PERSONAL DATA

The CNIL's strategic orientations for the period from 2022 to 2024 are broken down into several priority areas.

Its first axis: “promote control and respect for the rights of people on the ground”; To this end, the CNIL sets itself the objective of “[implementing] a dissuasive and proportionate repressive policy within shorter deadlines.

To do this, the CNIL will work to adapt its control, formal notice and sanction procedures. It will maintain the investigation of complaints as a priority at the heart of its repressive strategy and will ensure that investigation times are reduced” (https://www.cnil.fr/sites/default/files/atoms/files/cnil_plan_strategique_2022-24 .pdf)

The firm assists you in order to bring you into compliance and/or to remain in compliance:

Website and/or company audits and pre-diagnostics

Assistance with GDPR/GDRP compliance

- Implementation of appropriate documentation (proofreading and updating or writing):

• customer/supplier/subcontractor contracts
• personal data register
• information notices
• notices relating to cookies
• 
  

- Strengthening or implementation of contractual clauses relating to personal data

- Compliance of the website

- Assistance in carrying out impact analysis

- Bringing your Applications into compliance (The CNIL carries out numerous checks each year, following complaints, data breaches or according to priority themes set for the current year.

In 2023, the CNIL will focus its controls in particular on mobile applications and the management of health records (https://www.cnil.fr/fr/thematiques-prioritaires-de-controle-2023-cameras-augmentees-applications-mobiles -banking-files)

Training on awareness of personal data protection law