707 Publications

What is changing in each member's jurisdiction — enforcement, case law, new obligations.

707 articles

Recent decisions of the Austrian Data Protection Office (DSB) and the Austrian Administrative Supreme Court (VwGH)

The article presents three interesting decisions on Austrian data protection law, in particular dealing with control measures at the work place (1.) the scope of the right to access (2.) and a company agreement concerning video surveillance (3.).

26 February 2018

The New Belgian Data Protection Authority under the GDPR

The Belgian Act of 3 December 2017, which was published in the Belgian Official Journal on 10 January 2018, partially implements the European Union's General Data Protection Regulation (2016/679). In this Act, the previous Belgian privacy supervisory authority, the Privacy Commission, is replaced with a new entity.

20 February 2018

Österreich übernimmt Vorsitz der Artikel-29-Gruppe der europäischen Datenschutzbehörden

Die österreichische Datenschutzbeauftragte Andrea Jelinek wurde zur Leiterin der Artikel-29-Datenschutzgruppe gewählt. Diese wird ab Mai als europäischer Datenschutzausschuss die Umsetzung der europäischen Datenschutzgrundverordnung überwachen.

12 February 2018

How to choose a DPO? Practical insights

The data protection officer (DPO) is a key function/office/position under the GDPR responsible for compliance with data protection rules, mandatory for some entities, voluntary for the rest, having attached a strict set of rights, duties and liability prescribed by the GDPR. The DPO must be independent, reporting directly to the highest management level and must be delineated from any conflict of interests. The position of the DPO is an advisory one, the DPO being equally a facilitator and a contact person for all stakeholders.

21 December 2017

Enforcement & finesHealth data

Public hospitals in Norway threatened with fines of NOK 7.2 million (EUR 720,000) following outsourcing project

Public hospitals in Norway are organized in a structure where they are owned by four different regional legal entities. The regional entities are responsible for public procurement of goods and services, including IT services, for use by the hospitals within their region, as well as to fulfil other tasks of common interest.

21 December 2017

GDPR in the Czech environment

General Data Protection Regulation (GDPR) is going to govern the personal data protection matters across Europe since May 2018. Even though the regulation sets the same rules for all member countries, it allows each state to adopt its own rules in specified areas. In the Czech Republic, the government prepared the draft of amendment to the existing Personal Data Protection Act (number 101/2000 Coll.) and the draft is going farther in the legislation procedure.

20 December 2017

20Q&A – The latest CPC project

The 20Q&A project is intended to give the reader a quick overview and short summary of the most urgent questions regarding the General Data Protection Regulation (GDPR). It is intended to raise awareness especially of the changes and partly of what needs to be done before deadline-day, May 25th 2018.

18 December 2017

International transfersLegislation

The Data Protection Bill, Brexit and Data Transfers

The Data Protection Bill (Bill) will replace the Data Protection Act 1998 and will implement the General Data Protection Regulation (GDPR) into the law of England and Wales. The Bill is currently undergoing legislative review in the House of Lords (the upper house of the United Kingdom parliament).

15 December 2017

Monegasque DPA vs GDPR: Can you spot the difference?

It would be wrong to infer from the fact that the Principality of Monaco is a non-EU State, that the General Data Protection Regulation (GDPR) will not affect Monegasque companies.

13 December 2017

Enforcement & finesLegislation

Ireland: DP Bill to Implement GDPR and Overhaul Data Protection Commission

A new Data Protection Bill will soon issue which will implement elements of the GDPR into Irish law and overhaul the Office of the Data Protection Commissioner, the Irish supervisory authority. A General Scheme of Data Protection Bill was published earlier this mid-2017. The changes to the Office of the Data Protection Commissioner will be relevant to the large number of cloud enterprises established in Ireland who will be subject to the Irish supervisory authority under the GDPR's one-stop shop mechanism.

12 December 2017

Legislation

Proposed Regulation on the Free Flow of Non-Personal Data in the EU

Data is a resource for digital business and we can expect more and more rules regulating this vital resource. In addition to the GDPR and the proposed ePrivacy regulation, the European Commission has proposed another regulation (COM(2017)495) within the regulatory framework of the European data economy.

8 December 2017

Enforcement & fines

How will national DPAs impose fines for GDPR violations?

The GDPR introduced an antitrust-type sanction regime with fines which, for severe infringements, may amount up to 20 million euros or 4% of the annual turnover, whichever is greater. The Working Party of Article 29 recently issued its much expected draft Guidelines for the consistent application of such fines.

7 December 2017

Join the network

Applications from qualified privacy practices are reviewed individually by the INPLP board.

Apply for membership