The CNIL Reports On Employees’ Files’ Declarations

By Florence Chafiol-Chaumont from August & Debouzy*

The CNIL very recently announced on its website that it has performed investigations into approximately fifty companies in order to check if they respect their obligations in terms of the protection of their employees' personal data. These verifications led the CNIL to identify two issues: "the implementation conditions of professional alerts systems and the transfer of data to countries that do not belong to the European Community." In these respects, it was found that the subject companies do not comply with the Act of January 6, 1978, on the processing of personal data.

The transfer of personal data to a country that does not belong to the European Union (except for a few countries) is subject to a particular formalism so as to ensure an equivalent level of protection to that existing inside the Union. Furthermore, the person whose personal data is transferred abroad must benefit from very precise information,