Investigation powers of the CNIL
The CNIL shall conduct investigations following the lodging of a complaint, allegations of infringements brought to its knowledge or because it decides to address a specific issue. If an infringement of the regulation is established, the Chair of the CNIL may render an order to comply or the CNIL’s restricted committee can take different measures or sanctions.
What are the steps of the CNIL’s law enforcement process?
The CNIL has a complete law enforcement toolkit enabling it to collect reports of infringements through different channels in order to carry out investigations, which can lead to issuing sanctions or rendering orders to comply.
How does the CNIL conduct its investigations?
The CNIL has the possibility to investigate any controller or processor of personal data, including private companies, non-profit organizations or public bodies.
The sanctions procedure
Following investigations, complaints or in case of infringements of the GDPR or of the French Data Protection Act, the CNIL may sanction controllers or processors.
Les articles associés les plus consultés
14 March 2022
Impact of the health crisis, new rules on cookies, cybersecurity and digital sovereignty: in its ...
19 May 2021
