711 News
News and expert contributions from EuroCloud and the INPLP network.
711 articles
28.09.2026GREECE ADOPTS LEGISLATION IMPLEMENTING THE AI ACT: A PIVOTAL ROLE FOR THE DATA PROTECTION AUTHORITY WITHIN THE NEW REGULATORY FRAMEWORK
In July 2026, Greece adopted Law 5321/2026 (“the Law”) which introduced measures implementing Regulation (EU) 2024/1689 (“AI Act”). In line with the AI Act, the Law aims to establish an appropriate framework for achieving the effective supervision of Artificial Intelligence Systems, to ensure a high level of protection of health, safety and fundamental rights in the use of such systems, and support innovation. In particular, the Law designates, for the purposes of the AI Act, the market surveillance authorities, the single point of contact and the notifying authorities, and regulates issues relating to cooperation and coordination between the competent authorities. Moreover, the Law governs issues pertaining to AI regulatory sandboxes and testing of AI systems in real world conditions. With regards to infringements of the AI Act and the Law, effective, proportionate and dissuasive penalties are determined, while provisions relating to judicial protection and the exercise of the right to appeal against decisions issued pursuant to the AI Act and the Law are also included. In the above regulatory framework, the Hellenic Data Protection Authority is assigned a particularly important and multifaceted role.
27.09.2026Panama Establishes a Legal Framework to Pursue Cybercrimes
Since 5 August 2025, Law 478 has expanded Panama’s Criminal Code to cover offences committed through computer systems, including phishing, thereby establishing a stronger framework for prosecuting cybercrime.
09.09.2026Singapore's New Generative AI Guidance
As organisations race to adopt generative AI, Singapore's regulators have provided their clearest indication yet of what responsible AI governance should look like in practice. This article examines how the PDPC and IMDA's latest Guidelines reshape expectations around consent, web scraping, accountability across the AI supply chain, and user-facing transparency, revealing a common theme: effective AI governance begins before a model is deployed.
09.09.2026Spain meets Japan
INPLP members from Spain and Japan, Belén Arribas and Satoshi Shono, met in Tokyo and discussed hot topics on privacy law in their countries and their respective legal markets
16.07.2026Germany: Rising Data Subject Requests at Data Protection Supervisory Authorities
AI as an Amplifier and the Growing Risk for Companies
14.07.2026The Office of the Information Commissioner in Jamaica establishes the Data Protection Working Group
On March 17, 2026, the Office of the Information Commissioner (OIC) established one of the most significant intstitutional developments in Jamaica’s privacy regime since the passage of the Data Protec…
09.07.2026A Record-breaking Year: 2025 Annual Report of Ireland’s Data Protection Regulator
Ireland’s Data Protection Commission (DPC) published its Annual Report outlining its regulatory activities in 2025. Highlights include: a 45% increase in complaints, the arrival of AI-driven complaints, a decrease in reported breaches, the DPC’s international and growing inter-regulatory role and reprimands as the chosen enforcement power.
07.07.2026Data Sovereignty and India’s New Privacy Law
India is one of the world’s biggest generators of online data, and the new Digital Personal Data Protection Act, 2023, continues a regulatory trend aiming to safeguard Indian data.
02.07.2026Brillen Rottler – A review of the DSAR mechanism
On 19 March 2026, the Court of Justice of the European Union (CJEU) delivered its judgment in Brillen Rottler GmbH & Co KG v TC (Case C-526/24) addressing key issues surrounding data subject access requests (DSAR) and abusive practices. This decision has been anticipated as a potential opportunity to provide further guidance on balancing the right of access under Article 15 GDPR with controllers’ competing rights.
23.06.2026A new member has joined the INPLP: Stefan Martinić
Law Office Stefan Martinić is a Croatian law office based in Zagreb providing legal advice in the fields of information technology law, EU law, commercial and corporate law, and employment law. Stefan…
18.06.2026Consolidation of the French doctrine on personal data and pseudonymisation after the CJEU’s SRB ruling
Following the CJEU's SRB ruling (C-413/23, 4 September 2025), French doctrine on the qualification of personal data and pseudonymisation has consolidated through the decisions of the Conseil d'État (13 February 2026, n° 498628) and the CNIL in the IQVIA case (26 May 2026, n°SAN-2026-008): pseudonymisation remains a risk-reducing security measure, not a passport to anonymity.
