228 éléments sous ce dossier.
La cyberattaque qui a touché les systèmes frigorifiques de la grande distribution soulève de nombreuses questions sur la responsabilité des distributeurs, des fabricants et des prestataires de maintenance.
Première publication sur Alliancy Depuis ce 11 septembre, les fabricants de produits numériques vendus dans l’UE doivent signaler certaines failles et incidents en 24 heures.
Au-delà d’une nécessité, l’intelligence artificielle en entreprise devient chaque jour un peu plus une réalité.
1. My company is not established in the EU. Should I really worry about the EU Data Act applying to my company? 2.
Depuis le 12 septembre 2025, l’essentiel des dispositions du règlement (UE) 2023/2854 (le « EU Data Act ») est devenu applicable.
Entretien avec Damien Licato Caruso - Le Parisien La charge est violente mais pas si surprenante.
Latournerie Wolfrom Avocats renforce son département technologies et propriété intellectuelle avec l’arrivée de Claude-Étienne Armingaud en qualité d’associé.
Le 12 septembre 2025 prochain, la majorité des dispositions du Règlement (UE) 2023/2854 (le Data Act de l’Union européenne) entreront en vigueur.
In a significant ruling on 14 February 2025, the First Instance Court of Nanterre, France ordered a company to suspend the deployment of several artificial intelligence tools until proper consultation with its Works Council has been completed.
💡 Executive Summary in English The ideal tool for law firm management is described as a “Second Brain” that centralizes all information including document management, client files, project tracking, and billing in an interconnected system AI enhances this system by: Facilitating data search and ex...
On 11 February 2024, the European Data Protection Board (EDPB) adopted a new statement on age assurance.
In a landmark judgment delivered on 29 January 2025, the General Court of the European Union has affirmed the European Data Protection Board’s (EDPB) authority to require national supervisory authorities to broaden their investigations in cross-border data protection cases.
In alignment with the ongoing concerns from several European data protection authorities publishing guidelines on data scrapping (i.e., the Dutch DPA, the Italian DPA and the UK Information Commissioner’s Office), the Global Privacy Assembly (GPA)’s International Enforcement Cooperation Working Grou...
The ever-growing digital economy relies extensively on all sorts of data to feed its growth, and personal data oftentimes find itself at the heart of companies’ core or emerging business practices.
Launched in 2015, the EU’s Digital Single Market Strategy aimed to foster the digital harmonization between the EU member states and contribute to economic growth, boosting jobs, competition, investment and innovation in the EU.
Dans le cadre de notre nouveau cycle de conférences autour du numérique et des problématiques « cyber », nous avons le plaisir de vous convier à un petit déjeuner organisé dans nos locaux parisiens, à l’occasion duquel Claude-Etienne Armingaud, CIPP/E (Associé, Protection des données & Technolog...
We kindly invite you to the K &L Gates Legal & Compliance Breakfast on 8 October 2024 in Frankfurt.
Entretien croisé réalisé par Dorian Marcellin avec notre confrère et ami Romain Perray.
Claude-Etienne Armingaud, avocat associé du cabinet K&L Gates spécialisé dans la protection de la vie privée et le droit des technologies, a identifié quatre points de défaillance potentiels dans la réaction du Parlement.
Digital intermediation service platforms within the sectors of chauffeur-driven transportation and goods delivery have new responsibilities since the enactment of Decree no.
A new regulatory landscape will reshape the food retail distribution in France starting from 01 July 2024, generalizing a mandatory obligation to inform consumers on product quantity changes and price trends.
Recent legislative updates have emerged in France, focusing on the intricate balance between national regulation and European Union directives —especially relevant to the evolving sector of commercial influence.
Four political groups have sent letters to the European Parliament President asking for further details, action, and “responsibilities” related to a recent data breach that affected a significant amount of employees’ personal data, including passports.
Six years after the European Regulation 2016/679 on the protection of personal data (“GDPR”) came into force, the European Union has just adopted a new regulation targeting a better distribution of the value generated by the use of data between players in the digital economy.
