Crafting Privacy Policies: An Onerous Task for Data Controllers Amidst Data Subject Disinterest
The article delves into the CNPD’s position on transparency in the context of privacy policies. The information conveyed to data subjects about the processing of their personal data must be accurate, succinct, complete and consistent, intelligible and easily accessible. While this information must b...
Guardado en:
| Autor principal: | |
|---|---|
| Formato: | Article ou chapitre numérique |
| Lenguaje: | Français |
| Publicado: |
2024
|
| Acceso en línea: | Accès Université d'Orléans et IFPM Accès Université d'Orléans et IFPM |
| Sumario: | The article delves into the CNPD’s position on transparency in the context of privacy policies. The information conveyed to data subjects about the processing of their personal data must be accurate, succinct, complete and consistent, intelligible and easily accessible. While this information must be provided before the processing takes place, controllers should consider updating their privacy policy as their business and data processing activities evolve. The CNPD’s decisions highlight the extensive efforts data controllers must invest in crafting their privacy policy. Such rigour aligns with the focus on transparency and data subject rights by the GDPR, the CJEU and the European legislator, but may seem excessive in light of the minimal attention that these policies typically receive from the data subjects themselves. |
|---|