The French Data Protection Authority CNIL has published the first assessment of the implementation of the GDPR in France. Since 25 May 2018, 24,500 organisations have appointed a Data Protection Officer; this means there are 13,000 DPOs, compared to 5,000 pre-GDPR. More than 600 notifications of data breaches have been received, affecting about 15m people (about 7 per day). The CNIL has received 3,767 complaints from individuals, representing a 64% increase compared to the same period in 2017. The CNIL also disclosed it is currently the lead authority for “a majority” of the circa 200 cross-border complaints currently handled by European DPAs. These complaints raise questions about consent in general, and in particular that of minors.
