Privacy & Information Security Law Blog

On June 16, 2016, the French Data Protection Authority (“CNIL”) launched a public consultation on the four priority topics identified by the Article 29 Working Party (“Working Party”) in its February 2016 action plan for the implementation of the EU General Data Protection Regulation (“GDPR”).

One of these priorities is to issue guidance to help data controllers and data processors prepare for the GDPR. Four topics have been selected:

• the new right to data portability;
• data protection impact assessments;
• certification; and
• the data protection officer.

The CNIL’s purpose in launching the consultation is to collect concrete questions, potential difficulties in interpreting the GDPR and examples of best practices in regards to interpreting the GDPR. The responses will inform the discussion of the Working Party who will issue guidelines or develop processes on these topics. The CNIL also encourages all relevant stakeholders to propose other topics on which the Working Party could provide guidance. Stakeholders may respond to the consultation through the CNIL’s website. The consultation will be open through July 15, 2016. The CNIL will publish a summary of the contributions, and will launch another consultation on new topics in a few months.