Tallinna Halduskohus - 3-19-579

From GDPRhub
Revision as of 12:45, 31 January 2020 by Juliette Leportois (talk | contribs) (Created page with "{| class="wikitable" style="width: 25%; margin-left: 10px; float:right;" !colspan="2"| CE - N° 433069 |- |colspan="2" style="padding: 20px; background-color:#ffffff;"|File:...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
CE - N° 433069
Conseil D'Etat photo.png
Court: CE (France)
Jurisdiction: France
Relevant Law:

Article 4(11) GDPR

Articles 8, 20 and 82 of the French Data Protection Act

ePrivacy Directive 2002/58/EC

Decided: 16. 10. 2019
Published: n/a
Parties: La Quadrature du Net, Caliopen and CNIL
National Case Number: N°433069
European Case Law Identifier: n/a
Appeal from: CNIL (France)
Language: French
Original Source: CONSEIL D'ETAT (in FR)

Council of State (Conseil d'Etat) confirms the CNIL's discretion to initiate consultation process to define new practical arrangements for expressing consent in targeted advertisement and to provide stakeholders with a period of adaptation to comply with it.

English Summary

Facts

In July 2018 the CNIL adopted a decision clarifying the new rules on consent for targeted advertisement under GDPR. It initiated a consultation process for the first quarter of 2020 to define the practical arrangements for obtaining consent. It determined a six-month adaptation period.

Two associations requested to annul the decision of CNIL on grounds of excess of power and to instruct it to publish both on its website and on the pages of its press releases of 28 June and 18 July, a reference to the decision of the Conseil d'Etat which should indicate that "continued navigation" does not constitute a valid means of expressing consent for cookies and online tracking devices, while every day of delay would imply a penalty of 500 euros.

Dispute

The Council has to assess whether the CNIL had the power to initiate such a process.

Holding

The Council found that the CNIL is an independent administrative authority with wide discretion in the exercise of its missions. In this sense, the CNIL can initiate such an action plan in order to achieve more effective compliance with the data protection law.

The Council ruled that the six-month period of tolerance which the CNIL provided the stakeholders in order to fully comply with the rules is legal. Finally, the CNIL’s decision does not prevent the Commission from carrying out controls during the mentioned period and imposing sanctions for serious breaches of the new data protection framework.

Comment

Share your comment on the decision here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the original. Please refer to the French original for more details.

to be completed..