The French data protection authority has decided to expand the availability of the existing simplified registration framework as a result of multiple requests for registration filed with the French data protection authority over the last few years in connection with whistleblower programs that included in their scope alerts relating to breaches of environment regulations, anti-discrimination provisions, and provisions relating to health and security in the workplace. The revised single authorization n°AU-004 (source document in French) now is available for businesses that include in their whistleblower scheme the aforementioned considerations. Previously, data controllers had to file a full request for authorization.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.