Six ans après l’entrée en vigueur du Règlement Européen 2016/679 sur la protection des données à caractère personnel (“RGPD”), l’Union Européenne vient d’adopter un nouveau règlement visant une meilleure répartition de la valeur générée par l’utilisation des données entre les acteurs de l’économie n...
Le message envoyé à tous ceux qui font appel à des brokers est très clair : il faut vérifier les données et tout ce qui s’y attache.
Can you give a brief overview of the EU AI Act and explain what its main objectives are? The EU AI Act started being discussed back in 2021.
A Practice Note highlighting issues to consider when counseling a prospective buyer of an AI company.
The Information Commissioner’s Office (ICO) has recently published guidance for employers on monitoring workers lawfully, transparently and fairly.
The Information Commissioner’s Office (ICO) recently launched a consultation series on how data protection laws should apply to the development and use of generative AI models (“Gen AI”).
Quoted in Agenda article “New EU AI Rules Will Have Global Impact”: The scope of the EU AI Act will apply to all companies whose AI systems are used or affect EU-based individuals, according to Claude-Etienne Armingaud , a partner in K &L Gates’ Paris office and a member of the law firm’s techno...
It has been some time already since the Digital Services Act (Regulation 2022/2065, DSA) was published, and since then, the discussions about Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) have dominated the media coverage (see initial press release of European Com...
It has been some time already since the EU Digital Services Act (Regulation 2022/2065, DSA) was published, and since then, the discussions about Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) have dominated the media coverage (see initial press release of European ...
The UK’s Information Commissioner’s Office (the “ICO”) has recently sent warnings to the UK’s most visited websites to inform them that they may face enforcement action if they do not make changes to their cookie banner to ensure compliance with UK data protection law.
On 18 October 2023, the French National Assembly voted in favour of a law aiming to secure and regulate the digital space (“ Loi visant visant à sécuriser et réguler l’espace numérique ” or “SREN”), otherwise called the “Sorare Act.” This new development marks a first step towards the establishment ...
A bit of Jyn Erso to wrap up the week! New episode of K&L Gates Gateway to Privacy is out, and this time with our first external guest — our dear friend Arya Tripathy joins us with Whitney McCollum and Camille Scarparo for a deep dive into India’s new data protection law, the Digital Personal Da...
L’accompagnement de l’innovation en Franc e La France, terre d’accueil pour les créateurs de start-up? On cite régulièrement la France dans les classements de pays innovants et favorable aux start-up.
This panel session will focus on the growing concern over the ethical use of Artificial Intelligence (AI) and its impact on privacy.
This panel session will focus on the growing concern over the ethical use of Artificial Intelligence (AI) and its impact on privacy.
Amidst a sudden increase in paid-for posts that went viral for dubious products and services, France has taken a significant step toward the regulation of influencer communication.
The UK Government has laid adequacy regulations before Parliament that, once in force from 12 October 2023, will permit use of the UK – US “Data Bridge” as a safeguard for personal data transfers from the UK to the US under Article 44 UK GDPR.
Depuis l’ouverture au grand public de ChatGPT en 2022, l’intelligence artificielle générative (ou « GenAI » pour Generative Artificial Intelligence) ne cesse d’occuper les sommaires des publications, qu’elles soient expertes ou grand public.
August may be perceived as the month where France shuts down for the summer.
Citations dans l’article 01net.com de Stéphanie Bascou, à propos de la validation du Data Privacy Framework entre l’Union Européenne et les États-Unis: “Ils ont mis de l’eau dans leur vin, il y a eu des compromis ”, estime Maître Claude-Etienne Armingaud, partenaire au sein de K&L Gates LLP.
In this webinar, our lawyers discuss generative artificial intelligence (AI). Fast paced growth in generative AI is changing the way we work and live.
On 14 June 2023, the European Parliament (Parliament) plenary voted on its position on the Artificial Intelligence Act (AI Act), which was adopted by a large majority, with 499 votes in favor, 28 against, and 93 abstentions.
