Author's details

Name: Caroline Chance

Author's posts listings

FRANCE: New cooperation agreement between the CNIL and DGCCRF

On 1 February 2019
CNIL, consumer data, Consumer Data Right, consumer personal data, dgccrf, ecommerce, France, GDPR, retail

By Denise Lebeau-Marianna and Caroline Chancé On 31 January 2019, the French Data Protection Supervisory Authority (CNIL) and the French General Directorate for Competition Policy, Consumer Affairs and Fraud Control (DGCCRF, authority in charge of consumer protection) signed a new protocol of cooperation to improve protection of personal data of consumers. This new protocol replaces a […]

On 24 January 2019
CNIL, consent, Fine, France, GDPR, Google, infringement, legal basis, sanctions, transparency

By Denise Lebeau-Marianna, Caroline Chancé and Alexandre Balducci On 21 January 2019, the restricted committee of the French Data Protection Supervisory Authority (CNIL) fined Google LLC 50 million euros for breaching GDPR for lack of transparency, inadequate information and lack of valid consent regarding personalized advertising. This is the first decision rendered by the CNIL […]

On 21 January 2019
appointment, CNIL, president

By Denise Lebeau-Marianna and Caroline Chancé On 18 January 2019, French President Emmanuel Macron announced his intention to appoint Marie-Laure Denis as the next president of the French Data Protection Supervisory Authority (CNIL). If her nomination is confirmed by the Parliament, Marie-Laure Denis will take over the presidency of the CNIL on 1st February 2019, a position […]

On 28 November 2018

On 26 November 2018, the WP29’s successor, the European Data Protection Board (EDPB) published, Guidelines on the territorial scope of the GDPR (Art. 3). The proposed Guidelines are open for public consultation until 18 January 2019. The Guidelines provide some clarification around the boundaries of what constitutes an establishment in the EU, the status of […]

On 21 November 2018
class action, consent, Data Breach, formal notice, France, GDPR, liability, violation

On 8 November 2018, French NGO Internet Society France sent Facebook a formal notice listing seven areas where it has allegedly infringed GDPR. The social network has 4 months to respond. Failing that, the Internet Society France could launch the first class action suit for compensation since the entry into application of GDPR. The French […]

On 29 October 2018
CJUE, Criminal offense, ECJ, Police, proportionality

On October 2nd 2018, the European Court of Justice (ECJ) held a decision confirming the conditions of access to personal data retained by providers of electronic communications services by the police in the context of a criminal investigation. Factual background A Spanish citizen who was the victim of the robbery of his wallet and mobile […]

On 15 October 2018

Many questions surround the Blockchain’s compatibility with EU General Data Protection Regulation (GDPR). The French Data Protection Supervisory Authority (the CNIL) has recently published its initial thoughts on this topic, providing some responses and practical recommendations on how the usage of a blockchain may be compatible with GDPR and more generally Data Protection Law, taking […]

On 11 July 2018
CNIL, Cookies, ePrivacy, GDPR, sanctions

The French Council of State affirmed the EUR 25,000 fine imposed by the CNIL on Editions Croque Futur (challenges.fr) for non-compliance with French data protection law, and in particular cookie requirements. The facts go back to 2014-2015 when the French data protection authority (the CNIL) found out that French company Editions, Croque Futur, publisher of […]

Page 1 of 212

About this site

Categories

Key publications

Author's details

Author's posts listings

FRANCE: Marie-Laure Denis expected to become the new CNIL president

EU: New EDPB Guidelines on the territorial scope of the GDPR

EU: access by the police to personal data retained by providers of electronic communications services – a matter of proportionality!

FRANCE: CNIL publishes initial analysis on Blockchain and GDPR