Enforcement is coming – says CNIL, the French Data Protection Authority.
CNIL published its enforcement priorities for 2019. CNIL will no longer refrain from enforcing new obligations imposed by GDPR, but it will continue to exercise judgment in the choice of corrective measures and will not resort to fines every time. CNIL’s enforcement program will focus on three themes:
- Data subject rights (access, erasure, portability) Complaints with respect to data subject rights constituted 73 percent of all claims filed with the CNIL in 2018.
- Data processing of children’s information
- The relationship between Data Controllers and Data Processors