By the DLA Piper EU Data Protection Team On 26 November 2018, the WP29’s successor, the European Data Protection Board (EDPB) published, Guidelines on the territorial scope of the GDPR (Art. 3). The proposed Guidelines are open for public consultation until 18 January 2019. The Guidelines provide some clarification around the boundaries of what […]
By Denise Lebeau-Marianna and Caroline Chancé On 8 November 2018, French NGO Internet Society France sent Facebook a formal notice listing seven areas where it has allegedly infringed GDPR. The social network has 4 months to respond. Failing that, the Internet Society France could launch the first class action suit for compensation since the entry into application […]
by Denise Lebeau-Marianna & Tiphaine Caulier On October 2nd 2018, the European Court of Justice (ECJ) held a decision confirming the conditions of access to personal data retained by providers of electronic communications services by the police in the context of a criminal investigation. Factual background A Spanish citizen who was the victim of the […]
By Denise Lebeau-Marianna and Caroline Chancé Many questions surround the Blockchain’s compatibility with EU General Data Protection Regulation (GDPR). The French Data Protection Supervisory Authority (the CNIL) has recently published its initial thoughts on this topic, providing some responses and practical recommendations on how the usage of a blockchain may be compatible with GDPR and more generally […]
By Denise Lebeau-Marianna and Caroline Chancé The French Council of State affirmed the EUR 25,000 fine imposed by the CNIL on Editions Croque Futur (challenges.fr) for non-compliance with French data protection law, and in particular cookie requirements. The facts go back to 2014-2015 when the French data protection authority (the CNIL) found out that French company Editions, Croque […]
By Denise Lebeau-Marianna and Caroline Chancé The French Constitutional Council has issued its ruling on June 12 regarding the new data protection law implementing the EU General Data Protection Regulation (GDPR). It’s a PASS! Almost a month after Senators referred the newly adopted data protection law to the Constitutional Council, thus blocking its promulgation on time for […]
By Denise Lebeau-Marianna and Caroline Chancé The French national digital security agency (ANSSI) has recently published a “data security kit” on the occasion of the entry into application of the EU General Data Protection Regulation (GDPR) on last May 25. Security of the personal data, to preserve their integrity and confidentiality, is one of the main data […]
By Denise Lebeau-Marianna and Caroline Chancé Immediately after the entry into application of the GDPR, the CNIL received several complaints over “forced consent” and unlawful processing. On May 25, the non-profit European Center for Digital Rights (known as nyob for “none or your business”), founded by Max Schrems, filed four, very similar, complaints over “forced consent” against […]
