French DPA Publish Accountability Standards

In anticipation of the EU General Data Protection Regulation and the principle of accountability the French Data Protection Authority (CNIL) have published guidance on their accountability standard which indicates that data controllers need:

• Implementation of a formal internal Data Protection Policy
• The appointment of a Data Protection Officer (DPO)
• Regular compliance assessment
• Breach notifications within 72 hours of discovery of a data breach

Of interest is the fact that the CNIL accountability standards indicate that the DPO is required to keep a compliance manual that includes:

• The name and address of the DPO
• The duties of the DPO in respect of data processing