Personal data

The Personal data department at DELSOL Avocats assists companies, institutions, and public bodies with all their issues related to personal data protection.

Whether it involves addressing specific questions regarding the application of the French Data Protection Act or supporting the implementation of a project from its inception (Privacy by Design), we ensure you remain compliant with the principles of personal data protection and their interpretation by the CNIL today and in light of the Regulation tomorrow.

The widespread digitization of all activities and its corollary—the proliferation of data—places the Personal Data department at the heart of the operations of businesses and public organizations.

The “datafication” of all activities makes the issue of personal data protection unavoidable and cross-cutting. No sector of activity today escapes the collection and processing of data. No sector of activity will be able to ignore compliance with data protection principles.

The approach to this subject, which until now has been characterized by compliance with the principles and formalities of the Law of January 6, 1978, on Information Technology, Files, and Civil Liberties, has now been revolutionized by the new European General Data Protection Regulation (GDPR) of April 27, 2016.

By establishing the principle of “accountability,” under which every data controller must be able to prove at any time (as of May 25, 2018) that the processing operations they carry out comply with the principles of personal data protection, it requires stakeholders to integrate these new principles into their projects immediately (penalties may reach up to €20 million or 4% of the organization’s revenue).

The Personal data department is specifically involved in:

• Providing training on the legislation and its application across all sectors, whether you are a data controller, processor, or internal DPO,
• Assisting you with any questions regarding the application of personal data protection rules, acting as your Data Privacy Officer, when necessary,
• Supporting you during inspections by the CNIL, and in the future by any other supervisory authority,
• Carrying out, where applicable, the necessary preliminary formalities with the data protection authority,
• Drafting a data protection policy and a cookie management policy.

Of course, the entry into force of the European Regulation has led DELSOL Avocats to assist its clients in complying with these new obligations.

To this end, the Personal data department is developing a structured service offering:

Legal and technical assessment

• Assessment,
• Process audit,
• Analysis of existing contracts.

Appointment of an external DPO

• Training, communication, and staff awareness,
• Compliance monitoring (impact assessments),
• Maintenance of the register and annual activity report,
• Any requests for information regarding personal data,
• Point of contact for the supervisory authority.

The Personal data department works closely with other teams within the firm, including the Life sciences, Non-profit organizations – Social and solidarity-based entrepreneurship, Employment law, Real estate – Construction, and Public law departments.