From March to October 2012, the Article 29 Working Party investigated into Google’s privacy policy with the aim of checking whether it met the requirements of the European Data Protection Directive (95/46/CE). In view of the findings of this analysis which was published on 26 October 2012, the EU Data protection authorities asked Google to comply with their recommendations within 4 months.
In October 2012, the Article 29 Working Party highlighted deficiencies in Google's privacy policy and gave some recommendations to Google on how to address these. To date, considering that Google has not taken any precise measures in response to those recommendations, the requirements of Directive 95/46/EC are still not complied with.
At the end of January 2013, representatives of the Article 29 Working Party (hereinafter WP29), and of the Asia-Pacific Economic Cooperation (hereinafter APEC), have met for the first time in Jakarta in order to develop a tool that would allow to govern data flows between Europe and the Asia-Pacific area.
CNIL welcomes the draft report tabled by Mr Albrecht, the rapporteur for the European Parliament's Committee on Civil Liberties, Justice and Home Affairs. This report, which was published on January 8, 2013, largely meets the concerns expressed by CNIL about the proposed EU regulation on data protection.
Following the publication in 2011 of the guide for SMEs “Security of personal data”, the CNIL publishes an English translation of its two "advanced" security and privacy risk management guides. They consist of a privacy risk management methodology and a catalogue of measures helping organizations to choose the appropriate controls to protect their personal data processing operations.