Speakers: Zelda Olentia, Senior Product Manager, RadarFirst Claude-Étienne Armingaud, CIPP/E, Partner, Data Protection Privacy and Security Practice Group Coordinator, K&L Gates LLP Air Date : Wednesday 14 June at 1 pm ET / 10 am PT.
Entretiens croisés en compagnie d’Alexandra Iteanu, et Alan Walter du cabinet Walter Billet: Énormément de sociétés se sont emparé du sujet, confirme Claude-Etienne Armingaud, associé et membre de la pratique droit des nouvelles technologies & propriété intellectuelle de K&L Gates.
Closing in on the fifth anniversary of the entry into force of the EU General Data Protection Regulation (GDPR), the Irish Data Protection Commission (DPC) announced on 22 May 2023 that it had fined Meta for EUR 1,2b (USD 1.3b), the highest GDPR fine levied since 2018.
In this episode, Claude-Etienne Armingaud, Eleonora Curreri, and Camille Scarparo celebrate the fifth anniversary of GDPR accompanied with lawyers from our European offices; Thomas Nietsch and Andreas Müller (Berlin), Nóirín McFadden (London), and Gianmarco Marani (Milan).
In this episode, Claude Etienne Armingaud, Eleonora Curreri, and Camille Scarparo introduce a case regarding a U.S.
In this first episode, we discuss the challenges faced by data controllers in their compliance with Article 5 GDPR following the EU Court of Justice’s Digi Case C-77/21.
This program provides timely updates, best practices, and emerging developments in today’s data protection, privacy, and security industry.
Le choix du recours à Kleros résulte d’une volonté explicite des parties de soumettre leurs différends à cette plateforme.
Un grand merci à BSMART et Delphine Sabattier de donner de l’écho à la Journée Mondiale de la Protection des Données qui aura lieu ce samedi ! La réglementation (RGPD, Loi Informatique et Libertés) est-elle parfaite ? Non — mais avec ce double anniversaire (45è bougie de la CNIL - Commission Nationa...
This survey follows the CNIL’s announcement on 24 November 2022 that it aims at “ better understanding the economic challenges associated with the collection and processing of personal data in mobile applications ” as part of its 2022-2024 strategic plan.
On 27 October 2022, the Digital Services Act (DSA) was published in the EU Official Journal as Regulation (EU) 2022/2065, with the aim to fully harmonize the rules on the safety of online services and the dissemination of illegal content online.
« D’après le règlement européen sur la protection des données (RGPD), les entreprises doivent ne collecter que les données nécessaires », a pointé Claude Étienne-Armingaud.
« Le pétrole de la nouvelle économie… » C’est souvent par cette expression surannée que sont décrites les données qui résultent de notre utilisation des technologies.
Très heureux d’avoir accueilli ce matin en nos locaux GEOTAB pour la conférence « Flottes connectées, réglementation et expériences réussies », modérée par François Denis, Directeur Général France GEOTAB.
Sending unsolicited marketing emails could prove costly to UK organisations, as bike and car accessory retailer Halfords have recently discovered.
Virtual products, the metaverse, and non-fungible tokens (NFTs) have recently been expanding and receiving considerable attention from investors, the general public; as well as the art world – within the span of a year, NFT-backed virtual works of art have been reaching new height, from Beeple, Ever...
Following the positions expressed by the Austrian, German and French Supervisory Authorities (see our previous Alert), the Italian Supervisory Authority (Garante per la Protezione dei Dati Personali, Garante-) published on 9 June 2022 a specific measure, according to which website analytics solution...
The UK Government has finally published its highly anticipated Data Protection and Digital Information Bill (the Bill), marking the first significant post-Brexit change to the UK’s data protection regime.
On 29 June 2022, Decree n° 2022-946 (the “Decree ”) supplemented the regulatory framework resulting from the Ordinance n° 2021-1247 of 29 September 2021 on the legal warranty of conformity for goods, digital content and digital services (the “Ordinance ”).
