How will these sanctions be managed? For cross-border processing, intra-European coordination will certainly take a long time to get implemented, he said, “yet the fines will be extremely high.” But the most interesting part is that the national commission allows companies to come to conformity with the laws, and it does not levy any “tax” on them if they somehow fail to comply. The CNIL assures us that its goal is not to make money. The CNIL, expressed its representative, has sued only four SDK software publishing companies, “but these SDKs make up 83% of all applications [that] require these location data,” he said. Bottom line, there is room for improvement.
However, the companies that have been France Email List given formal notice have not been sanctioned. The formal notice, Armand Heslot reminds us, is made to let the company comply. The French Watchdog does not recover the money from the sanctions (Inland revenue collects these fines) and has no wish to grow these numbers for the sake of raising funds. The UK has established an independent authority, the ICO (Information Commissioner’s Office), to ensure that companies and individuals comply with data protection laws. The ICO has prepared a Data protection self assessment toolkit for organizations to help them comply with the data protection rules.

It provides companies with checklists that allow them to securely operate on people’s personal data. The ICO also provides a checklist for small business owners and sole traders. What awaits us with the new ePrivacy law GDPR has only just been implemented, and a new regulation is in the making: it is named ePrivacy. Despite the fact that data privacy acts are said to be enforced to encourage business, there is very little evidence of that. They rather produce chaos, especially when it comes to small businesses. Even if respect for users has always been at the heart of your concerns, as it has been of ours, it is undeniable that the increasing complexity spurred by such regulations poses a few questions.