General Data Protection Regulation (GDPR), Cybersecurity, CNIL

Bilan de l’activité contentieuse de la CNIL en 2023 : un rétroviseur pour lire l’avenir

Hogan Lovells on 4/29/2024

Il n’y a pas de question plus difficile en matière contentieuse que celle de l’anticipation des risques de faire l’objet d’un contrôle ou d’une sanction. C’est la raison pour laquelle il est utile de se nourrir des évolutions...more

AI Developers - Make Sure You Are Compliant With the GDPR!

BCLP on 4/19/2024

The CNIL’s newly released recommendations for AI system developers set out the regulator’s expectations for the entire development process of an AI system, from design to database creation and integration, ensuring...more

CNIL confirms the compatibility of AI with the GDPR

Hogan Lovells on 10/16/2023

On October 12, 2023, the CNIL released its first guidance on how to comply with the General Data Protection Regulation (GDPR) when developing and using artificial intelligence (AI) using personal data or impacting...more

France CNIL calls for comments on its draft recommendation on security of critical data processing operations

A&O Shearman on 9/15/2023

The French supervisory authority (CNIL) asked for public comments on its draft recommendation on data security in relation to processing that presents particularly high risks to individuals or to the public interest (the...more

French CNIL released an action plan for AI focusing on generative AI systems

Hogan Lovells on 5/18/2023

A few days after the European Parliament adoption of a compromise position on the Artificial Intelligence Act (the “AI Act”), the French Data Protection Authority (the “CNIL”) published, on 16 May 2023, a detailed 4-step...more

France fines facial recognition company additional €5.2 million for noncompliance

Orrick, Herrington & Sutcliffe LLP on 5/15/2023

On May 10, the French data protection agency, Commission Nationale de l’Informatique et des Libertés (CNIL), fined a facial recognition company an overdue penalty payment in the amount of €5.2 million for failing to comply...more

Comprendre et tirer les leçons de la riche activité de la CNIL de ces derniers mois

Hogan Lovells on 3/29/2023

Les derniers mois ont vu une activité bouillonnante de la CNIL avec l’adoption de nombreuses délibérations. Nous avons analysé ces décisions pour comprendre les principales orientations prises par l’autorité française....more

La CNIL sanziona una software-house di videogiochi

Orrick, Herrington & Sutcliffe LLP on 2/16/2023

Alla luce del recente provvedimento dell’Autorità Garante per la Protezione dei Dati Personali Francese, la Commission nationale de l'informatique et des libertés (“Garante” o “CNIL”), riportiamo di seguito un’analisi del...more

Analisi del Recente Provvedimento del Garante Privacy Francese

Orrick, Herrington & Sutcliffe LLP on 2/6/2023

Alla luce del recente provvedimento dell’Autorità Garante per la Protezione dei Dati Personali Francese, la Commission nationale de l'informatique et des libertés (“Garante” o “CNIL”), riportiamo di seguito un’analisi del...more

French and Italian Data Protection Authorities Take Issue with Google Analytics: Analysis and Key Takeaways

Orrick, Herrington & Sutcliffe LLP on 7/19/2022

Google Analytics remains a hot topic for businesses and apparently also for data protection authorities (DPAs). With the advent of these new decisions and the new CNIL guidance, businesses have an even harder time justifying...more

Reform of the procedure before the French Data Protection Authority

Hogan Lovells on 7/1/2022

On 24 January and 8 April 2022, the procedure before the French Data Protection Authority (CNIL) was reformed with the aim notably to better respond to the growing number of complaints that the CNIL receives each year...more

Virginia Finalizes CDPA Text With the Addition of Three Amendment Bills

ArentFox Schiff on 5/19/2022

Connecticut Passes the Fifth US State Consumer Privacy Law - The Connecticut governor has formally signed and passed An Act Concerning Personal Data Privacy and Online Monitoring (CPDA), making this law the fifth US state...more

French Data Protection Authority Fines Processor for Failing to Enter into Data Processing Agreement

Orrick, Herrington & Sutcliffe LLP on 4/27/2022

France’s data protection authority, the Commission Nationale de Informatique et des Libertés (“CNIL”), has issued one of its highest General Data Protection Regulation (“GDPR”) sanctions to-date against Dedalus Biologie SAS...more

French DPA opened public consultation on standards for Early Access and Compassionate Access

Hogan Lovells on 3/9/2022

The healthcare sector is a current focus of the French data protection authority (CNIL) which just published two draft standards regarding processing of personal data in the context of Early Access and Compassionate Access....more

Growing Trouble for EU-U.S. Data Transfers Through Google Analytics

Davis Wright Tremaine LLP on 2/23/2022

France's data protection authority (DPA), Commission Nationale de l'Informatique et des Libertés (CNIL), announced its ruling on February 10, 2022, that the use of Google Analytics by companies in the EU violates Article 44...more

Ne manquez pas la consultation sur les référentiels Accès Précoce et Accès Compassionnel

Hogan Lovells on 2/17/2022

Le 15 février 2022, la CNIL a publié deux projets de référentiels. Ces référentiels étaient très attendus car l’Autorisation Unique 041 sur les traitements de données personnelles dans le cadre des Autorisations Temporaires...more

France Issues Processor Guidelines on “Reusing Personal Data to Improve or Develop Services or Products”

Cooley LLP on 2/10/2022

On January 12, 2022, the French Data Protection Authority (CNIL) issued guidance (available in French only) that sets out the conditions for processors to reuse the personal data entrusted by controllers for their own...more

Privacy Report: FTC Warns Companies to Remediate Log4j Security Vulnerability

ArentFox Schiff on 1/19/2022

FTC Warns Companies to Remediate Log4j Security Vulnerability - Log4j is a ubiquitous piece of software used to record activities in a wide range of systems found in consumer-facing products and services. Recently, a...more

French Data Protection Authority CNIL on a Hunt for Cookies

Cooley LLP on 12/21/2021

France’s data protection authority (CNIL) has proved again its determination to continue its enforcement strategy by issuing some 30 new formal notices to comply with its new guidelines on cookies on December 14, 2021....more

The EU’s Collective Redress Directive — An Analysis of the Interplay with EU General Data Protection (GDPR)

Faegre Drinker Biddle & Reath LLP on 11/11/2021

In this fourth alert in our series regarding the European Parliament’s formal endorsement of a new collective actions legislation titled the Directive of the European Parliament and of the Council on Representative Actions...more

CNPD vs. Amazon, the largest GDPR fine on record – what do we know so far?

McGuireWoods LLP on 8/16/2021

Amazon’s financial records have revealed that the Luxembourg data protection supervisory authority, the Commission Nationale pour la Protection des Données (“CNPD”), is fining the retailer’s European arm (Amazon Europe Core...more

Whether You Like it or Not, Cookies are Back on the Menu and UK and EU Data Protection Authorities are Taking Enforcement Action

Orrick, Herrington & Sutcliffe LLP on 7/27/2021

The French data protection authority, La Commission nationale de l’informatique et des libertés ("CNIL"), one of Europe's ("EU") most active data protection regulators, has continued to focus on the lawfulness of the use of...more

General Data Protection Regulation (GDPR) › Cybersecurity › CNIL