{"id":8822,"date":"2016-03-07T14:06:12","date_gmt":"2016-03-07T13:06:12","guid":{"rendered":"https:\/\/www.solucominsight.fr\/?p=8822"},"modified":"2019-12-31T10:23:19","modified_gmt":"2019-12-31T09:23:19","slug":"8822","status":"publish","type":"post","link":"https:\/\/www.riskinsight-wavestone.com\/en\/2016\/03\/8822\/","title":{"rendered":"Nouveau r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles : quels impacts suite \u00e0 la version du trilogue ?"},"content":{"rendered":"<p><strong>MIS A JOUR du 14\/04\/2016 :\u00a0<em> Le Parlement europ\u00e9en vient d&#8217;adopter d\u00e9finitivement le r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles qui \u00e9tait en d\u00e9bat depuis 4 longues ann\u00e9es. Il sera applicable d&#8217;ici 2 ans.<br \/>\n<\/em><\/strong><\/p>\n<p><em>Le trilogue informel d\u00e9but\u00e9 en juin dernier semble finalement avoir port\u00e9 ses fruits. En effet, dans son communiqu\u00e9 du <a href=\"http:\/\/europa.eu\/rapid\/press-release_IP-15-6321_fr.htm\">15 d\u00e9cembre 2015<\/a>, la Commission Europ\u00e9enne a annonc\u00e9 qu\u2019un accord a \u00e9t\u00e9 conclu entre elle-m\u00eame, le Conseil de l\u2019Union Europ\u00e9enne et le Parlement Europ\u00e9en. Le texte est donc pr\u00eat \u00e0 \u00eatre promulgu\u00e9, ne reste plus qu\u2019au Parlement et au Conseil d\u2019adopter formellement le texte (voir la <a href=\"http:\/\/www.solucominsight.fr\/2015\/06\/donnees-a-caractere-personnel-un-pas-de-geant-en-faveur-de-ladoption-du-reglement-europeen\/\">proc\u00e9dure d\u2019adoption d\u2019un r\u00e8glement europ\u00e9en<\/a>). Nous avions pr\u00e9c\u00e9demment parcouru le <a href=\"https:\/\/www.solucominsight.fr\/2015\/09\/nouveau-reglement-europeen-sur-la-protection-des-donnees-personnelles-anticiper-les-3-impacts-majeurs\/\">contenu des derni\u00e8res propositions en date afin d\u2019en d\u00e9crypter les 3 impacts majeurs<\/a><a href=\"http:\/\/www.solucom.fr\/wp-content\/uploads\/2015\/10\/SOLUCOM_Lettre-s%C3%A9curit%C3%A9-38-web.pdf\">,<\/a> nous vous proposons aujourd\u2019hui d\u2019en faire de m\u00eame sur la version finale du r\u00e8glement.<\/em><\/p>\n<h1>QUEL CHANGEMENT POUR LES ENTREPRISES\u00a0?<\/h1>\n<p>Premier point important \u00e0 noter, le r\u00e8glement n\u2019impose pas les m\u00eames obligations aux <strong>multinationales<\/strong> et aux <strong>PME<\/strong> de moins de 250 employ\u00e9s (cf. <a href=\"http:\/\/eur-lex.europa.eu\/LexUriServ\/LexUriServ.do?uri=OJ:L:2003:124:0036:0041:en:PDF\">Commission Recommendation 2003\/361\/EC of 6 May 2003<\/a>)\u00a0: ces derni\u00e8res, sous certaines conditions (absence de traitements sensibles et r\u00e9alisation de traitements de donn\u00e9es occasionnels) se voient <strong>dispens\u00e9es de l\u2019obligation de tenir un registre des traitements<\/strong>.<\/p>\n<h2>Responsabilisation ou \u00ab Accountability\u00a0\u00bb<\/h2>\n<p>Le r\u00e8glement fait <strong>disparaitre l\u2019obligation de d\u00e9claration des traitements<\/strong> mais impose la <strong>tenue d\u2019une documentation<\/strong> permettant au responsable de traitement de prouver sa <strong>conformit\u00e9<\/strong> d\u00e9taillant : les coordonn\u00e9es du responsable de traitement, la liste des traitements de donn\u00e9es avec leur finalit\u00e9, les cat\u00e9gories de personnes concern\u00e9es, les personnes pouvant acc\u00e9der aux donn\u00e9es, les transferts internationaux, la date de suppression des donn\u00e9es et les mesures de s\u00e9curit\u00e9 associ\u00e9es. Le <strong>Data Privacy Officer<\/strong> (DPO), s\u2019il est nomm\u00e9, sera le <strong>garant de ce registre.<\/strong> Cependant, pour les traitements identifi\u00e9s comme sensibles \u00e0 la suite d\u2019une l\u2019analyse d\u2019impact, le responsable de traitement devra consulter son autorit\u00e9 de r\u00e9f\u00e9rence avant de le mettre en \u0153uvre. Cette autorit\u00e9 pourra lui imposer <strong>des mesures \u00e0 mettre en place.