Strategic Lawyering 28 May 2019 | Laure Marolleau
Investigations and sanctions: What lessons can be drawn from the CNIL’s activities?
On April 15, the Commission Nationale de l’Informatique et des Libertés (French Data Protection authority, hereinafter the “CNIL”) presented its 2018 activity report, i.e. the assessment that it draws from its activities during the year 2018 which has been marked by the application of the General Data Protection Regulation and the new French Data Protection Act.
From the CNIL’s assessment and the decisions it took in 2018, we can learn lessons to prevent the risks incurred when processing personal data.