Laéna Bouafy

Oct 24, 2024 | lexology.com | Rachael Annear |Zofia Aszendorf |Richard Bird |Georgina Bayly |Beth George |Adam Gillert | +28 more

2025 DATA LAW TRENDS Leading the change Contents 01 AI governance takes center stage 02 International data transfers are under the spotlight 03 A new wave of cyber threats is here 04 New global regulations are changing our digital operations 05 Tougher enforcement is reshaping data and privacy compliance 06 US state consumer privacy laws are expanding 07 Asia's privacy laws are maturing 08 New EU data access regulations are shaping the future 2 Executive summary The 2025 Data Law Trends...

May 16, 2024 | technologyquotient.freshfields.com | Jérôme Philippe |Laéna Bouafy |Thomas Retière

Actions for non-material damages following (alleged) infringements of the General Data Protection Regulation (GDPR) are increasingly being brought before courts across Europe. But legal requirements for the recognition of non-material damages are still to a large extent unclear. In our new blog post series, we explain the situation in several countries across Europe (see our introduction). Please find out below about GDPR damages claims in France.

May 16, 2024 | lexology.com | Jérôme Philippe |Laéna Bouafy |Thomas Retière

Actions for non-material damages following (alleged) infringements of the General Data Protection Regulation (GDPR) are increasingly being brought before courts across Europe. But legal requirements for the recognition of non-material damages are still to a large extent unclear. In our new blog post series, we explain the situation in several countries across Europe (see our introduction). Please find out below about GDPR damages claims in France.

Feb 16, 2024 | lexology.com | Laéna Bouafy |Jérôme Philippe |Thomas Retière

On 27 December 2023, the French supervisory authority (CNIL) issued an administrative fine of €32 million against Amazon France Logistique (AFL). The penalty stemmed from AFL’s implementation of an excessively intrusive system for monitoring employees’ activity and performance, as well as the deployment of a video surveillance system lacking adequate information and security measures.

Jun 9, 2023 | lexology.com | Adam Gillert |Philipp Roos |Jérôme Philippe |Thomas Retière |Laéna Bouafy

Since the EU’s GDPR entered into force, organisations have increasingly received data subject access requests (Article 15 GDPR). In principle, according to Article 15 GDPR, a data subject may require a data controller to provide a confirmation of whether their personal data is processed.