<\/strong><\/p>\n<p>Le DPO ne sera pas g\u00e9n\u00e9ralis\u00e9 \u00e0 toutes les entreprises et contrairement \u00e0 ce qui avait \u00e9t\u00e9 propos\u00e9, <strong>il n\u2019y aura pas de seuil relatif au nombre d\u2019employ\u00e9s<\/strong> ou de personnes concern\u00e9es par le traitement. L\u2019<strong>obligation de nommer un DPO sera limit\u00e9e<\/strong>\u00a0:<\/p>\n<ul>\n<li>Aux autorit\u00e9s publiques (\u00e0 l\u2019exception des tribunaux)\u00a0;<\/li>\n<li>Aux entreprises qui, de par leurs activit\u00e9s, collectent des donn\u00e9es personnelles de mani\u00e8re syst\u00e9matique ou sur un grand nombre de personne\u00a0;<\/li>\n<li>Aux entreprises dont le c\u0153ur de m\u00e9tier de l\u2019entreprise repose sur des traitements d\u00e9finis comme sensibles par le <a href=\"http:\/\/www.numerama.com\/content\/uploads\/2015\/12\/reglement-donnes-personnelles-compromis.pdf\">r\u00e8glement au sein de l\u2019article 9<\/a>.<\/li>\n<\/ul>\n<p>Les t\u00e2ches et activit\u00e9s du DPO sont d\u00e9finies par le r\u00e8glement\u00a0:<\/p>\n<ul>\n<li>Servir de point de contact aux contr\u00f4leurs,<\/li>\n<li>Participer aux analyses d\u2019impact,<\/li>\n<li>Surveiller la conformit\u00e9 de l\u2019entreprise au r\u00e8glement<\/li>\n<li>Conseiller le responsable de traitement et ses employ\u00e9s sur les sujets relatifs aux donn\u00e9es \u00e0 caract\u00e8re personnel.<\/li>\n<\/ul>\n<p>Dernier point \u00e0 noter, ce DPO n<strong>e devra pas n\u00e9cessairement \u00eatre employ\u00e9 directement par le responsable de traitement<\/strong> et pourra \u00eatre <strong>mutualis\u00e9<\/strong>, \u00e0 condition qu\u2019il reste facilement accessible.<\/p>\n<h2>Mise en place du Privacy by Design<\/h2>\n<p>Les responsables de traitement devront garantir que les<strong> traitements de donn\u00e9es ne portent pas atteinte \u00e0 la vie priv\u00e9e<\/strong> des personnes en recourant \u00e0 divers m\u00e9canismes (pseudo anonymisation, collecte des donn\u00e9es au strict minimum n\u00e9cessaire, dur\u00e9e de conservation, restriction des acc\u00e8s\u2026). Cette r\u00e9flexion devra non seulement \u00eatre r\u00e9alis\u00e9e au moment de la conception du traitement, mais \u00e9galement <strong>tout au long de la dur\u00e9e de vie du traitement<\/strong> \u00e0 l\u2019aide d\u2019<strong>un processus d\u2019audit<\/strong> pr\u00e9alablement d\u00e9fini. Afin d\u2019accompagner les entreprises dans ces travaux, <strong>des codes de conduites<\/strong> ou des <strong>certifications<\/strong> pourront \u00eatre mis en place par les contr\u00f4leurs.<\/p>\n<p>Le r\u00e8glement pr\u00e9voit explicitement que des <strong>analyses d\u2019impacts<\/strong> sur la vie priv\u00e9e des personnes soient r\u00e9alis\u00e9es sur les traitements pr\u00e9sentant des risques pour les droits et libert\u00e9s des individus. Ces analyses permettront de d\u00e9finir les <strong>m\u00e9canismes de s\u00e9curit\u00e9<\/strong> \u00e0 y associer ou encore la n\u00e9cessit\u00e9 de<strong> modifier le traitement.<\/strong> Ce sera le DPO qui devra arbitrer sur la n\u00e9cessit\u00e9 de r\u00e9aliser ces analyses.<\/p>\n<p>L\u00e0 encore, afin d\u2019accompagner les entreprises, deux mesures sont mises en place\u00a0: les contr\u00f4leurs sont invit\u00e9s \u00e0 \u00e9tablir une<strong> liste de traitements pour lesquels une analyse d\u2019impact est obligatoire<\/strong> et en cas de fort risque identifi\u00e9 par l\u2019entreprise, elle <strong>devra collecter l\u2019avis du contr\u00f4leur comp\u00e9tent sur le traitement.<\/strong><\/p>\n<p>Point int\u00e9ressant \u00e0 noter, une <strong>unique analyse<\/strong> pourra \u00eatre r\u00e9alis\u00e9e pour un<strong> ensemble de traitement similaire.<\/strong><\/p>\n<h2>Notification des fuites<\/h2>\n<p>Le r\u00e8glement ent\u00e9rine \u00e9galement l\u2019obligation de <strong>notification des fuites de donn\u00e9es.