French Data Protection Authority Extends Scope Of Simplified Formalities For Registration Of Whistleblower Programs

The French data protection authority has decided to expand the availability of the existing simplified registration framework as a result of multiple requests for registration filed with the French data protection authority over the last few years in connection with whistleblower programs that included in their scope alerts relating to breaches of environment regulations, anti-discrimination provisions, and provisions relating to health and security in the workplace. The revised single authorization n°AU-004 (source document in French) now is available for businesses that include in their whistleblower scheme the aforementioned considerations. Previously, data controllers had to file a full request for authorization.