General Data Protection Regulation (GDPR), CNIL, Data Controller

Analysing the CNIL’s Latest Recommendations for AI Systems

BCLP on 6/28/2024

Following the very recent adoption of the EU Regulation on AI (the AI Regulation) the CNIL (the French data regulator) has issued the second in its series of recommendations for the development of privacy-friendly AI models....more

Paris Litigation Gazette - Issue 4 - October 2023

BCLP on 10/25/2023

In an important judgment handed down on 29 June 2023 (Case C-211/22), the Court of Justice of the European Union (the "CJEU") ruled that a vertical agreement to fix minimum prices does not necessarily constitute a restriction...more

French DPA Sets Conditions for Processors' Reuse of Personal Data Processed on Behalf of Controllers

Dechert LLP on 1/20/2022

On January 12, 2022, the French data protection authority (“CNIL“) published guidance on the reuse of personal data by processors for their purposes (“Guidance”). This the most recent guidance of a major EU regulator on a...more

French Data Protection Authority Issues Draft Recommendations on Consent for Cookies

Jones Day on 1/29/2020

The Situation: On July 4, 2019, the French data protection authority ("CNIL") published revised guidelines on the implementation of cookies or similar tracking technologies in order to take into account the new requirements...more

Making Sense of EU Cookie Law in the Wake of CJEU’s Planet49 Ruling

Ballard Spahr LLP on 10/3/2019

The perplexing question of what U.S. companies must do to comply with EU “cookie” law became slightly more clear with the recent decision of the European Court of Justice (CJEU) in Planet49 GmbH, but numerous questions still...more

CNIL Issues Record-Keeping Guidance

Sheppard Mullin Richter & Hampton LLP on 9/30/2019

Under GDPR, companies are required to keep certain records of their processing activities. There has been some question about the types of records controllers should keep. To help clarify the questions arising from many...more

GDPR Enforcement Update: Recent Actions Highlight The Need For Proper Disclosures, Providing Access To Data And Third-Party...

Fox Rothschild LLP on 1/29/2019

If you offer goods or services to individuals in the European Union, have an establishment in the EU or monitor the behavior of individuals in the EU, now would be a good time to review your privacy notices, your process for...more

French Data Protection Authority Issues Guidance on Interaction of Blockchain Technology with GDPR

Robinson+Cole Data Privacy + Security Insider on 11/15/2018

Last month, the French data protection authority (the CNIL) issued initial guidance addressing issues that applications utilizing blockchain technology should consider in order to comply with the European General Data...more

French Data Protection Authority Approves Implementation of Biometric Authentication Tools in Banking Sector

Jones Day on 6/16/2017

On May 29, 2017, the French Data Protection Authority (Commission Nationale Informatique et Libertés, or "CNIL") announced that it had authorized nine banking institutions to implement, on an experimental basis,...more

How to Comply with the New General Data Protection Regulation: A Q&A with Partner Gail Crawford and Counsel Ulrich Wuermeling

Latham & Watkins LLP on 6/2/2017

In less than one year, from 25 May 2018, the General Data Protection Regulation (GDPR or Regulation) will become enforceable. The GDPR introduces a rigorous, far-reaching privacy framework for businesses that operate, target...more

General Data Protection Regulation (GDPR) › CNIL › Data Controller

"My best business intelligence, in one easy email…"