On Feb. 23, 2022, the European Commission (Commission) announced a proposed Directive on Corporate Sustainability Due Diligence, which would establish uniform EU-wide requirements to foster compliance with certain...more
Depuis de nombreuses années le harcèlement, qu’il soit moral ou sexuel, fait l’objet d’une grande préoccupation sociétale et médiatique, tout particulièrement au sein des entreprises. Dans le cadre de son obligation générale...more
On June 4, the European Commission (EC) adopted two sets of standard contractual clauses (SCCs) for use between controllers and processers in the European Economic Area (EEA) and for the transfer of data between EEA and...more
6/17/2021
/ Cybersecurity ,
Data Controller ,
Data Processors ,
Data Protection ,
EU ,
European Economic Area (EEA) ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Data ,
Personally Identifiable Information ,
Schrems I & Schrems II ,
Standard Contractual Clauses
Depuis une loi du 24 décembre 2019, les plateformes ont la possibilité de mettre en œuvre une charte de responsabilité sociale (Article L. 7342-9 code du travail). Un décret publié le 22 octobre 2020 précise les modalités de...more
Companies will soon need to address human rights in their compliance programs in light of the new global human rights sanctions regime, adopted by the European Union on Dec. 7, 2020. ...more
France has entered its second national lockdown, and most employers are facing great uncertainties with regard to the implementation of the updated national health protocol....more
11/25/2020
/ Business Closures ,
Coronavirus/COVID-19 ,
Critical Infrastructure Sectors ,
Emergency Management Plans ,
France ,
Government Lockdown ,
Infectious Diseases ,
Public Health Emergency ,
Remote Working ,
Telecommuting ,
Workplace Safety
On Nov. 11, 2020, the European Data Protection Board (EDPB) published eagerly anticipated guidance in the wake of the July 2020 European Court of Justice’s (ECJ) decision in Schrems II, outlining a process for ensuring data...more
11/23/2020
/ Corporate Counsel ,
Cybersecurity ,
Data Protection ,
EU ,
EU-US Privacy Shield ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Data ,
Personally Identifiable Information ,
Schrems I & Schrems II ,
Standard Contractual Clauses
On Oct. 30, 2020, the United Kingdom’s data protection authority, the Information Commissioner’s Office (ICO), in connection with France’s Commission nationale de l’informatique et des libertés (CNIL), announced the largest...more
11/5/2020
/ British Airways ,
CNIL ,
Cybersecurity ,
Data Breach ,
Data Protection ,
Enforcement Actions ,
EU ,
General Data Protection Regulation (GDPR) ,
Information Commissioner's Office (ICO) ,
Marriott ,
Popular
Depuis plusieurs années la Maison Blanche s’est engagée dans une bataille frénétique contre la Cour pénale internationale (« CPI ») et tente de faire obstacle à l’enquête diligentée en mars 2020 visant les exactions présumées...more
9/9/2020
/ Economic Sanctions ,
EU ,
France ,
Geopolitical Risks ,
International Chamber of Commerce (ICC) ,
International Criminal Court ,
Office of Foreign Assets Control (OFAC) ,
SDN List ,
Secretary of State ,
Trump Administration ,
Visas ,
War Crimes
On July 16, the European Court of Justice (ECJ or the Court) struck down the EU-U.S. Privacy Shield program. The ruling invalidated an earlier European Commission (Commission) decision (Privacy Shield adequacy determination)...more
Comment la délibération de la CNIL tente de concilier efficacité et protection de la vie privée -
Parmi les autorités publiques, la Commission Nationale de l’Informatique et des Libertés (« CNIL ») est l’une de celles qui,...more
Le Covid-19 n’a pas empêché la Commission nationale de l’informatique et des libertés (« CNIL ») de publier le 15 avril 2020 son référentiel relatif aux traitements de données à caractère personnel mis en œuvre aux fins de...more
La sixième convention judiciaire d’intérêt public (« CJIP ») intervenue depuis la création de ce mode transactionnel par la loi n° 2016-1691 du 9 décembre 2016[1] (« Loi Sapin II ») a été validée le 28 juin 2019 par le...more
