Though the French Data Protection Authority (CNIL) had pre-approved a U.S. company's whistleblower program, an appeals court upheld a decision to suspend the program on the grounds that the company's employee representative group was not consulted, reports Hunton & Williams' Privacy and Information Security Law Blog. Additionally, the Labor Chamber of the Court of Appeals of Caen found that data on the whistleblower hotline homepage did not match the company's standard operating procedure and employees reportedly had not been properly informed of their rights--including their right to access, rectify or delete their personal information.
Full Story