The implementation of the GDPR in the practice of towns and - - PowerPoint PPT Presentation

▶

Dec 27, 2022 170 likes •253 views

The implementation of the GDPR in the practice of towns and municipalities Implementation of the GDPR in France share of practice In Dpartement du Loiret 1/8 French organization of public administrations Population : 65 billions - 1

SLIDE 1

The implementation of the GDPR in the practice of towns and municipalities

Implementation of the GDPR in France share of practice In « Département du Loiret »

1/8

SLIDE 2

French organization

f public administrations

Population : 65 billions

1 State
13 Regions
101 "Départements"
1263

EPCI (group

municipalities)

35416 municipalities

2/8

SLIDE 3

Is a « Département » with :

16 EPCI

Population b. 6900 & 282 000

326 municipalities

Population b. 42 & 114 644

Region « Centre Val de Loire » Population : 2.6 millions « Département du Loiret » Population : 675 000

3/8

SLIDE 4

GDPR in France :

GDPR was « long » to start :

05.25.2018 : GDPR was going on
06.20.2018 : The law on the protection of

personnal data was promulgated

08.01.2018 : French Regulation on protection of

personal data is adopted. But, French government /Parliament want to be more efficient :

this law & regulation adapt both GDPR and the directive

EC 2016/680 of the European Parliament & of the Council (personal data in the area of criminal offences & execution

n the criminal penalties).
in 2018, some laws & regulations about cybersecurity

was promulgated.

4/8

SLIDE 5

French Data Protection Authority (DPA) is called « CNIL » : Commission Nationale Informatique et Libertés => Liberty & Digital National Commission It provides advises to start the GDPR : 1 - Designate a DPO 2 - Design a data map 3 - Define priorities 4 - Manage risks 5 - Organize process 6 - Document conformity All tools helping us to work.

5/8

SLIDE 6

GDPR in « Le e Loir

iret

et »

I have 2 missions :

manage the GDPR in the « Département », our public

administration,

Advise EPCI & municipalities on the territory of "Le

Loiret" about GDPR. 3 most frequently discussed subjects (public actors) :

DPO designation
Confusion between consent (art. 7) & public interest

(art. 6 - e)

Knowledge of the storage period of public datas

6/8

SLIDE 7

So Solu lutio tions ns th that at I am I am de deve velopin loping g :

An internal network : with digital risk officer,

lawyer, IT engineer, open data & filing specialists

An external network : in my case with the DPO
f all « Départements » in France
A legal monitoring
Training personal data correspondent previously

identified in each team/organization.

7/8

SLIDE 8

Thank you for your attention

8/8