887 News
News and expert contributions from EuroCloud and the INPLP network.
887 articles
16.07.2026Germany: Rising Data Subject Requests at Data Protection Supervisory Authorities
AI as an Amplifier and the Growing Risk for Companies
14.07.2026The Office of the Information Commissioner in Jamaica establishes the Data Protection Working Group
On March 17, 2026, the Office of the Information Commissioner (OIC) established one of the most significant intstitutional developments in Jamaica’s privacy regime since the passage of the Data Protec…
09.07.2026A Record-breaking Year: 2025 Annual Report of Ireland’s Data Protection Regulator
Ireland’s Data Protection Commission (DPC) published its Annual Report outlining its regulatory activities in 2025. Highlights include: a 45% increase in complaints, the arrival of AI-driven complaints, a decrease in reported breaches, the DPC’s international and growing inter-regulatory role and reprimands as the chosen enforcement power.
07.07.2026Data Sovereignty and India’s New Privacy Law
India is one of the world’s biggest generators of online data, and the new Digital Personal Data Protection Act, 2023, continues a regulatory trend aiming to safeguard Indian data.
02.07.2026Brillen Rottler – A review of the DSAR mechanism
On 19 March 2026, the Court of Justice of the European Union (CJEU) delivered its judgment in Brillen Rottler GmbH & Co KG v TC (Case C-526/24) addressing key issues surrounding data subject access requests (DSAR) and abusive practices. This decision has been anticipated as a potential opportunity to provide further guidance on balancing the right of access under Article 15 GDPR with controllers’ competing rights.
23.06.2026A new member has joined the INPLP: Stefan Martinić
Law Office Stefan Martinić is a Croatian law office based in Zagreb providing legal advice in the fields of information technology law, EU law, commercial and corporate law, and employment law. Stefan…
18.06.2026Consolidation of the French doctrine on personal data and pseudonymisation after the CJEU’s SRB ruling
Following the CJEU's SRB ruling (C-413/23, 4 September 2025), French doctrine on the qualification of personal data and pseudonymisation has consolidated through the decisions of the Conseil d'État (13 February 2026, n° 498628) and the CNIL in the IQVIA case (26 May 2026, n°SAN-2026-008): pseudonymisation remains a risk-reducing security measure, not a passport to anonymity.
17.06.2026A new member has joined the INPLP: Pedro Andrés Videla Hermansen
Johansson & Langlois - Patents & Innovatios: multidisciplinary team of engineers and specialists handle patent prosecution, utility models, industrial designs, integrated circuit topographies,…
16.06.2026Biometric Identification at Sports Venues: The Position of the Czech Data Protection Authority (ÚOOÚ)
On 9 May 2026, supporters of SK Slavia Prague stormed the pitch during a home match at the Eden Stadium. The incident reopened the debate on security at Czech football grounds and, in particular, on whether technology — including AI-assisted facial recognition — could be used to keep known troublemakers out of sports venues. The position of the Czech Data Protection Authority (ÚOOÚ) set out below is directly relevant to that debate.
12.06.2026News member have joined the INPLP: Irene Yong and Janet Toh Yoong San
Established in 1905, Shearn Delamore & Co. is one of the leading law firms in Malaysia. With over 100 lawyers and 230 staff, the firm has the resources to run and manage the most complex projects,…
09.06.2026Mythos and the New Regulatory Challenges of AI-Driven Cybersecurity
The emergence of advanced AI models capable of autonomously discovering vulnerabilities is reshaping the regulatory landscape of cybersecurity, privacy and operational resilience. Mythos, Anthropic’s advanced cybersecurity-oriented model, illustrates how AI is rapidly evolving from a productivity tool into a strategic infrastructure with profound implications under the GDPR, the EU AI Act, NIS2 and DORA.
02.06.2026Finland Extends GDPR Fines to Public Authorities – A Long-Awaited Shift in Enforcement
Finland is set to extend GDPR administrative fines to public-sector authorities, ending a long-standing exemption that has set the country apart from most of the European Union. The proposed amendment introduces financial accountability for public bodies, but does so with capped sanctions, targeted carve-outs and a proportionality test reflecting the particular character of public institutions.
