P. Latombe, who is not only a Member of the French Parliament, but also seated at the French Data Protection Authority (CNIL)'s Commission, lodged a request for annulment of the DPF on 6 September 2023 before the Court of...more
9/12/2023
/ Annulment ,
CNIL ,
Court of Justice of the European Union (CJEU) ,
Data Privacy ,
Data Protection ,
France ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Popular ,
Schrems I & Schrems II ,
Treaty on the Functioning of the European Union (TFEU)
A decision issued on May 4, 2023 by the European Court of Justice (the "ECJ") provides clarifications that are particularly welcome when answering requests for access from data subjects. In this decision, the ECJ, in response...more
A few days after the European Parliament adoption of a compromise position on the Artificial Intelligence Act (the “AI Act”), the French Data Protection Authority (the “CNIL”) published, on 16 May 2023, a detailed 4-step...more
Les derniers mois ont vu une activité bouillonnante de la CNIL avec l’adoption de nombreuses délibérations. Nous avons analysé ces décisions pour comprendre les principales orientations prises par l’autorité française....more
The French Data Protection Authority (CNIL) has released a Q&A providing its position, possible alternative solutions as well as guidance on using a compliant audience measurement solution. It follows a set of formal notices...more
A new French template agreement for clinical trials (Convention Unique) was published on April 9, 2022. This new version was much awaited since the initial version, dated back to 2016, was missing some key provisions...more
The healthcare sector is a current focus of the French data protection authority (CNIL) which just published two draft standards regarding processing of personal data in the context of Early Access and Compassionate Access....more
Le 15 février 2022, la CNIL a publié deux projets de référentiels. Ces référentiels étaient très attendus car l’Autorisation Unique 041 sur les traitements de données personnelles dans le cadre des Autorisations Temporaires...more
The General Data Protection Regulation 2016/679 (GDPR) provides means to enforce provisions related to personal data processing by you as a data controller or data processor. It introduces collective actions everywhere in...more
In recent years, AI has become a buzzword in life sciences and health care as the technology has developed to create applications from drug discovery to diagnostics to therapeutics. Most recently, AI has been used in the...more
On October 14, 2020, the French Administrative Supreme Court (Conseil d’Etat) published its decision in a lawsuit requesting that the French health data platform (Health Data Hub) be suspended for breach of the GDPR in light...more
10/22/2020
/ CNIL ,
Court of Justice of the European Union (CJEU) ,
Data Transfers ,
Enforcement Actions ,
EU ,
France ,
French Supreme Court ,
General Data Protection Regulation (GDPR) ,
Microsoft ,
Online Platforms ,
Personal Data ,
Popular ,
Regulatory Violations ,
Schrems I & Schrems II
The French Data Protection Authority (CNIL) has recently released new guidelines (French only) regarding human resources processing operations. ...more
Clinical trials have become increasingly important for pharmaceutical companies and medical device manufacturers, which are focused on collecting as much data as possible on products and devices and their adverse effects. All...more
1/17/2020
/ Best Practices ,
Big Data ,
Clinical Trials ,
Data Collection ,
Data Management ,
Data Processing Rules ,
EU ,
General Data Protection Regulation (GDPR) ,
Health Technology ,
Information Management ,
Information Technology ,
Life Sciences ,
Medical Devices ,
Medical Research ,
Patient Privacy Rights ,
Personal Data ,
Pharmaceutical Industry ,
R&D ,
Research and Development
The General Data Protection Regulation 2016/679 (GDPR) provides means to enforce provisions related to personal data processing by you as a data controller or data processor. It introduces collective actions everywhere in...more
11/22/2019
/ Burden of Proof ,
Class Action ,
Cybersecurity ,
Data Breach ,
Data Processors ,
Data Protection ,
EU ,
EU Data Protection Laws ,
European Commission ,
Evidence ,
Forum Shopping ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Litigation Strategies ,
Personal Data ,
Personally Identifiable Information ,
Private Right of Action ,
Risk Management ,
Russia
Whilst political uncertainty may have businesses’ attention fixed, the Hogan Lovells Global Survey on Digital Regulation: ‘A Turning Point for Tech’ suggests that tech companies should be looking elsewhere. During yesterday’s...more
10/31/2019
/ 5G Network ,
Big Tech ,
Business Model ,
Competition ,
Copyright ,
Corporate Taxes ,
Cybersecurity ,
Data Protection ,
Digital Platforms ,
Enforcement Programs ,
EU ,
Freedom of Expression ,
General Data Protection Regulation (GDPR) ,
Innovative Technology ,
Privacy Concerns ,
Regulatory Agenda ,
Regulatory Oversight ,
Regulatory Standards ,
United Arab Emirates (UAE)
On 19 July the French Data Protection Authority (the “CNIL”) published new guidelines on cookies and trackers. These replace the existing Recommendation No. 2013-378 of 5 December 2013, are intended to be in line with...more
7/22/2019
/ CNIL ,
Cookies ,
Data Protection ,
e-Privacy Directive ,
EU ,
France ,
General Data Protection Regulation (GDPR) ,
Grace Period ,
Information Technology ,
Internet ,
New Guidance ,
Opt-In ,
Prior Express Consent ,
Regulatory Oversight ,
Regulatory Requirements ,
Web Tracking ,
Websites
Clinical trials in the EU include the collection of sensitive health data from patients. Trial sponsors are obliged to reconcile their respect of regulations governing data protection with regulations governing the conduct of...more
4/25/2019
/ Clinical Trials ,
Data Collection ,
Data Processors ,
Data Protection ,
Electronic Medical Records ,
EU ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
Informed Consent ,
Personal Data ,
Pharmaceutical Industry ,
Regulatory Standards ,
Scientific Research
Blockchain and artificial intelligence (AI) are opening new doors towards improving data efficiency in the life sciences industry. But these technologies may also impose unique limitations and curtail the traditional role of...more
10/24/2018
/ Artificial Intelligence ,
Blockchain ,
Clinical Trials ,
Data Controller ,
Data Management ,
Data Privacy ,
Distributed Ledger Technology (DLT) ,
General Data Protection Regulation (GDPR) ,
Information Technology ,
Internal Data Controls ,
Life Sciences ,
Personal Data ,
Pharmaceutical Industry ,
Popular
The French Data Protection Authority (the CNIL) published its assessment of the first four months of GDPR and several guidelines, including one on how to make a GDPR compliant blockchain. ...more
10/11/2018
/ Big Data ,
Biometric Information ,
Blockchain ,
CCTV ,
CNIL ,
Cybersecurity ,
Data Protection ,
Data Protection Authority ,
Data Protection Impact Assessments (DPIAs) ,
Distributed Ledger Technology (DLT) ,
EU ,
France ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Data ,
Popular ,
Right to Erasure
The General Data Protection Regulation (GDPR) will enter into force on 25 May 2018. In light of the urgency to adapt Law no. 78-17 dated 6 January 1978 to the new European Union law, the French Government has initiated an...more