FW: Could you provide an overview of trends in global data flows? To what extent is the business world now unavoidably reliant on the ability to share information instantly over vast distances? Armingaud: A global economy, with data being the fuel for that economy, means that globalised data is una...
Following the 2020 Court of Justice of the European Union’s (CJEU) ruling invalidating the Privacy Shield (see our alert here), personal data transfers from the European Union to the United States required EU companies to implement additional safeguard mechanisms, as the CJEU considered that U.S.
Individuals having difficulties in obtaining responses to their personal data subject access requests (DSAR) from French telephone operator Free Mobile filed several complaints before the Frenchdata protection authority (CNIL).
Over the past decade, influence marketing has changed the way advertising is handled by companies.
In the Queen’s speech at the state opening of parliament on 10 May 2022, the UK government announced its intention to change the UK’s data protection regime in a new Data Reform Bill.
WHAT YOU NEED TO KNOW IN A MINUTE OR LESS Reported incidents of data breaches have reached record levels over the last two years[ref]Experian Data Breach Resolution.
Transfer from the UK On 21 March 2022, the United Kingdom finalized the adoption of its own version of the European Union’s (EU) Standard Contractual Clauses (SCC), a contractual mechanism aiming at securing personal data protected under a data protection framework to third countries not deemed to o...
Quoted by Global Data Review: Claude-Étienne Armingaud, a partner at K&L Gates in Paris, said the decision would have little impact in practice.
During his January 2022 hearing before France’s National Assembly, the newly appointed chairman of the French competition authority (AdlC), Benoit Coeuré, stated that the digital sector would be one of the principal subject matters of his chairmanship (see press release here in English).
European regulators unofficially announced the major theme of this new year, through the release of several decisions pertaining to cookies and other tracking technologies in the first 10 days of 2022.
Counsel from jurisdictions where payments to employee-inventors only arise from contracts or employee incentive programs are sometimes surprised when they first become involved with jurisdictions that have statutory payment schemes for employee-inventors.
Join us on 19 January 2022 - 1.30pm GMT Host - Paul Hampton , Senior Product Manager, Thales Speakers : Stewart Room , Partner, Global Head of Data Protection & Cyber Security, DWF Claude-Étienne Armingaud, CIPP/E, Partner - Practice Group Coordinator | Data Protection, Privacy and Security, K&a...
Following the conclusion of the adequacy talksin March 2021, the European Commission has adopted on 17 December 2021 an adequacy decision addressing the transfers of personal data to the Republic of Korea under the General Data Protection Regulation (GDPR) and the Law Enforcement Directive.
France is widely known for its author-centric intellectual property right (IPR) framework: except for a limited number of very specific situations, all IPR must be expressly assigned and there is no “ work for hire ” doctrine.
On 6 October 2021, the Court of Justice of the European Union (CJEU or the Court) issued a judgment in case C-882/19 following a request for a preliminary ruling by the Court of Appeal of Barcelona (the Referring Court).
On a first day packed with fascinating insight at PrivSec Global, experts explored lessons that enterprise organisations have learned from the first three years of the GDPR.
The UK government has unveiled its much-trailed plans to reform its data protection laws, outlined in a consultation document which is open for public comment until 19 November 2021.
Further to investigations initiated by the Data Protection Commission (or DPC, the Irish supervisory authority) in 2018, Whatsapp Ireland Limited has received a EUR 225 million fine on 2 September 2021.
The UK government has announced that it intends to consult on a new, post-Brexit data protection regime, potentially moving away from the UK General Data Protection Regulation that currently underpins the UK’s data protection legislation.
The French data protection Supervisory Authority (The CNIL) has issued a fine totaling EUR 400,000 against Monsanto for failing to inform individuals whose personal data was collected and processed for lobbying purposes.
On 28 June 2021, within 48 hours of the expiration of the post-Brexit grace period under the UK-EU Trade and Cooperation Agreement, the European Commission has adopted two adequacy decisions addressing the transfers of personal data to the United Kingdom under the General Data Protection Regulation ...