<\/strong> En effet, le responsable de traitement aura<strong> 72h<\/strong> pour notifier les autorit\u00e9s en d\u00e9crivant\u00a0: la nature de la fuite de donn\u00e9es, le nombre et la cat\u00e9gorie de personnes concern\u00e9es, la nature ainsi que le volume des donn\u00e9es et le plan de rem\u00e9diation.<\/p>\n<p>Par ailleurs le responsable de traitement devra \u00e9galement <strong>notifier, sans d\u00e9lai, les personnes concern\u00e9es<\/strong> s\u2019il estime que la fuite pr\u00e9sente un risque av\u00e9r\u00e9 pour ces personnes.<\/p>\n<h2>Les autres mesures \u00e0 garder en t\u00eate<\/h2>\n<p>Il a \u00e9t\u00e9 d\u00e9cid\u00e9 de renforcer les pouvoirs du \u00ab\u00a0<em>European Data Protection Board\u00a0<\/em>\u00bb, groupement de l\u2019ensemble des autorit\u00e9s de contr\u00f4le, qui devra <strong>s\u2019assurer de la coh\u00e9rence de l\u2019application du r\u00e8glement<\/strong> au sein des diff\u00e9rents Etats de l\u2019Union Europ\u00e9enne.<\/p>\n<p>Le<strong> droit \u00e0 la portabilit\u00e9<\/strong>, qui n\u2019\u00e9tait pas syst\u00e9matiquement pr\u00e9sent entre les diff\u00e9rentes versions du r\u00e8glement a \u00e9t\u00e9 r\u00e9int\u00e9gr\u00e9. Pour les entreprises, cela signifie qu\u2019elles devront \u00eatre capables de restituer l\u2019ensemble des donn\u00e9es personnelles \u00e0 la personne concern\u00e9e sous un format structur\u00e9 et pouvant \u00eatre trait\u00e9 simplement. Par ailleurs, ces donn\u00e9es pourront \u00e9galement \u00eatre transmises directement \u00e0 une autre entreprise sur demande.<\/p>\n<p>Comme \u00e9voqu\u00e9 pr\u00e9c\u00e9demment, une<strong> liste des donn\u00e9es sensibles<\/strong> a \u00e9t\u00e9 d\u00e9finie dans le r\u00e8glement\u00a0: origine ethnique, opinions politiques, religieuses ou philosophiques, donn\u00e9es g\u00e9n\u00e9tiques, biom\u00e9triques, relatives \u00e0 la sant\u00e9 et aux pr\u00e9f\u00e9rences sexuelles des personnes. Le traitement de ces donn\u00e9es sera soumis \u00e0 de <strong>strictes restrictions.<\/strong><\/p>\n<p>En plus de ces donn\u00e9es, les autorit\u00e9s de contr\u00f4le, via le \u00ab\u00a0<em>European Data Protection Board\u00a0<\/em>\u00bb, pourront d\u00e9finir une<strong> liste de traitements sensibles.<\/strong><\/p>\n<p>Le principe du<strong> guichet unique<\/strong> a \u00e9t\u00e9 pr\u00e9cis\u00e9. Chaque entreprise devra choisir un<strong>e autorit\u00e9 de r\u00e9f\u00e9rence<\/strong> (celle de son \u00e9tablissement principal) qui lui servira du<strong> point de contact unique<\/strong> avec l\u2019ensemble des autorit\u00e9s de contr\u00f4le. Cependant n\u2019importe quelle autorit\u00e9 pourra d\u00e9cider d\u2019une action envers le responsable de traitement. Elle devra pour cela en informer n\u00e9anmoins l\u2019autorit\u00e9 de r\u00e9f\u00e9rence qui restera l\u2019interlocuteur unique de l\u2019entreprise. En cas de d\u00e9saccord entre les 2 autorit\u00e9s, un arbitrage aura lieu au sein du \u00ab<em>\u00a0European Data Protection Board\u00a0<\/em>\u00bb.<\/p>\n<p>Concernant les <strong>sanctions<\/strong>, <strong>deux seuils sont fix\u00e9s <\/strong>en cas de non-conformit\u00e9 au r\u00e8glement europ\u00e9en suivant la nature de l\u2019infraction (l\u2019article 79 du r\u00e8glement d\u00e9taille la liste des infractions pour chacun des seuils\u00a0:<\/p>\n<ul>\n<li><strong>Un premier seuil \u00e0 2%<\/strong> du chiffre d\u2019affaire mondial ou 10 millions d\u2019euros (maximum des 2 valeurs) pour les infractions mineures\u00a0: absence de registre des traitements, non nomination d\u2019un DPO si elle est obligatoire ou encore non r\u00e9alisation des analyses d\u2019impact<\/li>\n<li><strong>Un deuxi\u00e8me seuil \u00e0 4%<\/strong> du chiffre d\u2019affaire mondial ou 20 millions d\u2019euros (maximum des 2 valeurs) pour les infractions les plus graves\u00a0: non recueil du consentement, non-respect des droits des personnes, transfert international ill\u00e9gal ou encore non-respect d\u2019une interdiction de mise en \u0153uvre d\u2019un traitement.