{"id":9104,"date":"2022-02-01T10:26:47","date_gmt":"2022-02-01T09:26:47","guid":{"rendered":"https:\/\/www.cabinetbouchara.com\/code-de-conduite\/"},"modified":"2026-02-10T08:57:53","modified_gmt":"2026-02-10T07:57:53","slug":"code-of-conduct","status":"publish","type":"page","link":"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/code-of-conduct\/","title":{"rendered":"Code of Conduct"},"content":{"rendered":"<p><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/\">Lexicon<\/a> <span style=\"color: #f5b63f\">&gt; <\/span><strong><span style=\"color: #f5b63f\"><span style=\"color: #f5b63f\">Code of C<\/span>onduct<\/span><br \/><\/strong><\/p>\n<p>IT Lexicon<\/p>\n<p style=\"text-align: justify\">Codes of conduct are voluntary accountability tools that set out specific rules for the protection of <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/personal-data\/\" target=\"_blank\" rel=\"noopener noreferrer\">personal data<\/a> for certain categories of data controllers and processors.<\/p>\n<p style=\"text-align: justify\">They are intended to contribute to the proper implementation of the <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/gdrp\/\" target=\"_blank\" rel=\"noopener noreferrer\">GDPR<\/a> taking into account the specificity of the different sectors of personal <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-processing\/\" target=\"_blank\" rel=\"noopener noreferrer\">data processing<\/a> and the specific needs of micro, small and medium-sized enterprises.<\/p>\n<p style=\"text-align: justify\">They are binding on the organizations that adhere to them and thus constitute a legally binding tool.<\/p>\n<p style=\"text-align: justify\">They thus participate in their <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/accountability-responsabilite\/\" target=\"_blank\" rel=\"noopener noreferrer\">accountability<\/a> because it allows them to demonstrate their compliance by justifying their good practices, and result from a voluntary approach. They can also create a climate of confidence for the individuals concerned, as well as legal certainty for the organizations in the sectors concerned.<\/p>\n<p style=\"text-align: justify\">Codes of conduct may include, but are not limited to, the following topics:<\/p>\n<ul>\n<li style=\"text-align: justify\">Fair and transparent treatment;<\/li>\n<li style=\"text-align: justify\">Legitimate interests pursued by data <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/person-in-charge-of-the-treatment\/\" target=\"_blank\" rel=\"noopener noreferrer\">controllers<\/a> in specific contexts;<\/li>\n<li style=\"text-align: justify\">Collection of personal data;<\/li>\n<li style=\"text-align: justify\">Pseudonymization of personal data;<\/li>\n<li style=\"text-align: justify\">Information provided to individuals and the exercise of their rights;<\/li>\n<li style=\"text-align: justify\">Information provided to children and protection for children;<\/li>\n<li style=\"text-align: justify\">Technical and organizational measures;<\/li>\n<li style=\"text-align: justify\">Notification of violations;<\/li>\n<li style=\"text-align: justify\">Transfers of data outside the EU;<\/li>\n<li style=\"text-align: justify\">Dispute resolution procedures.<\/li>\n<\/ul>\n<p style=\"text-align: justify\">Codes of conduct may also provide appropriate safeguards in the context of <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-transfer\/\" target=\"_blank\" rel=\"noopener noreferrer\">transfers of personal data<\/a>\u00a0to a third country or an international organization if the data controller or processor makes a binding and enforceable commitment to implement them.<\/p>\n<p style=\"text-align: justify\">Member States, supervisory authorities, the <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/european-data-protection-board\/\" target=\"_blank\" rel=\"noopener noreferrer\">European Data Protection Board<\/a> and the European Commission shall encourage the development of codes of conduct by associations and other bodies representing categories of data controllers or processors.<\/p>\n<p style=\"text-align: justify\">Prior to their application, the codes of conduct drawn up must be approved and then published by the competent supervisory authority, which is required to record them in a register available to the public.<\/p>\n<p style=\"text-align: justify\">In order to be approved by the supervisor, the drafters of a code of conduct must be able to demonstrate, among other things:<\/p>\n<ul>\n<li style=\"text-align: justify\">Whether the code setting meets a particular need;<\/li>\n<li style=\"text-align: justify\">That this code facilitates the effective application of the GDPR;<\/li>\n<li style=\"text-align: justify\">The practical application of the GDPR.<\/li>\n<\/ul>\n<p style=\"text-align: justify\">Since they are binding on the member organizations, their correct application is regularly verified by the control body provided for in the codes of conduct concerned.<\/p>\n<h2>GDPR Point<\/h2>\n<p style=\"text-align: justify\"><span>&#8220;<\/span><span>When drawing up a code of conduct, or when amending or extending such a code, associations and other bodies representing categories of controllers or processors should consult relevant stakeholders, including data subjects where feasible, and have regard to submissions received and views expressed in response to such consultations.&#8221;<\/span><\/p>\n<p style=\"text-align: justify\"><span>Recital 99 of the GDPR <\/span><\/p>\n<h2 style=\"text-align: justify\">Point of jurisprudence<\/h2>\n<p style=\"text-align: justify\"><span>The Austrian supervisory authority considers that &#8221;  <\/span><i><span>accreditation of an inspection body that the code of conduct holder expressly rejects is excluded, as is accreditation of a competing inspection body if the code of conduct holder has already expressly indicated its support for another applicant for accreditation  <\/span><\/i><span>&#8220;.