BACKGROUND On 30 March 2021, the European Commission, in a joint statement with the Personal Information Protection Commission, the data protection authority of the Republic of Korea (Korea), declared that Korea ensured a level of protection for personal data that is similar to the level provided in...
Depending on whether you are an optimist or a pessimist, it will have taken the European Commission either three years and two weeks (since the entry into force of the General Data Protection Regulation (GDPR) or eleven months (since the Schrems II decision — see our Alert here) to publish its final...
La loi n°2016-1691 du 9 décembre 2016 relative à la transparence, à la lutte contre la corruption et à la modernisation de la vie économique, dite loi « Sapin 2 »[ref]Entrée en vigueur le 10 décembre 2016 (JORF n°0287 du 10 décembre 2016)[/ref], a instauré un principe général de prévention et de dét...
The French Law n°2016-1691 of 9 December 2016 relating to transparency, the fight against corruption, and the modernization of economic life, known as the “Sapin II” Act [ref]Sapin II entered into force on 10 December 2016 (JORF n°0287 of Dec.
Spécificité propre à cette application, on y accède par cooptation, ce qui attise l’appétit des profanes pour ce club très select que fréquentent Elon Musk, Mark Zuckerberg et Bill Gates.
Since the Schrems II decision of the Court of Justice of the European Union (CJEU) last year (see our alert here), companies in the European Union found themselves between a rock and a hard place, as many still rely on U.S.-based online service providers in one capacity or another, and the CJEU, in ...
La Commission Nationale de l’Informatique et des Libertés (CNIL) a clôturé l’année 2020 avec une amende de 20 000 euros à l’encontre la société française NESTOR spécialisée dans la préparation et la livraison de repas sur le lieu de travail (voir la décision complète CNIL, Décision SAN-2020-018, 8 D...
The French Supervisory Authority (CNIL) wrapped up 2020 with a EUR 20,000 fine against NESTOR, a French food preparation and delivery company catering to office employees (see full Decision SAN-2020-018 in French).
When the General Data Protection Regulation (“GDPR” - external source) came into force throughout the European Union nearly three years ago, one of its most eye-catching features was its extraterritorial jurisdiction provisions.
La CNIL fixe au 31 mars 2021 la fin du « délai raisonnable » pour mettre en conformité les sites web et applications mobiles.
The French Supervisory Authority has set 31 March 2021 as the end of the “reasonable period” to bring websites and mobile applications into compliance.
Venez célébrer avec nous le 2021 ce jeudi, et échanger sur les évènements à venir dans un cadre informel et dématérialisé (BYOB, évidemment).
The European Union (EU) and the United Kingdom (UK) finally came to an agreement on 24 December 2020 (EU-UK Trade and Cooperation Agreement, the Agreement), less than ten days after the European Data Protection Board (EDPB) published a statement on the consequences a no-deal situation would have on ...
Version française disponible ici.
English version available here.
Atlantico.fr : Le Conseil d’Etat vient d’autoriser l’élargissement des fichiers de police pour des motifs d’atteinte à la sécurité publique et à la sûreté de l’Etat.
Through its Act no.2020-1266 dated 19 October 2020 (the Act), the French legislator elected to regulate the commercial exploitation of the images of children aged 16 and under on online platforms (Kidfluencers).
Certains acteurs profitent de la situation pour tromper les consommateurs sur les conséquences légales de leurs offres, au moyen de locutions diverses et variées pour désigner des lettres recommandées électroniques qui n’en sont pas forcément.
With the Brexit transition period ending on 31 December 2020, and no deal in sight, the future of cross-border data transfers between the European Economic Area (the EEA) and the United Kingdom remains unclear.
« Pour décider, il faudrait créer une juridiction rapide , estime Claude-Etienne Armingaud, avocat chez K&L Gates LLP.
