The National Commission for Information Technology and Civil Liberties, known as the “CNIL”, is an independent administrative authority created in 1978 by the law “Informatique et Libert\u00e9s” of January 6, 1978 relating to data processing, files and freedoms, amended on numerous occasions in order to comply with the General Data Protection Regulation known as “RGPD” (Regulation (EU) 2016\/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data).<\/p>\n
T<\/span><\/p>\n he CNIL ensures in particular that personal data<\/a> on the Internet are well protected, and that the processing of these personal data<\/a> respects the individual freedoms and fundamental rights of the persons to whom the data belong.<\/p>\n The transmission of personal data is very often done on the Internet.<\/p>\n From filling out registration forms to simple clicks, organizations collect an enormous amount of information about users, which is why the Data Protection Act, particularly following the changes imposed by the RGPD<\/a>, has provided for several rights of the Internet user to ensure, among other things\u00a0:<\/p>\n The CNIL<\/a> has several missions\u00a0which derive from the Law ”\u00a0 Informatique et Libert\u00e9s\u00a0” and the RGPD, including:<\/em><\/p>\n It has the power to impose various sanctions\u00a0: warning, injunction, or financial penalty which can amount to up to 4% of the company’s turnover or 20 million euros.<\/p>\n For example, it has initiated a sanction procedure against the company ”\u00a0Cdiscount\u00a0“, for lack of security of online banking data and serious breaches.<\/p>\n The company ”\u00a0Cdiscount\u00a0” had indeed kept 4000 bank details in an unsecured way.<\/p>\n The CNIL thus issued a public warning on September 20, 2016 (Deliberation No. 2016-265) and gave formal notice on September 26, 2016 (Deliberation No. 2016-083) to the company Cdiscount.<\/p>\n The press group PRISMA MEDIA has also been sanctioned by the CNIL for non-compliance with the regulations on email prospecting (Deliberation n\u00b02015-155 of June 1, 2015).<\/p>\n The company did not systematically or sufficiently inform Internet users registered<\/em> on the group’s newsletter list<\/em> of the publications they would receive.<\/p>\n The CNIL has given the press group formal notice to cease its actions. Since they have continued, the CNIL has imposed a fine of 15000\u20ac on PRISMA MEDIA.<\/p>\n In November 2020, two of the Carrefour Group’s companies were also sanctioned for numerous violations of the RGPD including in particular a violation relating to the length of time personal data are kept (Deliberation of the restricted panel n\u00b0SAN-2020-008 and n\u00b0SAN-2020-009 of November 18, 2020 concerning the company CARREFOUR FRANCE).<\/p>\n To this end, the Carrefour companies have been fined 2,\u00a0250\u00a0,000 euros and 800\u00a0,000 euros respectively.<\/p>\n In this case, it was because of numerous complaints filed by consumers that the CNIL conducted examinations of the Carrefour companies to verify the proper handling of their customer’s personal data.<\/p>\n The CNIL did not need to issue an injunction because the Carrefour companies quickly complied.<\/p>\n As part of its anticipatory mission, the CNIL will verify that companies do not collect data without having made the necessary declarations, that the consent<\/a> of the persons whose data is collected is well collected for the transmission of these data to third parties, for sending advertisements by SMS, etc … (OPT IN\/OPT OUT).<\/p>\n Companies that collect user data must be very vigilant and\u00a0:<\/p>\n The National Commission for Information Technology and Civil Liberties, known as the “CNIL”, is an independent administrative authority created in 1978 by the law “Informatique et Libert\u00e9s” of January 6, 1978 relating to data processing, files and freedoms, amended on numerous occasions in order to comply with the General Data Protection Regulation known as “RGPD” … Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":8840,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[146,23],"tags":[],"class_list":["post-11486","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-rgpd-donnees-personnelles-en","category-rgpd-donnees-personnelles"],"_links":{"self":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/posts\/11486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/comments?post=11486"}],"version-history":[{"count":4,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/posts\/11486\/revisions"}],"predecessor-version":[{"id":16638,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/posts\/11486\/revisions\/16638"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/media\/8840"}],"wp:attachment":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/media?parent=11486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/categories?post=11486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/tags?post=11486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Rights protected<\/h2>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Missions of the CNIL<\/h2>\n
\n
\n
\n
General recommendations<\/h2>\n
\n