News & Analysis as of

Data Privacy France European Union

BCLP

EMEA - Data Privacy, Digital and AI Round Up - July 2025

BCLP on

As we pass the mid-point of 2025, it’s a good time to review the important developments we have seen in the first 6 months of this year, particularly reforms to the UK’s data protection laws, the EU’s pathway to...more

Baker Botts L.L.P.

CNIL Published Recommendations on Application of GDPR to Artificial Intelligence

Baker Botts L.L.P. on

France's Data Protection Authority (the “Commission Nationale de l'Informatique et des Libertés” or “CNIL”) has issued comprehensive recommendations intended to assist businesses that are develop artificial intelligence...more

Goodwin

France and the new EU regulation on political advertising: the CNIL updates its doctrine ahead of the 2025 implementation

Goodwin on

Online political advertising has become central to modern electoral campaigns. However, the growing lack of transparency, particularly regarding funding, targeting, and data processing practices, raises serious concerns about...more

Skadden, Arps, Slate, Meagher & Flom LLP

CNIL Clarifies GDPR Basis for AI Training – But It’s Just One Part of the Compliance Picture

Key Points - - The French CNIL’s recent guidance regarding the application of legitimate interest as a legal basis in AI training is welcome, but several other AI regulatory issues remain unresolved. - Issues such as...more

Hogan Lovells

Submitting tracking pixels in emails to consent: the CNIL launches a public consultation

Hogan Lovells on

On 12 June 2025, the French data protection authority (CNIL) launched a public consultation on a draft recommendation regarding the use of tracking pixels in emails. This recommendation roughly assimilates pixels and any...more

EDRM - Electronic Discovery Reference Model

French Competition Authority Fines Apple €150 Million Over ATT Framework and Market Dominance

ComplexDiscovery Editor’s Note: Apple’s aggressive stance on privacy has earned both praise and penalty, most recently, a €150 million fine from the French Competition Authority. This significant enforcement action challenges...more

A&O Shearman

CNIL publishes Data Transfer Impact Assessment guide

A&O Shearman on

On January 31, 2025, the French supervisory authority (CNIL) published the final version of its guide on transfer impact assessments (TIA). A TIA must be undertaken by organisations relying on one of the ‘appropriate...more

Goodwin

AI Action Summit 2025: Can the French AI Sector Still Thrive While Being Limited by EU Regulations?

Goodwin on

On 9 February 2025, prior to the commencement of the Artificial Intelligence (AI) Action Summit in Paris, President Emmanuel Macron in an interview on French national TV announced a substantial €109 billion investment in AI...more

BCLP

CNIL Strategic Plan 2025

BCLP on

The CNIL has published its strategic plan for the period of 2025-2028. This is typical of the CNIL, who regularly inform its stakeholders of its priorities....more

Pillsbury - Consumer Protection Dispatch

GDPR Enforcement: Lessons from Recent Data Privacy Penalties

Recent decisions by the French data protection authority (CNIL) have highlighted the importance of GDPR compliance, particularly in the areas of data retention, consent for processing sensitive personal data, and marketing...more

Wilson Sonsini Goodrich & Rosati

New Enforcement Powers for the French Data Protection Authority (CNIL)

On May 21, 2024, France adopted law No. 2024-449 to secure and regulate the digital space. This law grants new enforcement powers and authority to the French Data Protection Authority (CNIL), including to seize documents,...more

White & Case LLP

AI Legal News Summer Roundup: Edition 3

White & Case LLP on

Welcome to the third edition of our AI Legal News Summer Roundup! After five class actions were filed between June 28 and July 11 (as reported on in our first edition of this series), on July 21, another class action lawsuit...more

Rothwell, Figg, Ernst & Manbeck, P.C.

France Fines Facebook and Google For Violating the EU Cookie Law: You Need to Make it As Easy to Refuse as a Cookie, as it is to...

