Listes

La Commission nationale de l'informatique et des libertés s’est réunie le jeudi 2 juillet 2020 à 9 h 30 avec l’ordre du jour suivant :

La cinquième édition du prix CNIL-Inria « protection de la vie privée » commence le 1er juillet 2020. Ce prix européen a vocation à récompenser un article scientifique sur la…

Dans sa décision du 19 juin 2020, le Conseil d’État a validé pour l’essentiel les lignes directrices relatives aux cookies et aux traceurs adoptées par la CNIL le 4 juillet 2019. Ces lignes…

La Commission nationale de l'informatique et des libertés s’est réunie le jeudi 18 juin 2020 à 9 h 30 avec l’ordre du jour suivant :

Plusieurs membres de la direction de la CNIL ont reçu ce jour des représentants du collectif « Gilets Jaunes Constituants » pour aborder la question de la protection des données dans le…

Dans le cadre de l’épidémie de COVID-19, et plus particulièrement dans la période actuelle de déconfinement, le déploiement de nouvelles caméras dites « intelligentes » et de caméras…

Whether you work alone, are part of a team developing a project, manage a development team, or are a service provider carrying out developments for third parties, it is essential to ensure that user…

Audience measurement tools are used to obtain information about the navigation of visitors on a website or mobile application. In particular, they make it possible to understand how users arrive at a…

Testing your product allows you to check its correct operation, to ensure a good user experience and to find and prevent defects before it goes into production. Testing your product also reduces the…

Any website, application or server must incorporate basic state-of-the-art security rules, not only on network communications but also on authentication and infrastructure.

The persons whose data you process have rights on his or her data: right of access, to rectification, to object, to erasure, to data portability and to restriction of processing. You must give them…

The way to manage profiles of your collaborators and your end-users must be thought out upstream of your developments. It consists in defining different access and authorization profiles so that each…

The security of production, development and continuous integration servers as well as developer workstations must be a priority because they centralize access to a large amount of data.

La Commission nationale de l'informatique et des libertés s’est réunie le jeudi 11 juin 2020 à 9 h 30 avec l’ordre du jour suivant :

Processing of personal data must be based on one of the “legal basis” mentioned in Article 6 of the GDPR. The legal basis of a processing operation is in a way the justification of the existence of…

It is essential to adopt good code-writing techniques as soon as possible. Code readability reduce the effort of maintenance and bug fixes over time for you and your (possibly future) collaborators.

When designing the architecture of your application, you must identify personal data that will be collected and define a path and life cycle for each of them. The choice of supporting assets (local…

Understanding the notions of “personal data”, “purpose” and “processing” is essential for the development of law enforcement and user data. In particular, be careful not to confuse “anonymisation”…

The transparency principle of the GDPR requires that any information or communication relating to the processing of personal data should be concise, transparent, comprehensible and easily accessible…

You shall only collect personal data that is adequate, relevant and necessary in relation to the purposes for which they are processed, as defined at the time of collection.

The principles of personal data protection must be integrated into IT developments from the design phase onwards in order to protect the privacy of the people whose data you are going to process, to…

Personal data cannot be kept for an indefinite period of time: this must be defined according to the purposes of the processing. Once this purpose has been achieved, the data should be archived,…

Do you use libraries, SDKs, or other software components written by third parties? Here are a few tips on how to integrate these tools while keeping control of your developments.