When Law No. 2016-1691 (Sapin II Law) created the convention judicaire d’intérêt public (CJIP), modeled after the American deferred prosecution agreement (DPA), it was feared that the existence of potentially dueling French...more
8/21/2019
/ AFA ,
Anti-Corruption ,
CJIP ,
Cooperation ,
Corporate Misconduct ,
Criminal Prosecution ,
Deferred Prosecution Agreements ,
France ,
Internal Investigations ,
Sapin II ,
Self-Reporting ,
White Collar Crimes
Lorsque la loi n° 2016-1691 du 9 décembre 2016 (« Loi Sapin II ») a créé la convention judicaire d’intérêt public (« CJIP ») sur le modèle des transactions pénales américaines (Deferred Prosecution Agreement ou « DPA »), on a...more
On June 13, 2019, a draft bill increasing fines for violations of Federal Law No. 242-FZ (Data Localization Law) was submitted to the State Duma (i.e., the lower house of the Federal Assembly). ...more
1. Binding Corporate Rules To Facilitate Intragroup Data Transfer -
Personal data is meant to circulate without boundaries inside the European Union (EU). The General Data Protection Regulation (GDPR) subjects personal...more
I. Les BCR pour faciliter les transferts intra-groupes -
Les données personnelles ont vocation à circuler sans s’arrêter aux frontières de l’Union européenne (« UE »). Aussi, le règlement général sur la protection des...more
Le 28 mai 2019, la Commission nationale de l'informatique et des libertés (« CNIL ») a prononcé une amende de 400.000 euros à l’encontre de la société Sergic, une société de gestion immobilière, pour manquement à l’obligation...more
Until recently, whistleblowing raised many concerns in France and other European countries. Reporting on colleagues’ behavior, even if unlawful, was seen as risky business that could lead to dismissals and criminal sanctions...more
Evidence gathering differs greatly between common law and civil law jurisdictions. For example, while a U.S. judge may in many instances allow extensive pretrial discovery, a French judge would generally consider nearly any...more
4/5/2019
/ Blocking Statutes ,
CLOUD Act ,
CNIL ,
Cross-Border ,
Data Protection ,
Discovery ,
Evidence ,
Extraterritoriality Rules ,
France ,
General Data Protection Regulation (GDPR) ,
Hague Convention ,
Litigation Strategies ,
Regulatory Standards
On Jan. 21, 2019, the French Data Protection Authority (CNIL) levied a 50 million euros sanction against Google LLC for violating the EU General Data Protection Regulation2 (GDPR) in the context of the first enforcement...more
2/27/2019
/ CNIL ,
Corporate Counsel ,
Data Protection ,
Enforcement Actions ,
EU Data Protection Laws ,
Fines ,
General Data Protection Regulation (GDPR) ,
Google ,
Personal Data ,
Popular ,
Prior Express Consent ,
Regulatory Violations ,
Transparency
Danske Bank is likely to again become the target of a formal investigation in France. A Paris court began investigating Danske Bank in October 2017 in relation to transactions of its Estonian branch, between 2008 and 2011,...more
2/1/2019
/ Corruption ,
Danske Bank ,
Enforcement Actions ,
Estonia ,
EU ,
Financial Transactions ,
France ,
Investigations ,
Money Laundering ,
Reasonable Suspicion ,
Regulatory Violations ,
White Collar Crimes
In the past, French law neither mandated nor provided any material incentives for companies to embrace compliance, corporate and social challenges. But things are dramatically changing in Europe, and more specifically in...more
Brief Comments on The Director of the Serious Fraud Office v. Eurasian Natural Resources Corporation Limited [2018] EWCA Civ 2006 -
On Sept. 5, 2018, the Court of Appeal of England and Wales handed down a unanimous...more
9/26/2018
/ Appeals ,
Attorney-Client Privilege ,
Bribery ,
Corruption ,
Criminal Investigations ,
Declaratory Relief ,
Document Productions ,
Electronically Stored Information ,
Internal Investigations ,
Legal Advice Privilege ,
Litigation Privilege ,
Natural Resources ,
Self-Reporting ,
Serious Fraud Office (SFO) ,
UK ,
Whistleblowers ,
White Collar Crimes