GDPR Cookies in France: the CNIL Consent Rules
Since the end of March 2021, businesses have had to bring their cookie policy into line with the GDPR and the ePrivacy Directive.
GDPR Implementation: How to Apply the GDPR in Your Company
The GDPR, applicable since 25 May 2018, requires under Article 5 that data be processed lawfully, fairly and transparently.
GDPR and E-commerce: How to Make Your Online Store Compliant
The GDPR, applicable since 25 May 2018, defines personal data in Article 4 as any information relating to an identified or identifiable natural person.
Building a Prospect Database: GDPR Compliance for Sales Prospecting
Building a prospect database requires compliance with GDPR obligations on personal data protection and consent.
GDPR Sensitive Data (Article 9): Protection and Specific Obligations
Sensitive data is a special category under the GDPR that affects the integrity and privacy of the data subjects.
How to Write a GDPR-Compliant Privacy Policy: Key Requirements
A privacy policy is an essential document for any organisation that collects personal data, and the GDPR requires it.
GDPR DPIA: Data Protection Impact Assessment Method and Obligations to Ensure Compliance
The GDPR data protection impact assessment (DPIA) assesses and controls the consequences of data processing for the rights and freedoms of natural persons.
Privacy by Design under the GDPR: Definition and Obligations
Privacy by design requires data protection to be built in from the moment a processing operation is designed. Definition, the Article 25 GDPR obligation and implementation.
When Is a DPO Mandatory? The Three GDPR Cases Explained
Article 37(1) of the GDPR makes it mandatory to appoint a data protection officer in three specific cases. CNIL criteria, examples, penalties and the obligations that still apply without a DPO.
Website Legal Requirements in France: Terms, Privacy Policy and Cookie Policy
A start-up website that collects personal data must have a legal notice, terms of use and sale, a privacy policy and a cookie policy.
GDPR Compliance Steps: Method, Timeline and Practical Advice
GDPR compliance is required of every organisation processing personal data in the European Union and governs its processing activities.
GDPR Record of Processing Activities: A Practical Guide to Creating and Maintaining It
The record of processing activities is required by Article 30 of the GDPR for controllers and processors, subject to a limited exception.
What Is the Role of a Lawyer in GDPR Compliance?
Article 5 of the GDPR sets out the key principles: lawfulness, transparency, purpose limitation, data minimisation and confidentiality of data.
GDPR Processor Obligations and Liability: What You Need to Know for Compliance
The GDPR distinguishes the controller, which determines the purposes and means, from the processor, which processes the data on its behalf.
GDPR Compliance for Startups: How to Go About It
The GDPR, applicable since 25 May 2018, harmonises the protection of personal data in the European Union.
GDPR Consultant in France: How to Choose an Expert for Your Company’s Compliance
Choosing a GDPR provider (consultancy firm or outsourced DPO) is crucial because the offers on the market vary widely in quality.
CNIL Cookie Banner: Technical and Legal Compliance in France
A GDPR-compliant cookie banner remains essential for any business with a website in France.
What Must a GDPR Data Processing Agreement (DPA) Contain?
What must a personal data processing agreement that complies with the GDPR contain? Mandatory terms, processor obligations, the sub-processing chain and documentation.
GDPR Audit: Complete Guide, Key Steps and Checklist for Compliance
A GDPR audit checks whether internal procedures meet compliance requirements and anticipates the questions the CNIL may ask during an inspection.
Who Does the GDPR Apply To? GDPR Territorial Scope Explained
Since 2018, the GDPR has been an essential framework for anyone handling personal data of residents of the European Union.
How to Draft Your GDPR Documents: Record of Processing Activities, Privacy Policy and Legal Notice
The GDPR (Regulation 2016/679) governs the processing of personal data in the European Union and requires transparency, security and stronger rights.
PSD2 and the GDPR: Legal Impact on Data Protection
The GDPR strengthens the protection of personal data collected by banks, where lawyers have a role to play in compliance.
CNIL Inspection Preparation: Getting Ready and Legal Support
A CNIL inspection checks that data protection rules are correctly applied and may be announced or unannounced.
Google Analytics 4 and the CNIL: a GDPR Configuration Guide
Configuring Google Analytics 4 in compliance with the GDPR improves audience measurement while limiting the risk of a CNIL penalty.
HDS Certification in France: Health Data Hosting Compliance Explained
Health data hosting is a major issue for any professional in the healthcare sector who handles this information in France.
B2B Prospecting and GDPR in France: Legal Obligations for IT Service Providers
B2B prospecting by an IT service provider remains governed by the GDPR whenever a contact makes it possible to identify a natural person.
Banking Data and the GDPR: Enhanced Security and Legal Requirements
Protecting banking data plays a central role in the European regulatory landscape. Between the need to ensure data security…
GDPR Fines and Penalties: What Are They and How Can You Avoid Them?
The GDPR is an essential issue for every business, but it can seem complex to master. You are probably concerned about the risk of…
GDPR Data Retention Periods: Understanding Your Obligations
The GDPR strictly governs data retention periods, requiring the controller to define, justify and document them according to the purpose.
Buying Email Lists and Databases: GDPR Legality and Business Risks
Since the GDPR became applicable in 2018, buying databases containing personal data has been strictly regulated for any processing that identifies a person…
