European Data Protection Digest

AFCDP Releases Right-of-Access Index

PRIVACY LAW—FRANCE

January 29, 2010

Following passage of the French "Informatique et Libertes" law, an individual may request that an entity holding personal data about him, share that personal data with him. The entity has two months from the time of the request to provide full information to the requestor, free of charge. In certain circumstances, the individual may then request that the personal information be deleted or brought up to date. The Association Francaise des Correspondants a la Protection des Donnees a Caractere Personnel, also known as the French Association of Data Protection Officers (AFCDP), on the occasion of Data Privacy Day yesterday, published its first "Access Right Index." Intended to help French entities--both private and governmental--prepare themselves for responding to information requests and to help educate individuals about their rights, the index provides insight into the manner in which entities are currently complying with the law. The index indicates which sectors are the best and worst in terms of compliance and provides anonymous, real-world examples of wrongdoing, as well as best-practice guidance.
Full Story