Legal Watch No. 92 – February 2026. The subcontractor: between weak link and strategic player. On February 9, the CNIL (French Data Protection Authority) presented its 2025 report on its sanctions and corrective measures: cookies, employee monitoring, and data security are the main subjects of the sanctions imposed in 2025, including the cumulative amount of fines […]

Legal Watch No. 91 – January 2026. Data security in light of the “France Travail” sanction. The sanction adopted on January 29th by the CNIL against France Travail is exemplary in that it reminds us of the essential elements of an effective security policy. In a context of […]

Legal Watch No. 90 – December 2025. Data, AI, cybersecurity: a who's who of the directives and regulations to follow in 2026. Many regulations adopted in recent years will now fully enter into force or reach decisive stages of their implementation. At the same time, new initiatives from the European Commission, particularly the Digital […]

Legal Watch No. 89 – November 2025. Simplification of European digital rules: what can we expect? How far will the European Commission go in its drive to simplify the European legislative framework? Since the publication of the Draghi report in September 2024, and in a turbulent international economic context, the European executive has been multiplying measures in […]

Legal Watch No. 86 – August 2025. Cookies and Internet User Targeting: Current Situation. On September 1st, the CNIL (French Data Protection Authority) fined Google €325 million and the Irish subsidiary of the Shein group €150 million, two amounts that will significantly increase the average of the penalties […]

Legal Watch No. 88 – October 2025. Video surveillance, the main target of CNIL sanctions. This October, the CNIL provided an update on its simplified sanction procedure. The 16 sanctions issued since last May have included fines totaling €108,000, in addition to the €104,000 […]

Legal Watch No. 87 – September 2025. Five years after Brexit: an overview in the United Kingdom. Since the United Kingdom's departure from the European Union, British data protection law has been slowly but surely diverging from the European regulatory framework. While there is a trend on both sides of the Channel towards […]

Legal Watch No. 85 – July 2025. GDPR Compliance: What are the economic benefits? Studies conducted by the Association for Adult Vocational Training (AFPA) and the CNIL (French Data Protection Authority) now confirm the economic benefits linked to the presence of a Data Protection Officer (DPO) within companies. The statistical survey conducted by […]

Legal Watch No. 84 – June 2025. Augmented Cameras: The CNIL Sets New Guidelines. On July 11, the CNIL (French Data Protection Authority) ruled that the use of "augmented" cameras to estimate the age of customers in tobacco shops in order to control the sale of products prohibited to minors is neither necessary nor proportionate. These […]

Legal Watch No. 83 – May 2025. European data sovereignty: wishful thinking? Microsoft's blocking of the email account of the Chief Prosecutor of the International Criminal Court (ICC), Karim Khan, raises the crucial question of the digital sovereignty of France and Europe in general in the face of […]