The French data protection authority (CNIL) rendered three major decisions impacting worldwide online service providers following online controls and investigations performed on the companies’ websites. These decisions highlight the obligations of data controllers when using cookies and other trackers, notably regarding the way the user’s consent shall be collected, and the level of information that has to be provided to users. Companies across sectors with interests in France should consider adapting their cookie compliance and monitor the specific French requirements. The CNIL stated it would grant a six month period to implement the new CNIL guidelines. Controllers would be required to comply with these new guidelines by the beginning of April 2021.
Please see our recent client alert for an in-depth explanation of CNIL’s position and recent actions.