"), which implements elements of the European Union's General Data Protection Regulation (the "GDPR"), was formally passed in the nick of time on 24 May 2018 and together the DPA and the GDPR will have significant impact for the operations of those working in the cloud in or through Ireland. Here we outline and clarify some of the key aspects of the DPA.

5 September 2018

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership