The EDPB has published its Art. 65(1)(a) binding decision on the dispute between the CNIL (French DPA) as the lead supervisory authority, and the UODO (the Polish DPA) as another supervisory authority on the same case, with regard to the amount of the fine against ACCOR SA. In particular, the fine was issued for violation...
Following a public consultation the CNIL, the French DPA, has published a position on the conditions for deploying “augmented” video devices in places open to the public. In particular, CNIL’s position presents the legal framework currently applicable and highlights the risks to the rights and freedoms of individuals if more modern rules will not address...
CNIL, the French DPA, has published a Q&A on its website where it clarifies that Google Analytics’ use is not legal without a new deal that would replace the EU-US Privacy Shield. CNIL says that the use of Google’s web analytics tool does not comply with the General Data Protection Regulation (GDPR). Find the Q&A...
The French DPA (CNIL – Commission nationale de l’informatique ed des libertes) has published its annual report for 2021 which contains some useful information and figures on complaints, investigations and sanctions as well as standards of references issued by the DPA in relation to specific processing activities. CNIL has reiterated its mandate as renewal of...
The French DPA (CNIL) fined the DEDALUS BIOLOGY company with a fine of €1.5m for security flaws that led to the leak of medical data of nearly half a million patients. Since the 24th of February 2021, the CNIL carried out several checks in the medical sector, including against the company DEDALUS BIOLOGY which markets...
The CNIL introduction to its DPO guide reads “Emerging in 2018 with the entry into force of the General Data Protection Regulation (GDPR), the data protection officer (DPO) has a central position in personal data governance. The DPO must inform and advise the data controller, monitor the organisation’s compliance with legal obligations and act as a...
The French DPA (CNIL) has published its 2022-2024 strategic plan, which is accessible here. The plan has three priority areas for a trusted digital society: promoting respect for rights, promoting the GDPR as an asset and targeting regulation on high-stakes subjects.
American Headquarters: European Office:
PrivacyRules Ltd.
201 East Fifth Street
Suite 1900 – #1362
Cincinnati, OH 45202, USA
Via dei Della Robbia 112
50132, Firenze
Italy (IT)Expertise