About this site

DLA Piper’s Data Protection and Privacy practice delivers topical legal and regulatory updates and analysis from across the globe.

Read more

Categories
Key publications

EU Law on Cookies Guide

Privacy Matters
DLA Piper's Global Privacy & Data Protection Resource

Tag: France

FRANCE: NEW GUIDANCE FOR DATA RETENTION

By Denise Lebeau-Marianna – Partner and  Yaël Hirsch – Senior Associate The French Supervisory Authority (the “CNIL”) has issued new updated guidelines on data retention during the month of July (the “CNIL’s Guidelines”)[1]. They provide more practical guidance and update the CNIL previous Recommendations dated 11 October 2005 on the conditions of archiving personal data[2]. […]

Read More

France: FIRST SANCTION OF AN ONLINE SHOES COMPANY BY CNIL ACTING AS A LEAD AUTHORITY FOR SEVERAL INFRINGEMENTS TO GDPR REQUIREMENTS

On 28 July 2020, the French Supervisory Authority (the “CNIL”) sanctioned the online shoes retail company, SPARTOO SAS, by a €250,000 fine and an injunction to comply with GDPR within 3 months under penalty for various non-compliances with the GDPR of the personal data processing related to clients, prospects and employees[1]. I. Factual background and […]

Read More

Google LLC loses appeal against French Data Protection Authority decision before France highest administrative Court

Denise Lebeau-Marianna, Partner & Alexandre Balducci, Associate – DLA Piper France LLP Further to two complaints filed by non-governmental organisations None Of Your Business (NOYB) and La Quadrature du Net (LQDN), the French data protection supervisory authority (CNIL) restricted committee imposed on January 21, 2019 a EUR 50 million administrative fine against Google LLC for […]

Read More

FRANCE: THE FIRST CNIL STANDARD REGULATION FOR BIOMETRIC SYSTEMS IN THE WORKPLACE

By Denise Lebeau-Marianna (Partner) & Alexandre Balducci (Associate) Why did the CNIL adopt a specific regulation for the use of biometric data processing in the workplace? In accordance with Article 9 (4) of the General Data Protection Regulation (GDPR) which provides that “Member States may maintain or introduce further conditions, including limitations, with regard to […]

Read More

EU: European Court confirms journalism exception for citizen-journalists, but not in France?

By Patrick Van Eecke, Denise Lebeau-Marianna, Tiphaine Caulier and Laetitia Mouton

Under European data protection law, journalists enjoy some regulatory exemptions when processing personal data for journalistic purposes, balancing the right to the protection of personal data with the principle of freedom of expression.

A question which has however sparked some debate is whether so-called citizen journalists, such as bloggers, can rely on the derogation for journalistic purposes as well. In its judgment of 14 February 2019 in the Sergejs Buivids v. Datu valsts inspekcija case, the Court of Justice of the European Union (CJEU) has answered this question affirmatively.

Read More

FRANCE: New cooperation agreement between the CNIL and DGCCRF

By Denise Lebeau-Marianna and Caroline Chancé   On 31 January 2019, the French Data Protection Supervisory Authority (CNIL) and the French General Directorate for Competition Policy, Consumer Affairs and Fraud Control (DGCCRF, authority in charge of consumer protection) signed a new protocol of cooperation to improve protection of personal data of consumers.   This new protocol replaces a […]

Read More

FRANCE: A new phase in European privacy law enforcement – CNIL fined Google LLC 50 million euros!

By Denise Lebeau-Marianna, Caroline Chancé and Alexandre Balducci   On 21 January 2019, the restricted committee of the French Data Protection Supervisory Authority (CNIL) fined Google LLC 50 million euros for breaching GDPR for lack of transparency, inadequate information and lack of valid consent regarding personalized advertising.  This is the first decision rendered by the CNIL […]

Read More

FRANCE: ONE MORE STEP TO ENSURE CONSISTENCY OF THE NEW FRENCH DATA PROTECTION LAW

By Denise Lebeau-Marianna and Yaël Hirsch On 12 December 2018, the French Government issued an ordinance[1] finalizing, at the legislative level[2], the alignment of the French Data Protection Law (“FDPL”) with the General Data Protection Regulation[3] (“GDPR”) and the Directive 2016/680[4]. Following-up the adoption of the GDPR, the French Law No. 2018-493 related to personal data protection[5] […]

Read More