The EDPB And The CNIL Release Guidance On Processing Personal Data In The Workplace During The COVID‑19 Outbreak

April 20, 2020 - Over the last few weeks, organizations in France and across the EU have been implementing measures to ensure business continuity and safeguard employment while applying the general rules on processing personal data in the context of the covid-19 outbreak.

The European Data Protection Board (EDPB) and the French Data Protection Authority (CNIL) have released practical guidance for employers on how to implement GDPR-compliant measures. The EDPB plans to issue additional guidance later this week on teleworking and the CNIL plans to update its guidance according to current events.

Guidance from the EDPB

• Overall guidance

The EDPB recommends relying on GDPR core principles (lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality), and emphasizes it is important to adopt adequate security measures and confidentiality policies ensuring that personal data is