Foley Hoag LLP - Security, Privacy and the Law (JD Supra France)
French Data Protection Authority Rules on Transfers of Health Data
The French Conseil d’Etat handed down an important decision October, 13th regarding privacy and personal data protection. This decision comes in the wake of the “Schrems II” ruling of the Court of Justice of the European Union (CJEU), which ruled that the protection of data transferred to the United States by the “Privacy Shield” was insufficient under European law...
French Data Protection Authority Takes Stock After 4 Months of GDPR
Four months after the GDPR came into effect, the French Data Protection Authority (“CNIL“) published a first assessment with some impressive figures: ..It received more than 600 personal data breach notifications, ?i.e., about 7 notifications each day, involving approximately 15 million individuals...
French Data Protection Authority Imposes a Record 250,000 € Fine to Optical Center for a Security Breach on its Website
On June 7, 2018, the French Data Protection Authority (the CNIL) published a decision (issued one month earlier) in which it imposed a record 250,000 euros fine on Optical Center (which, although its name does not indicate, is a French company) for having insufficiently secured the personal data of its customers.
France Adopts Its GDPR Implementation Act
The French National Assembly voted on May 14, 2018 to adopt changes that bring its existing Data Protection Act of 1978 in line with the EU’s General Data Protection Regulation (GDPR).
How the French Fought the Election Hackers
Emmanuel Macron won France’s presidential election in a landslide. He defeated his opponent, Marine Le Pen, by more than thirty percentage points. Such a high margin might lead one to think that his victory was inevitable. But on the eve of the election, it did not seem that way.
Google and the Right to be Forgotten: The French Data Protection Authority Takes the Matter Further
On June 12, 2015 the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés – CNIL) issued a notice ordering Google to draw all the consequences of the CJEU May 13, 2014 ruling and to apply delisting not only to the national domain of the individual who requests delisting but on all of the search engine’s domains, including google.com