28.05.2026THE SPANISH DPA ISSUES ITS LATEST REPORT: HOW DID THEY REDEFINE PRIVACY AND INNOVATION IN 2025
How is data protection evolving in an era shaped by AI and rapid technological innovation? This article explores the main achievements of the Spanish Data Protection Authority (AEPD) during 2025, highlighting its strategic initiatives to integrate AI, strengthen privacy governance, promote regulatory compliance, and foster national and international collaboration. Through technological modernization and proactive regulation, the AEPD aims at redefining the future of privacy protection in an increasingly digital world.
19.05.2026Cookies and similar technologies: Swiss FDPIC factsheet highlights practical compliance implications
The latest factsheet on cookies from the FDPIC looks beyond banners to expose how today’s tracking ecosystem really works. This article breaks down the practical legal implications for website operators in Switzerland, explaining why meaningful user choice and restraint in tracking are more important than ever.
12.05.2026Canada Steps Toward Open Banking: Bill C-15 Delivers Data Portability (With Lingering Questions)
With the passage of Bill C-15, the federal government’s budget implementation bill, Canada takes a decisive step toward a consumer-driven banking framework. This article examines the bill’s data portability provisions, including a new data mobility regime added to PIPEDA, and the concerns raised by privacy authorities before Parliament.
08.05.2026A new member has joined the INPLP: Migle Dewsbury
Sorainen is a leading business law and tax advisory firm shaping the Baltic business environment. With over 300 professionals across Lithuania, Latvia and Estonia, they advise international investors,…
05.05.2026Austrian DPA decisions on Microsoft 365 Education: Unlawful Cookie tracking of school children – and nobody knew about it
In two parallel decisions of October 2025 and January 2026, the Austrian Data Protection Authority (DSB) ruled that Microsoft Corporation acts as a (joint) controller for parts of the data processing carried out via Microsoft 365 Education and unlawfully placed tracking cookies on a pupil’s device without consent. The decisions clarify the allocation of GDPR responsibilities between Microsoft, schools and education ministries. These decisions also have implication for any organisation using Microsoft 365 across the EEA.
28.04.2026Sharenting – Privacy concerns by the exposure of minors on social media
What happens when parents not only fail to provide special protection, but also place their children in situations that are either dangerous or have a negative impact on them? Can, or indeed should, the State intervene?
21.04.2026Legal Update on Privacy and Artificial Intelligence: Costa Rica
Following Costa Rica’s presidential elections in February 2026 and with a new administration set to take office in early May, the country faces well‑defined challenges that will shape its political and economic trajectory over the next four years. Among these challenges, do privacy and artificial intelligence figure prominently?
08.04.2026New members have joined the INPLP: Ramón Arias and Joaquín Sosa
With more than 50 years of experience, GALA distinguishes itself as a legal services firm dedicated to providing comprehensive solutions for local and foreign clients with business interests in Panama…
02.04.2026A new member has joined the INPLP: Duong Thi Mai Huong
Frasers Law Company is widely recognised for guiding clients through Vietnam’s complex and evolving legal landscape. As the first firm granted a foreign law company licence in Vietnam, Frasers has bui…
31.03.2026The Digital ECA: Brazil’s New Age Verification Framework and Enforcement Timeline
This article analyzes the recent enactment of Law No. 15,211/2025 (Digital ECA) and the ANPD’s preliminary guidelines on age verification mechanisms. It provides a strategic overview of the 2026 enforcement roadmap for digital service providers operating in the Brazilian market.
24.03.2026Malta at the Intersection of IT Law, Data Protection and Artificial Intelligence. A 2025 Legal Review
Malta’s digital regulatory landscape underwent significant consolidation during 2025, shaped primarily by the transposition of key EU instruments and the maturation of domestic enforcement practice. This article reviews the principal developments in IT law, data protection and artificial intelligence regulation in Malta, with particular emphasis on cybersecurity under NIS2, the national implementation of the EU AI Act, the forthcoming application of the EU Data Act, and the evolving enforcement posture of Maltese supervisory authorities. Together, these developments position Malta as a jurisdiction seeking to balance innovation enablement with regulatory discipline and legal certainty.
20.03.2026A new member has joined the INPLP: Sean McWeeney Jr.
Graham Thompson has been one of the pre-eminent law firms in the Bahamas since 1950. The firm operates four offices in The Bahamas, including two locations in New Providence, its main office in downto…