Schrems 2 : The Commission Issues an Adequacy Decision Allowing EU-US Data Transfers (again)

Schrems 2 : The Commission Issues an Adequacy Decision Allowing EU-US Data Transfers (again)

ArnaudSep 11, 20235 min read

On 10 July 2023, the European Commission adopted a new adequacy decision concerning personal date transfers to the United States. This decision brings to an end a judicial epic that began in 2016 with the first Schrems ruling and which

GDPR : Employee’s right of access

GDPR : Employee’s right of access

ArnaudAug 22, 202210 min read

The General Data Protection Regulation (GDPR) gives data subjects rights over their own personal data, including the right of access to personal data processed by a controller (Article 15). In practice, the data subject can ask an organisation to access

CNIL – FR: Direct Marketing, Employee Monitoring and Cloud are the 2022 Audit Priorities

CNIL – FR: Direct Marketing, Employee Monitoring and Cloud are the 2022 Audit Priorities

ArnaudFeb 28, 20223 min read

On 15 February 2022, the CNIL released its control programme for the year 2022. This year the priority themes are as follows: Direct marketing ; Employee’s monitoring in the context of remote working; Cloud computing.

Google Analytics: The CNIL Asked a Website Operator to Stop Using Google Analytics

Google Analytics: The CNIL Asked a Website Operator to Stop Using Google Analytics

ArnaudFeb 14, 20223 min read

On 10 February 2022, the CNIL issued a formal notice to a website operator using Google Analytics cookies to comply with the GDPR and more specifically with the CJEU Schrems 2 ruling on the transfer of data to the US.…

Cookies and other Trackers : How to Comply

Cookies and other Trackers : How to Comply

ArnaudFeb 9, 202214 min read

Following the hundreds  of million fines imposed Amazon, Google and Facebook by the CNIL and other authorities relating to their use of cookies, this article aims to review the CNIL’s practical recommendations in this area so that to help organisations…


Schrems 2 : The Commission Issues an Adequacy Decision Allowing EU-US Data Transfers (again)

Schrems 2 : The Commission Issues an Adequacy Decision Allowing EU-US Data Transfers (again)

Sep 11, 202316445 min read

On 10 July 2023, the European Commission adopted a new adequacy decision concerning personal date transfers to the United States. This decision brings to an end a judicial epic that began in 2016 with the first Schrems ruling and which

GDPR : Employee’s right of access

GDPR : Employee’s right of access

Aug 22, 2022256510 min read

The General Data Protection Regulation (GDPR) gives data subjects rights over their own personal data, including the right of access to personal data processed by a controller (Article 15). In practice, the data subject can ask an organisation to access

CNIL – FR: Direct Marketing, Employee Monitoring and Cloud are the 2022 Audit Priorities

CNIL – FR: Direct Marketing, Employee Monitoring and Cloud are the 2022 Audit Priorities

Feb 28, 202217643 min read

On 15 February 2022, the CNIL released its control programme for the year 2022. This year the priority themes are as follows: Direct marketing ; Employee’s monitoring in the context of remote working; Cloud computing.

Google Analytics: The CNIL Asked a Website Operator to Stop Using Google Analytics

Google Analytics: The CNIL Asked a Website Operator to Stop Using Google Analytics

Feb 14, 202222683 min read

On 10 February 2022, the CNIL issued a formal notice to a website operator using Google Analytics cookies to comply with the GDPR and more specifically with the CJEU Schrems 2 ruling on the transfer of data to the US.…

Cookies and other Trackers : How to Comply

Cookies and other Trackers : How to Comply

Feb 9, 2022313814 min read

Following the hundreds  of million fines imposed Amazon, Google and Facebook by the CNIL and other authorities relating to their use of cookies, this article aims to review the CNIL’s practical recommendations in this area so that to help organisations…

This post is also available in fr_FR.