While mobile apps have become one of the major means of access to digital services, their ubiquity is accompanied by significant risks to users' privacy, due to the massive amount of personal data they collect and process....more
2/18/2025
/ CNIL ,
Consent ,
Data Collection ,
Data Controller ,
Data Privacy ,
Data Processors ,
Data Protection ,
France ,
General Data Protection Regulation (GDPR) ,
Mobile Apps ,
Personal Data ,
Privacy Laws
Following the very recent adoption of the EU Regulation on AI (the AI Regulation) the CNIL (the French data regulator) has issued the second in its series of recommendations for the development of privacy-friendly AI models....more
6/28/2024
/ Advertising ,
Artificial Intelligence ,
CNIL ,
Data Collection ,
Data Controller ,
Data Protection Authority ,
Data Subjects Rights ,
Duty to Inform ,
France ,
General Data Protection Regulation (GDPR) ,
Minors ,
New Guidance ,
Personal Data ,
Regulatory Requirements
On 7 March 2024, the Court of Justice of the European Union issued a ruling (C-604/22 | IAB Europe) clarifying the concepts of personal data and controller in the context of the use of a Transparency and Consent Framework...more
5/31/2024
/ Advertising ,
Auction ,
Belgium ,
Competitive Bidding ,
Consent ,
Cookie Banners ,
Court of Justice of the European Union (CJEU) ,
Data Brokers ,
Data Collection ,
Data Controller ,
Data Protection Authority ,
EU ,
General Data Protection Regulation (GDPR) ,
Online Advertisements ,
Personal Data
Each year, the CNIL selects key areas of high interest to concentrate its investigations and assess the compliance of select commercial sectors. On February 8, The CNIL announced its four main areas of focus for...more
2/16/2024
/ Audits ,
CNIL ,
Customer-Loyalty Programs ,
Data Collection ,
Data Protection ,
Data Subject Access Requests ,
European Data Protection Board (EDPB) ,
France ,
General Data Protection Regulation (GDPR) ,
Investigations ,
Minors
Following the publication of several press articles and employee complaints, the French data protection regulator (“CNIL”) carried out an investigation at the Amazon France Logistique’s (“Amazon”) warehouses.
The CNIL's...more
1/31/2024
/ Amazon ,
CCTV ,
CNIL ,
Corporate Fines ,
Data Collection ,
Data Protection ,
Employee Monitoring ,
Employee Privacy Rights ,
Employee Rights ,
Enforcement Actions ,
France ,
General Data Protection Regulation (GDPR) ,
Health and Safety ,
Investigations ,
Surveillance ,
Temporary Employees
A few weeks ago, on 24 September 2023, the Data Governance Act (Regulation (EU) 2022/868 of the European Parliament and of the Council of 30 May 2022 on European data governance) (“DGA”) came into force.
The DGA aims to...more
11/14/2023
/ Administrative Authority ,
Best Practices ,
Data Collection ,
Data Management ,
Data Protection ,
EU ,
European Commission ,
General Data Protection Regulation (GDPR) ,
Information Governance ,
Information Management ,
International Data Transfers ,
Member State ,
Public Sector ,
Third-Party Service Provider
On 3 February 2022, the French Commission Nationale de l'Informatique et des Libertés (the "CNIL") published a set of commercial management guidelines for all organizations that conduct data processing for the management of...more
Websites that distribute content not intended for minors usually request that visitors confirm they are over 18 through a simple click. The efficiency of this approach is clearly limited, and 44% of 11-18 year olds in France...more