menu

Compliance & Regulatory

27 November 2020 | Laure Marolleau

Personal Data: Carrefour fined in excess of 3 million euros

Having received several complaints against the Carrefour group, the French Data Protection Authority carried out inspections between May and July 2019 at Carrefour France (mass retail sector) and Carrefour Banque (banking sector).

During these inspections, it found a number of breaches in the processing of customer and potential user data, and consequently imposed a 2,250,000 euros fine on Carrefour France and a 800,000 euros fine on Carrefour Banque. The breaches mainly concerned the information provided to individuals and the respect for the rights of such individuals.

Read more
13 August 2020 | Laure Marolleau

The French Data Protection Authority imposes a 250,000 euros fine on Spartoo

The Commission Nationale de l’Informatique et des Libertés (French Data Protection authority or “CNIL”) has just imposed a penalty of 250,000 euros on Spartoo, a company specializing in the online sale of shoes. The CNIL noted several breaches of the GDPR, the general regulation on data protection which came into force on May 25, 2018.

This is the first penalty imposed by the CNIL as “lead supervisory authority” in cooperation with other EU supervisory authorities as the consumers (and their personal data) of Spartoo which is based in Grenoble extend beyond French borders.

Read more
16 June 2020 | Soulier Avocats

International Corruption: Issuance of a circular on France’s criminal policy

On June 2, 2020, the French Minister of Justice sent to all competent public prosecutors a circular for immediate application specifying France’s “criminal justice policy in the fight against international corruption”.

This circular sets out guidelines for legal action at all stages of criminal proceedings, from the information gathering stage to the determination of the mode of prosecution.

Read more
5 May 2020 | Soulier Avocats

Covid-19 and Amazon: Employers must involve staff representatives in the assessment of the risks and the preparation of the resulting health related measures

On April 24, 2020, the Versailles Court of Appeals handed down an insightful decision concerning the implementation of employee protection measures by employers in the current health context and lockdown imposed by the Government on March 16.

Ruling on an appeal lodged by the American giant Amazon against the order issued by the Nanterre Judicial Court on April 14, 2020, the Versailles Court of Appeals upheld the order in that it provided for a mandatory obligation to implement a comprehensive national health and safety prevention plan for employees, with prior consultation with staff representatives. This decision is in line with the need to reconcile the necessity to maintain a business activity with the preservation of employees’ health.

Read more
28 February 2020 | Laure Marolleau

GDPR and Linky meters: The French Data Protection Authority puts EDF and Engie on notice

The French Data Protection Authority has served a formal notice on EDF and Engie for non-compliance with some of the requirements for obtaining consent in relation to the collection of consumption data from Linky smart meters, as well as for an excessive retention period of such consumption data.

Both companies have three months to comply.

Read more

All posts ared displayed

No more page

Next page

Load more