17.06.2026A new member has joined the INPLP: Pedro Andrés Videla Hermansen
Johansson & Langlois - Patents & Innovatios: multidisciplinary team of engineers and specialists handle patent prosecution, utility models, industrial designs, integrated circuit topographies,…
16.06.2026Biometric Identification at Sports Venues: The Position of the Czech Data Protection Authority (ÚOOÚ)
On 9 May 2026, supporters of SK Slavia Prague stormed the pitch during a home match at the Eden Stadium. The incident reopened the debate on security at Czech football grounds and, in particular, on whether technology — including AI-assisted facial recognition — could be used to keep known troublemakers out of sports venues. The position of the Czech Data Protection Authority (ÚOOÚ) set out below is directly relevant to that debate.
12.06.2026News member have joined the INPLP: Irene Yong and Janet Toh Yoong San
Established in 1905, Shearn Delamore & Co. is one of the leading law firms in Malaysia. With over 100 lawyers and 230 staff, the firm has the resources to run and manage the most complex projects,…
09.06.2026Mythos and the New Regulatory Challenges of AI-Driven Cybersecurity
The emergence of advanced AI models capable of autonomously discovering vulnerabilities is reshaping the regulatory landscape of cybersecurity, privacy and operational resilience. Mythos, Anthropic’s advanced cybersecurity-oriented model, illustrates how AI is rapidly evolving from a productivity tool into a strategic infrastructure with profound implications under the GDPR, the EU AI Act, NIS2 and DORA.
02.06.2026Finland Extends GDPR Fines to Public Authorities – A Long-Awaited Shift in Enforcement
Finland is set to extend GDPR administrative fines to public-sector authorities, ending a long-standing exemption that has set the country apart from most of the European Union. The proposed amendment introduces financial accountability for public bodies, but does so with capped sanctions, targeted carve-outs and a proportionality test reflecting the particular character of public institutions.
28.05.2026THE SPANISH DPA ISSUES ITS LATEST REPORT: HOW DID THEY REDEFINE PRIVACY AND INNOVATION IN 2025
How is data protection evolving in an era shaped by AI and rapid technological innovation? This article explores the main achievements of the Spanish Data Protection Authority (AEPD) during 2025, highlighting its strategic initiatives to integrate AI, strengthen privacy governance, promote regulatory compliance, and foster national and international collaboration. Through technological modernization and proactive regulation, the AEPD aims at redefining the future of privacy protection in an increasingly digital world.
19.05.2026Cookies and similar technologies: Swiss FDPIC factsheet highlights practical compliance implications
The latest factsheet on cookies from the FDPIC looks beyond banners to expose how today’s tracking ecosystem really works. This article breaks down the practical legal implications for website operators in Switzerland, explaining why meaningful user choice and restraint in tracking are more important than ever.
12.05.2026Canada Steps Toward Open Banking: Bill C-15 Delivers Data Portability (With Lingering Questions)
With the passage of Bill C-15, the federal government’s budget implementation bill, Canada takes a decisive step toward a consumer-driven banking framework. This article examines the bill’s data portability provisions, including a new data mobility regime added to PIPEDA, and the concerns raised by privacy authorities before Parliament.
08.05.2026A new member has joined the INPLP: Migle Dewsbury
Sorainen is a leading business law and tax advisory firm shaping the Baltic business environment. With over 300 professionals across Lithuania, Latvia and Estonia, they advise international investors,…
05.05.2026Austrian DPA decisions on Microsoft 365 Education: Unlawful Cookie tracking of school children – and nobody knew about it
In two parallel decisions of October 2025 and January 2026, the Austrian Data Protection Authority (DSB) ruled that Microsoft Corporation acts as a (joint) controller for parts of the data processing carried out via Microsoft 365 Education and unlawfully placed tracking cookies on a pupil’s device without consent. The decisions clarify the allocation of GDPR responsibilities between Microsoft, schools and education ministries. These decisions also have implication for any organisation using Microsoft 365 across the EEA.
28.04.2026Sharenting – Privacy concerns by the exposure of minors on social media
What happens when parents not only fail to provide special protection, but also place their children in situations that are either dangerous or have a negative impact on them? Can, or indeed should, the State intervene?
21.04.2026Legal Update on Privacy and Artificial Intelligence: Costa Rica
Following Costa Rica’s presidential elections in February 2026 and with a new administration set to take office in early May, the country faces well‑defined challenges that will shape its political and economic trajectory over the next four years. Among these challenges, do privacy and artificial intelligence figure prominently?
08.04.2026New members have joined the INPLP: Ramón Arias and Joaquín Sosa
With more than 50 years of experience, GALA distinguishes itself as a legal services firm dedicated to providing comprehensive solutions for local and foreign clients with business interests in Panama…