On October 7, the Digital Republic Law was promulgated (source document in French), affecting CNIL's role and the rights of data subjects. The law increases the maximum amount of the administrative sanctions that may be imposed by CNIL from €150,000 to €3 million. The law also creates a new right to be forgotten specific to minors and provides for an accelerated procedure to exercise this right. In addition, the law contains provisions relating to "digital death," which enables data subjects, during their life, to give instructions relating to the future of their personal data after their death.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
