A Record-breaking Year: 2025 Annual Report of Ireland’s Data Protection Regulator

Ireland’s Data Protection Commission (DPC) published its Annual Report outlining its regulatory activities in 2025. Highlights include: a 45% increase in complaints, the arrival of AI-driven complaints, a decrease in reported breaches, the DPC’s international and growing ...Mehr lesen

Data Sovereignty and India’s New Privacy Law

India is one of the world’s biggest generators of online data, and the new Digital Personal Data Protection Act, 2023, continues a regulatory trend aiming to safeguard Indian data. ...Mehr lesen

Brillen Rottler – A review of the DSAR mechanism

On 19 March 2026, the Court of Justice of the European Union (CJEU) delivered its judgment in Brillen Rottler GmbH & Co KG v TC (Case C-526/24) addressing key issues surrounding data subject access requests (DSAR) and abusive practices. This decision has been anticipated ...Mehr lesen

A new member has joined the INPLP: Stefan Martinić

...Mehr lesen

Consolidation of the French doctrine on personal data and pseudonymisation after the CJEU’s...

Following the CJEU's SRB ruling (C-413/23, 4 September 2025), French doctrine on the qualification of personal data and pseudonymisation has consolidated through the decisions of the Conseil d'État (13 February 2026, n° 498628) and the CNIL in the IQVIA case (26 May ...Mehr lesen

A new member has joined the INPLP: Pedro Andrés Videla Hermansen

...Mehr lesen

Biometric Identification at Sports Venues: The Position of the Czech Data Protection...

On 9 May 2026, supporters of SK Slavia Prague stormed the pitch during a home match at the Eden Stadium. The incident reopened the debate on security at Czech football grounds and, in particular, on whether technology — including AI-assisted facial recognition — could be ...Mehr lesen

News member have joined the INPLP: Irene Yong and Janet Toh Yoong San

...Mehr lesen

Mythos and the New Regulatory Challenges of AI-Driven Cybersecurity

The emergence of advanced AI models capable of autonomously discovering vulnerabilities is reshaping the regulatory landscape of cybersecurity, privacy and operational resilience. Mythos, Anthropic’s advanced cybersecurity-oriented model, illustrates how AI is rapidly ...Mehr lesen

Finland Extends GDPR Fines to Public Authorities – A Long-Awaited Shift in Enforcement

Finland is set to extend GDPR administrative fines to public-sector authorities, ending a long-standing exemption that has set the country apart from most of the European Union. The proposed amendment introduces financial accountability for public bodies, but does so ...Mehr lesen