<\/span><\/p>\n<p style=\"text-align: justify\"><span>Datenschutzbeh\u00f6rde, September 28, 2020, No. 2020-0.605.768<\/span><\/p>\n<p style=\"text-align: justify\">The Bouchara firm assists you in particular in :<\/p>\n<ul style=\"text-align: justify\">\n<li>Making your organization <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/gdrp\/\" target=\"_blank\" rel=\"noopener noreferrer\">GDPR<\/a> compliant;<\/li>\n<li>The drafting of data protection policies (privacy policy, computer charter &#8230;);<\/li>\n<li>Documentation of your processing (register of processing activities, register of violations, privacy <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-privacy-impact-assessment-dpa\/\" target=\"_blank\" rel=\"noopener noreferrer\">impact analysis<\/a>, prior consultation&#8230;);<\/li>\n<li>Obtaining certifications and adhering to <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/code-of-conduct\/\" target=\"_blank\" rel=\"noopener noreferrer\">codes of conduct<\/a>;<\/li>\n<li>The study of the legal feasibility of the implementation of a new <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-processing\/\" target=\"_blank\" rel=\"noopener noreferrer\">personal data processing<\/a>;<\/li>\n<li>The drafting and transmission of your codes of conduct to the <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/national-commission-for-information-technology-and-civil-liberties-cnil\/\" target=\"_blank\" rel=\"noopener noreferrer\">CNIL<\/a> for approval;<\/li>\n<li>Legal analysis of the compliance of your data processing, including data transfers outside the European Economic Area;<\/li>\n<li>Drafting and negotiating your data processing agreements (DPA);<\/li>\n<li>Drafting your Binding Corporate Rules (BCR) and Codes of Conduct;<\/li>\n<li>Training and awareness of your employees.<\/li>\n<\/ul>\n<p style=\"text-align: justify\">We are also the external <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-protection-officer-dpo\/\" target=\"_blank\" rel=\"noopener noreferrer\">Data Protection Officer<\/a> of many data <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/person-in-charge-of-the-treatment\/\" target=\"_blank\" rel=\"noopener noreferrer\">processors<\/a> and <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/subcontractor\/\" target=\"_blank\" rel=\"noopener noreferrer\">subcontractors<\/a>.<\/p>\n<h2>Other definitions<\/h2>\n<h3 style=\"text-align: justify\"><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/brand\/\">Trademark<\/a><\/h3>\n<p style=\"text-align: justify\"><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/brand\/\">A trademark is a distinctive sign allowing its owner (natural or legal person) to differentiate its products and services&#8230;<\/a><\/p>\n<h3 style=\"text-align: justify\"><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/gdrp\/\">GDPR<\/a><\/h3>\n<p style=\"text-align: justify\"><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/gdrp\/\">The GDPR refers to Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals&#8230;<\/a><\/p>\n<h3 style=\"text-align: justify\"><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/renowned-or-well-known-trademark\/\">Renowned or well-known trademark\u00a0<\/a><\/h3>\n<p style=\"text-align: justify\"><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/renowned-or-well-known-trademark\/\">The concepts of reputed and well-known trademarks have been defined by the jurisprudence and designate a trademark that is widely known by the public&#8230;<\/a><\/p>\n<h3 style=\"text-align: justify\"><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/wipo\/\">WIPO<\/a><\/h3>\n<p style=\"text-align: justify\"><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/wipo\/\">The World Intellectual Property Organization (WIPO) is an international institution of the United Nations, located in Geneva&#8230;<\/a><\/p>\n<p><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/\">See the lexicon<img decoding=\"async\" data-src=\"https:\/\/www.cabinetbouchara.com\/wp-content\/uploads\/2021\/12\/Fichier-24.svg\" width=\"25\" height=\"25\" alt=\"\" class=\"wp-image-1012 alignnone size-medium lazyload\" style=\"--smush-placeholder-width: 25px; --smush-placeholder-aspect-ratio: 25\/25;margin-left: 15px;margin-bottom: -6px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Lexicon &gt; Code of Conduct IT Lexicon Codes of conduct are voluntary accountability tools that set out specific rules for the protection of personal data for certain categories of data controllers and processors. They are intended to contribute to the proper implementation of the GDPR taking into account the specificity of the different sectors of &#8230; <a title=\"Code of Conduct\" class=\"read-more\" href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/code-of-conduct\/\" aria-label=\"Read more about Code of Conduct\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":9175,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-9104","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/pages\/9104","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/comments?post=9104"}],"version-history":[{"count":6,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/pages\/9104\/revisions"}],"predecessor-version":[{"id":19615,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/pages\/9104\/revisions\/19615"}],"up":[{"embeddable":true,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/pages\/9175"}],"wp:attachment":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/media?parent=9104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}