<\/li>\n<\/ul>\n<p>Le montant des amendes d\u00e9pendra de la <strong>nature de l\u2019infraction<\/strong> ainsi que de l<strong>\u2019\u00e9ventuelle r\u00e9cidive du responsable de traitement.<\/strong><\/p>\n<h1>Que retenir\u00a0?<\/h1>\n<p>Nous nous dirigeons donc de mani\u00e8re certaine vers une<strong> accentuation de la responsabilit\u00e9 et de l\u2019autonomie des entreprises<\/strong> concernant la gestion des donn\u00e9es personnelles\u00a0: le mod\u00e8le de contr\u00f4le \u00ab\u00a0a priori\u00a0\u00bb va se transformer en un <strong>mod\u00e8le de contr\u00f4le et sanction \u00ab\u00a0a post\u00e9riori\u00a0\u00bb<\/strong>. Le message est clair\u00a0: les entreprises pourront b\u00e9n\u00e9ficier d\u2019une plus grande <strong>souplesse<\/strong> concernant la gestion des donn\u00e9es \u00e0 caract\u00e8re personnel, mais seront susceptibles d\u2019\u00eatre<strong> sanctionn\u00e9e beaucoup plus fortement.<\/strong><\/p>\n<p>Cela devrait \u00e9galement permettre aux autorit\u00e9s de contr\u00f4le<strong> de se concentrer sur les sujets les plus sensibles<\/strong> et d\u2019\u00eatre capables de r\u00e9pondre aux requ\u00eates dans <strong>des d\u00e9lais raisonnables.<\/strong><\/p>\n<p>Prochaine \u00e9tape, le texte doit maintenant \u00eatre <strong>officiellement approuv\u00e9 par le Parlement et le Consei<\/strong>l. Compte tenu du calendrier des r\u00e9unions, nous pouvons supposer un<strong> r\u00e8glement promulgu\u00e9 en Avril prochain<\/strong>, suivi d\u2019une p\u00e9riode de deux ans pour la mise en conformit\u00e9.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>MIS A JOUR du 14\/04\/2016 :\u00a0 Le Parlement europ\u00e9en vient d&#8217;adopter d\u00e9finitivement le r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles qui \u00e9tait en d\u00e9bat depuis 4 longues ann\u00e9es. Il sera applicable d&#8217;ici 2 ans. Le trilogue informel d\u00e9but\u00e9 en&#8230;<\/p>\n","protected":false},"author":975,"featured_media":8861,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"page-templates\/tmpl-one.php","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[36,3226],"tags":[3299,412,2960,2434,78,2842],"coauthors":[2368],"class_list":["post-8822","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-digital-trust","category-digital-compliance","tag-digital-privacy","tag-donnees-a-caractere-personnel","tag-eu","tag-privacy-by-design","tag-reglementation","tag-rgpd"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Nouveau r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles : quels impacts suite \u00e0 la version du trilogue ? - RiskInsight<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Nouveau r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles : quels impacts suite \u00e0 la version du trilogue ? - RiskInsight\" \/>\n<meta property=\"og:description\" content=\"MIS A JOUR du 14\/04\/2016 :\u00a0 Le Parlement europ\u00e9en vient d&#8217;adopter d\u00e9finitivement le r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles qui \u00e9tait en d\u00e9bat depuis 4 longues ann\u00e9es. Il sera applicable d&#8217;ici 2 ans. Le trilogue informel d\u00e9but\u00e9 en...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/\" \/>\n<meta property=\"og:site_name\" content=\"RiskInsight\" \/>\n<meta property=\"article:published_time\" content=\"2016-03-07T13:06:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-12-31T09:23:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2016\/03\/Fotolia_85992681_Subscription_Monthly_M.