On November 16, 2011, the French Data Protection Authority (the “CNIL”) published its Annual Activity Report for 2010 (the “Report”) highlighting its main 2010 accomplishments and outlining some of its priorities for the upcoming year. This year’s Report covers events that occurred since last year’s publication of the Annual Activity Report for 2009.
The Report discusses the upcoming revision of the EU data protection framework (Directive 95/46/EC) and presents the CNIL’s recommendations on key topics, such as introducing a right to be forgotten, increasing developer liability for data protection failures in new technologies, creating a binding international data protection regulation, and maintaining specific formalities to govern “risky” data processing (e.g., those including sensitive data or public security files).
Also, in January 2011, the CNIL was the first European data protection authority to create a Foresight and Innovation Department (the “Department”). Gathering lawyers, IT experts, sociologists, politicians and economists, the Department’s mission is to analyze new technological trends and developments and assess their impact on privacy and personal data protection. The Report notes that the Department plans to conduct two studies in 2011: one to address the smartphone boom, and the other, “Privacy 2020,” to forecast how the evolution of new technologies will affect legislation and the CNIL’s role.