The CNIL: duties, inspections and penalties
The French data protection authority: its duties, its inspections, the procedure leading to a penalty, the scale of fines and the European one-stop shop.
- 24 cards
- 5 topics
- Free
The outline, topic by topic
Each topic is weighted the way the exam weighs it.
- Concepts
- Questions
- Sort and link
- The numbers
- Scenarios
A few cards from the deck
CNIL: what is it?
Show the answer
The Commission nationale de l'informatique et des libertés: the independent French administrative authority in charge of overseeing personal data protection.
Created by the act of 6 January 1978, it informs, supports, inspects and sanctions. It takes no instructions from the government.
Which penalty can the CNIL not impose?
- Award damages to the person who complained
- A reprimand, made public on its website
- An order to comply, with a periodic penalty payment
- An administrative fine of several million euros
Show the answer
Award damages to the person who complained
The CNIL sanctions in the public interest. To be compensated for harm, the person turns to a court.
The CNIL does not only sanction: it must also … the public, support professionals, anticipate new uses and ….
Show the answer
The CNIL does not only sanction: it must also inform the public, support professionals, anticipate new uses and inspect.
Sanctioning is only a part of its work: it publishes guides, answers professionals and helps them comply before any inspection.
French Data Protection Act: what is it?
Show the answer
The French act of 6 January 1978 on information technology, files and freedoms, which establishes the CNIL and supplements the GDPR.
It predates the GDPR and was amended to fit it: it governs the CNIL's procedure and a few margins the regulation leaves to Member States.