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1378\" \/>\n\t<meta property=\"og:image:height\" content=\"1378\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Julien.Masson\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Julien.Masson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/\"},\"author\":{\"name\":\"Julien.Masson\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/72659776871184bb94fcfa3d968bf230\"},\"headline\":\"Nouveau r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles : quels impacts suite \u00e0 la version du trilogue ?\",\"datePublished\":\"2016-03-07T13:06:12+00:00\",\"dateModified\":\"2019-12-31T09:23:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/\"},\"wordCount\":1573,\"publisher\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2016\/03\/Fotolia_85992681_Subscription_Monthly_M.jpg\",\"keywords\":[\"Digital privacy\",\"DPO\",\"EU\",\"privacy by design\",\"R\u00e8glementation\",\"RGPD\"],\"articleSection\":[\"Cybersecurity &amp; Digital Trust\",\"Digital Compliance\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/\",\"name\":\"Nouveau r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles : quels impacts suite \u00e0 la version du trilogue ? - RiskInsight\",\"isPartOf\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2016\/03\/Fotolia_85992681_Subscription_Monthly_M.jpg\",\"datePublished\":\"2016-03-07T13:06:12+00:00\",\"dateModified\":\"2019-12-31T09:23:19+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#primaryimage\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2016\/03\/Fotolia_85992681_Subscription_Monthly_M.jpg\",\"contentUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2016\/03\/Fotolia_85992681_Subscription_Monthly_M.jpg\",\"width\":1378,\"height\":1378},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.riskinsight-wavestone.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Nouveau r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles : quels impacts suite \u00e0 la version du trilogue ?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#website\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/en\/\",\"name\":\"RiskInsight\",\"description\":\"The cybersecurity &amp; digital trust blog by Wavestone&#039;s consultants\",\"publisher\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.riskinsight-wavestone.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#organization\",\"name\":\"Wavestone\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png\",\"contentUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png\",\"width\":50,\"height\":50,\"caption\":\"Wavestone\"},\"image\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/72659776871184bb94fcfa3d968bf230\",\"name\":\"Julien.Masson\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/en\/author\/julien-masson\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Nouveau r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles : quels impacts suite \u00e0 la version du trilogue ? - RiskInsight","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/","og_locale":"en_US","og_type":"article","og_title":"Nouveau r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles : quels impacts suite \u00e0 la version du trilogue ? - RiskInsight","og_description":"MIS A JOUR du 14\/04\/2016 :\u00a0 Le Parlement europ\u00e9en vient d&#8217;adopter d\u00e9finitivement le r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles qui \u00e9tait en d\u00e9bat depuis 4 longues ann\u00e9es. Il sera applicable d&#8217;ici 2 ans. Le trilogue informel d\u00e9but\u00e9 en...","og_url":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/","og_site_name":"RiskInsight","article_published_time":"2016-03-07T13:06:12+00:00","article_modified_time":"2019-12-31T09:23:19+00:00","og_image":[{"width":1378,"height":1378,"url":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2016\/03\/Fotolia_85992681_Subscription_Monthly_M.jpg","type":"image\/jpeg"}],"author":"Julien.Masson","twitter_misc":{"Written by":"Julien.Masson","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#article","isPartOf":{"@id":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/"},"author":{"name":"Julien.Masson","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/72659776871184bb94fcfa3d968bf230"},"headline":"Nouveau