On November 8, 2015, the Conseil d'Etat approved the penalty issued by the French Data Protection Authority ("CNIL") against a consulting company for two years of noncompliance with French data protection regulations (source documents in French). CNIL concluded that the company's video surveillance measures were not justified by the nature of the employees' work. CNIL further concluded that the company failed to adequately disclose surveillance information to its employees or implement measures to secure access to the video recordings.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.