GDPR
Transfer Impact Assessment (TIA): the CNIL publishes the final version of its guide
In order to assist organisations transferring personal data outside of the European Economic Area (EEA), the CNIL publishes the final version of its guide on Transfer Impact Assessments. It follows a…
09 July 2025
Transfer Impact Assessment (TIA): the CNIL publishes the final version of its guide
In order to assist organisations transferring personal data outside of the European Economic Area (EEA), the CNIL publishes the final version of its guide on Transfer Impact Assessments. It follows a…
09 July 2025
[Replay] Academic event: “GDPR: what economic impact?” - 20 May 2025
More than 5 years after the entry into force of the GDPR, the CNIL and the French Treasury are organising, on 20 May 2025, an international academic event on the assessment of its economic impact…
09 July 2025
[Replay] Academic event: “GDPR: what economic impact?” - 20 May 2025
More than 5 years after the entry into force of the GDPR, the CNIL and the French Treasury are organising, on 20 May 2025, an international academic event on the assessment of its economic impact…
09 July 2025
Conclusions of the Lasserre mission on data protection and competition: deepening the dialogue
The Autorité de la concurrence and the CNIL share the objective of understanding the links between data protection and competition, and fostering convergences between them. The CNIL is publishing the…
18 March 2025
Conclusions of the Lasserre mission on data protection and competition: deepening the dialogue
The Autorité de la concurrence and the CNIL share the objective of understanding the links between data protection and competition, and fostering convergences between them. The CNIL is publishing the…
18 March 2025
[Closed] GDPR Certification for Data Processors: the CNIL launches consultation on a draft evaluation scheme
Certification allows professionals to communicate on the level of data protection of their products, services, processes, or information systems. To develop a set of criteria tailored to data…
30 January 2025
[Closed] GDPR Certification for Data Processors: the CNIL launches consultation on a draft evaluation scheme
Certification allows professionals to communicate on the level of data protection of their products, services, processes, or information systems. To develop a set of criteria tailored to data…
30 January 2025
Data scraping: KASPR fined €240,000
On 5 December 2024, the CNIL imposed a fine of 240,000 euros on KASPR, in particular because it collected contact details of users on LinkedIn, even if they previously masked them.
19 December 2024
Data scraping: KASPR fined €240,000
On 5 December 2024, the CNIL imposed a fine of 240,000 euros on KASPR, in particular because it collected contact details of users on LinkedIn, even if they previously masked them.
19 December 2024
CNIL's Q&A on the Use of Generative AI Systems
Many organisations are considering deploying or using generative AI systems and are seeking guidance on the necessary measures to put in place. This Frequently Asked Questions (FAQ) offers initial…
18 July 2024
CNIL's Q&A on the Use of Generative AI Systems
Many organisations are considering deploying or using generative AI systems and are seeking guidance on the necessary measures to put in place. This Frequently Asked Questions (FAQ) offers initial…
18 July 2024