Tools·CNILEN
Export
CNIL practice guide for the security of personal data (2024)
The French DPA’s security guide, 2024 edition: 25 factsheets in five parts (users, IT and equipment, control of data, preparing for an incident, focus pages on cloud, mobile apps, AI and APIs), each with the measures the CNIL considers the baseline for Article 32 and a change log against the earlier edition.
When to use itYou need a concrete list of baseline security measures to test a system or a supplier against.
- Published by
- CNIL (supervisory authority)
- Written for
- France
- For
- controllers, processors, developers
- Cost
- free
- Languages
- French, English
- Provisions
- GDPR Art. 32
Open the toolcnil.fr
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
ICO ICO data protection self-assessment checklists Short self-assessment checklists from the UK regulator for small organisations: data protection assurance, information security, direct marketing, records management, data sharing… UK ·checklist
Proton GDPR.eu compliance checklist A plain-language checklist of what a business must have in place under the GDPR: lawful basis and transparency, data security, accountability and governance, privacy rights.… checklist
Datatilsynet (NO) Datatilsynet checklist for businesses (Norway) The Norwegian DPA’s checklist of the duties a business has under the GDPR (applicable in Norway through the EEA Agreement), each point linking to the authority’s guidance. NO ·checklist
CNIL CNIL GDPR guide for developers The CNIL’s open guide for developers in eighteen factsheets: identifying personal data, preparing a project, securing the environment and code, minimising collection, managing… developer ·open source
AEPD Facilita RGPD (AEPD) The Spanish DPA’s questionnaire for businesses that process personal data with little risk (customers, staff, suppliers): from the answers it produces the minimum documents, such… ES ·calculator
AEPD Evalúa-Riesgo RGPD: does this processing need a DPIA? (AEPD) An online tool of the Spanish DPA that makes a first risk analysis of one processing operation and tells whether it is likely to need a DPIA, using the high-risk criteria of the… ES ·calculator