News & Analysis as of September 27, 2024

Data Security

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

AI Surveillance and Data Privacy at the Games

BCLP on 9/4/2024

As the Paris 2024 Summer Olympic and Paralympic Games (the “Games”) turn onto the final straight, the Games have yet again captured widespread global attention, on and off the track. With over 15.3 million visitors in Paris...more

CNIL Fines Canal+ Over Marketing and Data Security Concerns

Sheppard Mullin Richter & Hampton LLP on 11/28/2023

The French Data Protection Authority announced a €600,000 fine against Groupe Canal+ over concerns with the media company’s direct marketing activities. According to the CNIL, the company sent users email marketing without...more

France CNIL calls for comments on its draft recommendation on security of critical data processing operations

A&O Shearman on 9/15/2023

The French supervisory authority (CNIL) asked for public comments on its draft recommendation on data security in relation to processing that presents particularly high risks to individuals or to the public interest (the...more

UK Data Regulator Joins Scrutiny of WorldCoin

Dechert LLP on 8/23/2023

WorldCoin is a cryptocurrency project which uses iris scanning technology to issue a “World ID” as a digital identifier. Privacy concerns over WorldCoin have been voiced by several data protection authorities worldwide....more

Comprendre et tirer les leçons de la riche activité de la CNIL de ces derniers mois

Hogan Lovells on 3/29/2023

Les derniers mois ont vu une activité bouillonnante de la CNIL avec l’adoption de nombreuses délibérations. Nous avons analysé ces décisions pour comprendre les principales orientations prises par l’autorité française....more

Analisi del Recente Provvedimento del Garante Privacy Francese

Orrick, Herrington & Sutcliffe LLP on 2/6/2023

Alla luce del recente provvedimento dell’Autorità Garante per la Protezione dei Dati Personali Francese, la Commission nationale de l'informatique et des libertés (“Garante” o “CNIL”), riportiamo di seguito un’analisi del...more

Breach of Patients’ Data Leads to Heavy Sanctions in France

Cooley LLP on 7/6/2022

At the end of February 2021, the French Data Protection Authority (CNIL) found out via the media about a massive personal data breach involving health-related data of about 500,000 French patients. After more than a year of...more

French Data Protection Authority Fines Processor for Failing to Enter into Data Processing Agreement

Orrick, Herrington & Sutcliffe LLP on 4/27/2022

France’s data protection authority, the Commission Nationale de Informatique et des Libertés (“CNIL”), has issued one of its highest General Data Protection Regulation (“GDPR”) sanctions to-date against Dedalus Biologie SAS...more

Privacy Update: Best Practices for the Virginia Consumer Data Protection Act

ArentFox Schiff on 12/10/2021

Best Practices for the Virginia Consumer Data Protection Act - The Virginia Consumer Data Protection Act (VCDA) Working Group of the Joint Commission on Technology and Science released its final report on best practices...more

The ‘Morning After’ Third Party Cookies

Fox Rothschild LLP on 10/18/2021

The development of alternative techniques to “third-party” cookies cannot be done at the expense of the right of individuals to protect their personal data and privacy, according to France’s Commission Nationale de...more

Schrems II Update

A&O Shearman on 7/6/2021

French CNIL issues guidance for organisations on transfer impact assessments, German DSK releases statement on supplementary measures and SCCs, and Hessian DPA comments on data transfer obligations (23 June 2021)....more

International Data Protection Update – First Quarter 2021

BakerHostetler on 3/30/2021

This quarterly update highlights some of the international data protection issues that have caught our attention, and the attention of our clients, in the past three months....more

Jones Day Global Privacy & Cybersecurity Update | Vol. 27

Jones Day on 1/8/2021

United States - Regulatory—Policy, Best Practices, and Standard - NIST Unveils Draft Guidance to Protect Critical Infrastructure - On October 22, 2020, the National Institute of Standards and Technology ("NIST")...more

Fichiers de gestion des ressources humaines : il faut s'assurer de la conformité sans attendre la fin de la pandémie

Kramer Levin Naftalis & Frankel LLP on 4/25/2020

Le Covid-19 n’a pas empêché la Commission nationale de l’informatique et des libertés (« CNIL ») de publier le 15 avril 2020 son référentiel relatif aux traitements de données à caractère personnel mis en œuvre aux fins de...more

CNIL’s New Guidelines on HR Processing

Hogan Lovells on 4/23/2020

The French Data Protection Authority (CNIL) has recently released new guidelines (French only) regarding human resources processing operations. ...more

COVID-19 and Data Protection Compliance in France

White & Case LLP on 4/21/2020

Following the outbreak of COVID-19, organizations have been implementing exceptional measures to maintain "business-as-usual" to the extent allowed by their particular circumstances and to protect their employees, customers...more

CNIL Issues Record-Keeping Guidance

Sheppard Mullin Richter & Hampton LLP on 9/30/2019

Under GDPR, companies are required to keep certain records of their processing activities. There has been some question about the types of records controllers should keep. To help clarify the questions arising from many...more

French DPA Issues Robust Model Regulation for Biometric Access Controls in the Workplace

Proskauer on Privacy on 4/25/2019

In late March, the French Data Protection Authority, Commission Nationale de l’Informatique et des Libertés (“CNIL”) released a model regulation (the “Model Regulation”) governing the use of biometric access controls in the...more

France Continues to Focus on Use of Biometrics

Sheppard Mullin Richter & Hampton LLP on 4/3/2019

The French CNIL (the country’s data protection authority) has released rules for how companies can use the biometric information of their employees. Fingerprint scanning is a popular method for “clocking in” around the globe,...more

Massive GDPR Fine Is a Wake-Up Call to Get Compliance and Cyber Insurance Squared Away

Pillsbury - Policyholder Pulse blog on 2/5/2019

Have $57 million (or more) to spare? You’re going to need it if you run afoul of the EU’s General Data Protection Regulation (GDPR) without cyber insurance. In late January 2019, the French data protection authority, CNIL,...more

Dramatic Increase in French Privacy Complaints Since GDPR

Sheppard Mullin Richter & Hampton LLP on 10/22/2018

The French data protection authority CNIL has received 3,767 data protection complaints since EU’s General Data Protection Regulation (GDPR) came into effect on May 25, 2018. According to CNIL this is a 64 percent increase...more

GDPR - What to Expect in France

K&L Gates LLP on 7/19/2018

On July 2, 2018, the French Data Protection Authority (“Commission Nationale de l’Informatique et des Libertés” or “CNIL”) published its yearly thematic guidance for the priority axes of its control activities, notably...more

French Data Protection Authority Confirms Enforcement Trend on Security Obligations for Data Controllers

Jones Day on 7/6/2018

The Situation: Even before the General Data Protection Regulation ("GDPR") became effective on May 25, there has been a noticeable trend in the enforcement of security obligations through increased sanctions. The...more

Global Privacy & Cybersecurity Update Vol. 14

Jones Day on 6/5/2017

New York Attorney General Announces Record Number of Data Breach Notices in 2016 - On March 21, 2017, the New York Attorney General's Office announced that it received 1,300 reported data breaches in 2016—a 60 percent...more

24 Results

View per page

Page: of 1

General Data Protection Regulation (GDPR) › CNIL › Data Security

"My best business intelligence, in one easy email…"