CNIL publishes agenda for 2024
In 2024, the French National Commission on Informatics and Liberty (CNIL) has set its sights on several high-priority areas to ensure the protection of personal data. Among these, the handling of minors’ data has become a critical concern as young individuals increasingly engage with online platforms. The CNIL’s oversight will include verifying age verification processes on popular sites, assessing security measures, and ensuring adherence to data minimization principles.
With France hosting the Olympic and Paralympic Games, the CNIL will pollize the vast data collection expected from the millions of spectators and athletes. This includes overseeing the use of QR codes for secure area access, examining access authorizations, and evaluating the deployment of augmented reality cameras. In addition, the CNIL will assess the commercial use of data collected through ticketing services, focusing on the transparency of information provided, data recipients, and security measures.
The CNIL is also turning its attention to loyalty programs and the recent shift towards digital receipts, a change spurred by legislation aimed at reducing waste. Given that loyalty programs can accumulate extensive consumer data, the CNIL will ensure that consumers are adequately informed and that their consent is obtained before any data is used for marketing or targeted advertising.
Finally, the CNIL, in collaboration with the European Data Protection Board (EDPB), will enforce the right of access under the GDPR. This coordinated effort will check how access requests are handled, aiming to harmonize GDPR application across Europe. The findings will be aggregated and analyzed to enhance understanding and facilitate targeted supervision at both national and European levels.