r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles : quels impacts suite \u00e0 la version du trilogue ?","datePublished":"2016-03-07T13:06:12+00:00","dateModified":"2019-12-31T09:23:19+00:00","mainEntityOfPage":{"@id":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/"},"wordCount":1573,"publisher":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#organization"},"image":{"@id":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#primaryimage"},"thumbnailUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2016\/03\/Fotolia_85992681_Subscription_Monthly_M.jpg","keywords":["Digital privacy","DPO","EU","privacy by design","R\u00e8glementation","RGPD"],"articleSection":["Cybersecurity &amp; Digital Trust","Digital Compliance"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/","url":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/","name":"Nouveau r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles : quels impacts suite \u00e0 la version du trilogue ? - RiskInsight","isPartOf":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#primaryimage"},"image":{"@id":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#primaryimage"},"thumbnailUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2016\/03\/Fotolia_85992681_Subscription_Monthly_M.jpg","datePublished":"2016-03-07T13:06:12+00:00","dateModified":"2019-12-31T09:23:19+00:00","breadcrumb":{"@id":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#primaryimage","url":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2016\/03\/Fotolia_85992681_Subscription_Monthly_M.jpg","contentUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2016\/03\/Fotolia_85992681_Subscription_Monthly_M.jpg","width":1378,"height":1378},{"@type":"BreadcrumbList","@id":"https:\/\/www.riskinsight-wavestone.com\/2016\/03\/8822\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.riskinsight-wavestone.com\/en\/"},{"@type":"ListItem","position":2,"name":"Nouveau r\u00e8glement Europ\u00e9en sur la protection des donn\u00e9es personnelles : quels impacts suite \u00e0 la version du trilogue ?"}]},{"@type":"WebSite","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#website","url":"https:\/\/www.riskinsight-wavestone.com\/en\/","name":"RiskInsight","description":"The cybersecurity &amp; digital trust blog by Wavestone&#039;s consultants","publisher":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.riskinsight-wavestone.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#organization","name":"Wavestone","url":"https:\/\/www.riskinsight-wavestone.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png","contentUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png","width":50,"height":50,"caption":"Wavestone"},"image":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/72659776871184bb94fcfa3d968bf230","name":"Julien.Masson","url":"https:\/\/www.riskinsight-wavestone.com\/en\/author\/julien-masson\/"}]}},"_links":{"self":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts\/8822","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/users\/975"}],"replies":[{"embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/comments?post=8822"}],"version-history":[{"count":14,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts\/8822\/revisions"}],"predecessor-version":[{"id":8891,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts\/8822\/revisions\/8891"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/media\/8861"}],"wp:attachment":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/media?parent=8822"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/categories?post=8822"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/tags?post=8822"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/coauthors?post=8822"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}