CNIL – FR: Direct Marketing, Employee Monitoring and Cloud are the 2022 Audit Priorities

CNIL – FR: Direct Marketing, Employee Monitoring and Cloud are the 2022 Audit Priorities

ArnaudFeb 28, 20223 min read

On 15 February 2022, the CNIL released its control programme for the year 2022. This year the priority themes are as follows: Direct marketing ; Employee’s monitoring in the context of remote working; Cloud computing. However, the CNIL recalls that…


CNIL – FR: Direct Marketing, Employee Monitoring and Cloud are the 2022 Audit Priorities

CNIL – FR: Direct Marketing, Employee Monitoring and Cloud are the 2022 Audit Priorities

Feb 28, 20222013 min read

On 15 February 2022, the CNIL released its control programme for the year 2022. This year the priority themes are as follows: Direct marketing ; Employee’s monitoring in the context…

Google Analytics: The CNIL Asked a Website Operator to Stop Using Google Analytics

Google Analytics: The CNIL Asked a Website Operator to Stop Using Google Analytics

Feb 14, 20222793 min read

On 10 February 2022, the CNIL issued a formal notice to a website operator using Google Analytics cookies to comply with the GDPR and more specifically with the CJEU Schrems…

Cookies and other Trackers : How to Comply

Cookies and other Trackers : How to Comply

Feb 9, 202218314 min read

Following the hundreds  of million fines imposed Amazon, Google and Facebook by the CNIL and other authorities relating to their use of cookies, this article aims to review the CNIL’s…

GDPR : International Data Transfers

GDPR : International Data Transfers

Jan 29, 20223592 min read

Under the General Data Protection Regulation (GDPR), personal data transfer outside of the EEA (i.e. EU and Norway, Lichtenstein and Iceland) or to international organisations are allowed only if one…

Google Analytics – GDPR : The EDPS & Austrian DPA Consider Data Transfers to Google LLC (US) Illegal

Google Analytics – GDPR : The EDPS & Austrian DPA Consider Data Transfers to Google LLC (US) Illegal

Jan 24, 20221816 min read

The European Data Protection Supervisor (“EDPS”) and the Austrian Data Protection Authority have both recently issued a decision ruling that the transfers of personal data to Google LLC (US) entailed…