This Year's Priority Investigation Topics from the CNIL
In 2024, the French data protection authority (CNIL) plans to carry out inspections on various priority topics. These include data collection for the Olympic and Paralympic Games, data collected online from minors, loyalty programs and electronic sales receipts, and individuals' right to access their personal data.
The first priority topic focuses on data collection for the Olympic and Paralympic Games, to be held in France in 2024. The CNIL will verify the strict use of security measures such as QR codes for restricted areas, access authorizations, and the use of augmented cameras. This also includes inspecting the data collected for ticketing services and ensuring compliance with privacy regulations.
The second priority topic is the collection of online data from minors. With children increasingly exposed to social media, dating sites, and gaming platforms, the CNIL aims to check the age verification processes, security measures, and data minimization practices on popular applications and websites for children and teenagers.
The third priority topic is loyalty programs and electronic sales receipts. Grocery store chains often collect a large amount of personal information through these programs, which can be used for commercial purposes like targeted advertising. The CNIL will ensure that consumers are informed about the data collected and have given their consent, in accordance with the EU's General Data Protection Regulation (GDPR).
The final priority topic for 2024 is individuals' right to access their personal data. The CNIL aims to harmonize the application of GDPR and coordinate with other European supervisory authorities. This will provide a better understanding of the subject and enable targeted monitoring at both national and European levels.
Overall, these investigations highlight the CNIL's focus on addressing topics of high public interest and ensuring compliance with privacy laws in various sectors. These priorities will make up about 30% of the CNIL's inspections in 2024 and aim to protect individuals' privacy rights and maintain data protection standards.