Pinsent Masons' Annabelle Richard said France's data protection authority, the CNIL, may look at the efforts an organization put forth to prepare for the EU General Data Protection Regulation when deciding on enforcement actions, Out-Law.com reports. Richard points to the fact that the majority of French businesses will not be prepared by the GDPR implementation date and a recent statement by the CNIL as a sign the agency will be easier on companies that worked to get ready for 25 May. "The CNIL has confirmed that companies that are not fully compliant with the GDPR by 25 May can expect to be treated leniently initially provided that they have acted in good faith by attempting to achieve compliance," Richard said.
Full Story