The use of information in France

Extraits

[...] Unless exceptions, you can not collect sensitive data (racial or ethnic origin, political opinions, religious or philosophical, trade union membership, data on the sexual life or health). The aim of the treatment A file must have a specific goal. The information used in a file must be consistent in relation to its goal. The information can not be reused in a manner inconsistent with the purpose for which they were collected. The time life of information Personal data have an expiry date. The responsible of a file sets a reasonable time life depending on the objective of the file. [...]

[...] We are going to present some laws about the right for recording information, for opposition in appear in a file, for accessing to the information and for rectification the information. About the agency, the CNIL is composed of seventeen members from various government entities, four of them are members of the parliament (Assemblée nationale and Sénat). Twelve of these members are elected by their representative organisations in the CNIL. The CNIL's administrative authority status gives it total independence to select the actions that it will undertake. However, its power is limited and defined by law. The CNIL is financed by the budget of the French Republic. [...]

[...] File's security Any responsible for computer processing of personal data must adopt measures physical security (security of the premises) and logical (information systems security) adapted to the nature of the data and the risks presented by the treatment. Privacy of data Only authorized persons may have access to personal data contained in a file. They are: explicitly designated recipients to obtain regular communication, "third-party" entitled to receive in a timely manner and motivated (eg police, taxmen). Indicative bibliography French CNIL website (main source with Wiki) Data Privacy and Security par W. J. [...]

[...] Limits in the right for the information There are cases where the obligation of information is relieved: when the collected data become very fast anonymous, when the data are not directly gathered from the person. There are cases where the obligation of information is excluded: for the police' files, for files from penal condemnations, when the information from the person seems to be too impossible or very difficult. For practical purpose As possible, the persons are informed at the time of the collection of their data. [...]

[...] The exercise of the right of access must not infringe copyright. For practical purpose The right of access is directly from the agency which has information. The communication data must be faithful to the content of what is stored in the computer and carried out in clear language. Right of rectification Anyone can correct, supplement, update, and delete lock or information which may concern when were found errors, inaccuracies or data whose collection, use, disclosure or retention is prohibited. The right of correction is an essential complement to the right of access. [...]