Fox Rothschild LLP (JD Supra France)

Even in the absence of a cross-border transfer of personal data from the European Union to a third country, if you are using a vendor that has a U.S. parent company, get ready to implement supplementary measures, says the French Conseil d'Etat in an interim decision...

France’s Data Processing Authority CNIL weighs in on Coronavirus and GDPR. Employers should NOT: •Collect in a systematic and generalized manner, or through individual inquiries and requests, information relating to the search for possible symptoms presented by an employee/agent and their relatives.

French Data Protection Authority CNIL has weighed in on CCTV surveillance in schools. CNIL received 25 complaints regarding systematic surveillance of students throughout their day, whether during their recess, during their lunch in the canteen or even during their class time.

In a statement of its priorities over the next year, French data privacy regulator CNIL emphasizes the importance of a balanced approach to data protection regulation.

The French Competition Authority has announced it imposed a sanction of €150 million on Google for abusing its dominant position in search advertising.

The French Data Protection Authority, CNIL, has prohibited the use of facial recognition to control entry into a school as disproportionate saying that alternative less intrusive means are available, such as badge control.

The French Data Protection Authority CNIL has issued guidance on types of data processing for which a Data Protection Impact Assessment (DPIA) is not required under GDPR: HR-related processing, not including profiling, for companies with under 250 employees.

Web crawling and data protection: CNIL has issued a 180,000 EUR fine against a provider of automobile insurance policies for failure to adequately protect data in violation of GDPR, specifically citing disallowing web crawling as a way to protect personal data from wrongful access.

The French privacy regulator CNIL has released guidance on how to comply with the European Union’s General Data Protection Regulation (GDPR) when using cookies and other web tracking technologies that are an integral part of most companies' public-facing websites. The rules serve as a guide for any company that does business in Europe and controls or processes the personal data of EU individuals.

Cookies in the spotlight in France: Actual consent – in. Continued browsing – out. The French Data Protection Authority, CNIL, repealed its 2013 guidelines on cookies consent and announced upcoming cookies guidance will be published later this month (July).

The French Data protection authority, CNIL, has issued a “Developer Kit” setting forth best practices for data protection. Key takeaways: Before using a development tool, especially for personal data, read the conditions of use.

Enforcement is coming – says CNIL, the French Data Protection Authority. CNIL published its enforcement priorities for 2019. CNIL will no longer refrain from enforcing new obligations imposed by GDPR, but it will continue to exercise judgment in the choice of corrective measures and will not resort to fines every time.

The French Data Protection Agency CNIL recieved 11,077 complaints in 2018, up 32.5 percent compared to 2017. Other highlights from the CNIL 2018 report- CNIL carried out 310 investigations in 2018, of which 204 were onsite, 51 online and 51 on the basis of documentation.

The French Data Protection Authority, CNIL, issues guidance on credit card data in remote transactions: Merchants who collect credit card detail to facilitate a transaction, need the consent of their customers to keep their bank details beyond such transaction, to facilitate their subsequent purchases.

Sharing personal data with data brokers or other businesses partners? French regulator, CNIL, has new guidelines for you to follow.

Keep your passwords close…and complex, and encrypted and unique, and ever-changing. In the wake of recent data breaches involving passwords, the French data protection authority, the CNIL, has published guidelines for adequate passwords.

Summer is the time for vacations, and with that comes the stress of balancing work pressures while out of the office. Many employees prefer not to take vacations when the alternative is trying to conduct work from a cell phone on the beach. Maybe California can learn from France, and the recently publicized “right to disconnect”.