France’s data protection authority, the Commission nationale de l'informatique et des libertés, published guidance and best practices for use of authentication by digital token. The CNIL warned access tokens made from hyperlinks can pose security risks because they can act as a “gateway” to allow for “continuous access to personal data on the internet." Without two-factor authentication, individual remote connection tokens create “increased risk in terms of security.” The CNIL’s recommendations include establishing a defined period for how long a token can be valid and use authentication links that do not contain personal data.
8 Sept. 2022
CNIL creates guidance for authentication by digital tokens
RELATED STORIES
A view from DC: Can we have symmetry in privacy choices?
Notes from the IAPP Canada: Fall brings youth privacy issues to the forefront
Notes from the Asia-Pacific region: China privacy landscape 'hot and dynamic as ever'
A view from Brussels: Will health data sharing be a blueprint for other domains?
California awaits fate of legislature-approved AI safety bill