Tallinna Halduskohus - 3-19-579
CE - N° 433069 | |
---|---|
Court: | CE (France) |
Jurisdiction: | France |
Relevant Law: |
Articles 8, 20 and 82 of the French Data Protection Act ePrivacy Directive 2002/58/EC |
Decided: | 16. 10. 2019 |
Published: | n/a |
Parties: | La Quadrature du Net, Caliopen and CNIL |
National Case Number: | N°433069 |
European Case Law Identifier: | n/a |
Appeal from: | CNIL (France) |
Language: | French |
Original Source: | CONSEIL D'ETAT (in FR) |
Council of State (Conseil d'Etat) confirms the CNIL's discretion to initiate consultation process to define new practical arrangements for expressing consent in targeted advertisement and to provide stakeholders with a period of adaptation to comply with it.
English Summary
Facts
In July 2018 the CNIL adopted a decision clarifying the new rules on consent for targeted advertisement under GDPR. It initiated a consultation process for the first quarter of 2020 to define the practical arrangements for obtaining consent. It determined a six-month adaptation period.
Two associations requested to annul the decision of CNIL on grounds of excess of power and to instruct it to publish both on its website and on the pages of its press releases of 28 June and 18 July, a reference to the decision of the Conseil d'Etat which should indicate that "continued navigation" does not constitute a valid means of expressing consent for cookies and online tracking devices, while every day of delay would imply a penalty of 500 euros.
Dispute
The Council has to assess whether the CNIL had the power to initiate such a process.
Holding
The Council found that the CNIL is an independent administrative authority with wide discretion in the exercise of its missions. In this sense, the CNIL can initiate such an action plan in order to achieve more effective compliance with the data protection law.
The Council ruled that the six-month period of tolerance which the CNIL provided the stakeholders in order to fully comply with the rules is legal. Finally, the CNIL’s decision does not prevent the Commission from carrying out controls during the mentioned period and imposing sanctions for serious breaches of the new data protection framework.
Comment
Share your comment on the decision here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the original. Please refer to the French original for more details.
to be completed..