Cnil controls turn to data security

The Cnil, the guardian of the privacy of the French, will devote a good part of its controls in 2021 to the technical security of personal data entrusted to companies and institutions, while the announcements of data leaks multiply. The 2021 controls will therefore target in particular “the level of security of the most used French websites in different sectors“, Indicated the CNIL Tuesday.

«Attention will be paid more particularly to the forms for collecting personal data, the use of the HTTPS protocol (which secures browsing on websites, Editor’s note) and the compliance of stakeholders with the Cnil recommendation on passwords.», She added. A second line of control will focus on the security of health data, while the sector is becoming more and more digital. They will aim in particular “ management of access to the computerized patient record», «online medical appointment booking platforms», «the management of personal data breaches in healthcare establishments“, According to the Cnil.

The third and final axis of control announced by the CNIL concerns advertising targeting and profiling of Internet users. The CNIL will in particular verify compliance with the rules relating to the collection of Internet users’ consent for the placement of cookies and other advertising tracers. These rules derive from the European Data Protection Regulation (RGPD) in 2018, which the CNIL is responsible for enforcing in France.

On October 1, the CNIL set its interpretation doctrine for the GDPR with regard to cookies and targeted advertising. It gave companies six months – so until next April 1 – to comply. In 2020, the CNIL carried out 247 formal control procedures in companies and institutions.

The cybercrime section of the Paris prosecutor’s office last week opened an investigation after the leak on the internet of sensitive medical information from nearly 500,000 people in France. Ransomware attacks that have escalated since 2018 are increasingly accompanied by data theft and blackmail upon publication.