Cécile Auvieux (FR)

Subscribe to all posts by Cécile Auvieux (FR)

How to process employees’ health data in France after lockdown: dos and don’ts for employers

By Cécile Auvieux (FR) and Nadège Martin (FR) on May 4, 2020 Posted in Compliance and risk management

A few weeks ago, we provided you with a summary of the rights and obligations of employers with regard to the personal data of their employees during lockdown. On 11 May, many employees will return to their workplaces. Below you will find answers to the main questions you may have ahead as the end of … Continue reading

StopCovid: the French contact-tracing app

By Cécile Auvieux (FR) and Nadège Martin (FR) on May 4, 2020 Posted in Compliance and risk management

Following the example of many European countries, the French government plans to introduce a contact tracing app, known as “StopCovid”. The app is designed to be used by people once they leave the confinement of their homes with the aim of preventing the spread of COVID-19. StopCovid is being developed within the INRIA, the French … Continue reading

The CNIL releases draft practical guidance on cookies consent

By Nadège Martin (FR) and Cécile Auvieux (FR) on February 4, 2020 Posted in Compliance and risk management

The CNIL has published draft recommendations on how to obtain consent when placing cookies. This is following the publication of its revised “Guidelines on the implementation of cookies or similar tracking technologies” which was published in July 2019 (see our article here). The objective of the recommendations is to provide stakeholders with practical guidance and … Continue reading

French court issues decision on legality of Privacy Rules and Terms of Use under data protection and consumer law

By Cécile Auvieux (FR) and Nadège Martin (FR) on April 12, 2019 Posted in Dispute resolution and litigation, Enforcement

Five years after the commencement of legal proceedings against Google by leading French consumer association UFC Que Choisir, the Paris “Tribunal de Grande Instance” (TGI), in a decision dated 12 February 2019, issued its ruling on the legality of the Google+ Terms of Use and Privacy Rules, both with respect to consumer law and personal … Continue reading

First multi-million Euro GDPR fine: Google LLC fined €50 million under GDPR for transparency and consent infringements in relation to use of personal data for personalized ads

By Marcus Evans (UK), Lara White (UK) and Cécile Auvieux (FR) on January 25, 2019 Posted in Compliance and risk management, Cybersecurity, Enforcement, Regulatory response

On January 21,2019 the French data protection authority (the CNIL) imposed a major fine on the U.S. Google entity, Google LLC. It follows two complaints filed as soon as the GDPR came into force by two consumer rights associations, None of Your Business and La Quadrature du Net. We focus here on four key aspects … Continue reading