France's data protection authority, the Commission nationale de l'informatique et des libertés, put 22 municipalities on notice that they must appoint a data protection officer within four months in compliance with the EU General Data Protection Regulation. In June 2021, the CNIL alerted municipalities with more than 20,000 residents they needed to appoint a DPO. However, it found that some had yet to do so a year later. Municipalities that do not comply may face fines. Editor’s note: The IAPP Resource Center’s DPO topic page offers insights on the data protection role, obligations and mandates.
Full Story