France recently fined Alphabet Inc’s Google $169 million and Meta Platform’s Facebook $67 million on grounds that the companies violated the EU e-Privacy directive (aka the EU “Cookie Law”) by requiring too many “clicks” for...more

Pillsbury Winthrop Shaw Pittman LLP

Record €210 Million in Fines for Breach of Cookies and Website Tracking Rules—Note e-Privacy Directive, Not Just GDPR

France’s data protection regulator (the CNIL) said this week it has fined Google and Facebook a combined €210 million for breaches of laws on cookies use and tracking of user online activity. These fines were not under the...more

Ankura

Does Your Organization Maintain an Employee Facing Privacy Notice?

Ankura on

On Tuesday, June 15, 2021, a French court ordered IKEA to pay 1 million euros ($1.2 million) for spying on its employees in France. The allegations included reviewing employees' bank account records, using fake employees to...more

Hogan Lovells

CNIL Publishes FAQ Clarifying Cookie Use

Hogan Lovells on

The French Data Protection Authority (CNIL) published an FAQ on March 18, 2021 to further explain its earlier guidelines and “recommendation” on cookies and other tracking technologies, which were published on September 17,...more

Robins Kaplan LLP

Financial Daily Dose 12.11.2020 | Top Story: Banner Airbnb Public Trading Debut Has Some Worrying About Tech Bubble

Robins Kaplan LLP on

Because too much of a good thing is always trouble (especially on Wall Street), market watchers are warning of a new tech bubble after Airbnb’s monster IPO on Thursday. The home-sharing app’s shares rose more than 112% to...more

Fox Rothschild LLP

Valuable Data Privacy Lessons In CNIL’s Enforcement Action Against Carrefour France

Fox Rothschild LLP on

In addition to the not-insignificant €2.25 million fine, CNIL's enforcement action against Carrefour France raises some universal points for companies handling data, both in the EU and in the U.S. Big Picture Takeaways:...more

Hogan Lovells

Facial Recognition Challenged by French Administrative Court

Hogan Lovells on

In a decision (French only) dated 27 February 2020, the French Administrative Court of Marseille invalidated the deliberation of the Provence-Alpes-Côte d’Azur Regional Council which allowed to set up...more

Morgan Lewis

COVID-19 in France: Personal Data Protection in the Workplace

Morgan Lewis on

As prevention measures against the coronavirus (COVID-19) pandemic bump into the principles and guidelines of the EU General Data Protection Regulations (GDPR), the French Data Protection Authority has reinforced essential...more

Skadden, Arps, Slate, Meagher & Flom LLP

Cross-Border Investigations Update - January 2019

This issue of Skadden’s semiannual Cross-Border Investigations Update takes a close look at recent cases, regulatory activity and other key developments, including DOJ guidance on the use of corporate monitors in criminal...more

Jones Day

Global Privacy & Cybersecurity Update Vol. 14

Jones Day on

New York Attorney General Announces Record Number of Data Breach Notices in 2016 - On March 21, 2017, the New York Attorney General's Office announced that it received 1,300 reported data breaches in 2016—a 60 percent...more

Morgan Lewis

French Data Protection Authority Provides Guidance on Preparing for GDPR

Morgan Lewis on

Companies have one year to comply with the new EU regulation on data privacy, and it is estimated that only 10% of companies having operations in France are currently ready. The General Data Protection Regulation...more

Proskauer on Privacy

New Privacy Developments in France

Proskauer on Privacy on

DataGuidance spoke with Cécile Martin, Special International Counsel at Proskauer Rose LLP, at the International Association of Privacy Professionals’ Conference in Brussels in November 2016. Ce´cile discussed the passing of...more

Seyfarth Shaw LLP

No Safe Harbour? Immediate Implications for Employers

Seyfarth Shaw LLP on

A landmark decision of the European Court of Justice (ECJ) has held that companies may no longer rely on “Safe Harbour” to justify transferring personal data from the European Union to the US, because the US Government has a...more

27 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide