{"id":5333,"date":"2023-04-18T12:57:04","date_gmt":"2023-04-18T12:57:04","guid":{"rendered":"https:\/\/exciting-panini.13-37-234-21.plesk.page\/?p=5333"},"modified":"2024-07-03T12:03:43","modified_gmt":"2024-07-03T12:03:43","slug":"le-respect-du-rgpd-en-temps-de-crise","status":"publish","type":"post","link":"https:\/\/viqtor.eu\/en\/le-respect-du-rgpd-en-temps-de-crise\/","title":{"rendered":"GDPR compliance in times of crisis."},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"Le\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

GDPR compliance in times of crisis.<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\n

GDPR Compliance in Times of Crisis<\/strong>. What are the priorities?<\/strong> supervisory authorities, and what are the controls<\/strong> what can businesses expect in the current health and economic context?<\/p>\n\n

Although the CNIL clearly focuses its activities on the processing of health data, it has not abandoned its supervisory prerogatives in the broad sense.<\/p>\n\n

First of all, there are numerous awareness-raising actions aimed at employers (see the September legal monitoring document), teachers and researchers faced with increased use of information technologies and artificial intelligence.<\/p>\n\n

The CNIL also focused its investigations on the epidemic monitoring systems and the StopCovid application.\u00a0<\/p>\n\n

Its head of the inspection department indicates in a recent publication that the Small businesses, SMEs and start-ups are therefore less subject to inspection.<\/strong><\/p>\n\n

The investigations have not been abandoned, however, especially since those responsible have had time to take the necessary compliance measures since the GDPR came into force.<\/p>\n\n

These checks are carried out more on the basis of questionnaires and interviews, and unannounced checks are less frequent due to the crisis.<\/p>\n\n

On-site checks therefore give rise to a 48-hour warning.<\/p>\n\n

Similar adaptations are taking place in many European countries, as evidenced by the recent Council of Europe report on the subject.<\/p>\n\n

If flexibility has been observed concerning, for example, an exceeding of the legal deadline for responding to the right of access of individuals to their data, tolerance is significantly lower or non-existent when data processing constitutes the core business of the controlled body<\/strong>.<\/p>\n\n

In addition to the adaptation of control methods in times of crisis, there has been a change in the form of recourse available to individuals in the event of a violation of their rights.<\/p>\n\n

The GDPR now allows complainants to be represented by public interest bodies, many associations have seen their activities develop since 2018,<\/strong> such as \u201cLa Quadrature du Net\u201d in France\u201d or \u201cNone of Your Business\u201d in Austria.<\/p>\n\n

We have seen them at work recently in legal actions concerning drone surveillance over Paris during the lockdown and in the context of demonstrations, and concerning the issue of data transfers to the United States (see the Schrems II ruling, discussed in our August legal watch).<\/p>\n\n

These structures, which are increasingly better organized and financed, give new visibility to the problem of data protection.<\/p>\n\n

Given the possible damages and sanctions provided for in the Regulation, they highlight the issues, not only from an ethical point of view, but also from a financial and strategic point of view.<\/p>\n\n

These developments are the focus of an upcoming webinar organized on November 18 by the Privacy Platform of MEP Sophie In't Veld.<\/p>\n\n

And also<\/strong><\/p>\n\n

France:<\/u><\/strong><\/p>\n\n