L’interview de Me Claude-Etienne Armingaud, expert en droit des nouvelles technologies (K&L Gates) : “Privatiser la justice entraînerait une privation de liberté ” **Le meurtre de Samuel Paty fait ressurgir le rôle des réseaux sociaux et leur difficile contrôle… Me Claude-Etienne Armingaud : **L...
“Derrière cette « décision éminemment politique » se cache un « clash » juridique.
www.youtube.com/watch We are currently experiencing an interesting time in our economy around the future of work.
Following the French Administrative Supreme Court (Conseil d’État) dated 19 June 2020 (see our Alert here), the French Supervisory (CNIL) published on 01 October 2020 its updated guidelines (the Guidelines), replacing its former guidelines published on 04 July 2019 (July Guidelines), along with prac...
Suite à la décision du Conseil d’État du 19 juin 2020 (voir notre alerte en anglais ici), la Commission nationale de l’informatique et des libertés (la « CNIL »), a publié le 1er octobre 2020 ses lignes directrices (les «Lignes Directrices »), abrogeant et remplaçant ses précédentes lignes directric...
Suite à la décision du Conseil d’État du 19 juin 2020 (voir notre alerte en anglais ici), la Commission nationale de l’informatique et des libertés (la « CNIL »), a publié le 1er octobre 2020 ses lignes directrices (les «Lignes Directrices »), abrogeant et remplaçant ses précédentes lignes directric...
With close to one billion active users on social media, platforms and businesses are constantly rolling out new features, upgrading their ad tools and creating new ways to engage with users, moving away from traditional marketing strategies.
The European Data Protection Board (EDPB) published two sets of new guidelines on 2 September 2020, on the concepts of controller and processor (Guidelines 07/2020, the Guidelines) and on the targeting of social media users (Guidelines 08/2020 - see our Alert here).
This document aims at presenting answers to some frequently asked questions received by supervisory authorities (“SAs”) and will be developed and complemented along with further analysis, as the EDPB continues to examine and assess the judgment of the Court of Justice of the European Union (the “Cou...
On 4 July 2019, the French Data Protection (CNIL) published its Guidelines on Cookies and Other Tracking Technologies (the Guidelines, available in French here).
On the morning of 16 July 2020, in a significant decision of the Court of Justice of the European Union (CJEU), the Privacy Shield was held to be invalid.
In a highly anticipated Schrems II decision, the Court of Justice of the European Union (CJEU) invalidated the Privacy Shield, the legal framework allowing transatlantic exchanges of personal data for commercial purposes between the European Union and the United States, mainly citing US surveillance...
With the recent decision from the Court of Justice of the European Union (CJEU) invalidating the Privacy Shield framework (Court of Justice of the European Union - Grand Chamber - 16 July 2020 - C-311/18 - Schrems II - see our alert GDPR - Data Transfers 20 Navigating Through Post-Schrems II Waters)...
The long awaited Schrems II decision was published by the Court of Justice of the European Union on 16 July 2020 (Schrems II) and while it has already been summarized as the death blow to the Privacy Shield framework and the confirmation of the validity of the Standard Contractual Clauses by many, ...
France’s top administrative court has overruled the country’s data authority regarding “cookie walls”, stating that as an agency that only offers guidelines – so-called flexible laws – the authority cannot prohibit their use.
Following its press release on the development of a new third country transfer module, the EU Data Protection Code of Conduct for Cloud Service Providers is proud to welcome internationally renowned law firm K&L Gates LLP as Supporter.
The current COVID-19 pandemic continues to raise many issues on employee privacy and how employers may balance processing their employees’ data with ensuring safety in the workplace.
While privacy concerns associated to the implementation of COVID-19 contact tracing apps across the European Union exist, the French Data Protection Authority (CNIL) also released a position paper on the collection of publicly available personal data for the purpose of direct marketing on 30 April 2...
Interview in the Washington Internet Daily Vol. 21, no. 100 dated 22 May 2020 available here.
As the COVID-19 pandemic continues to spread around the world and cause unprecedented health and economic challenges, technological measures, once thought extreme, are now being deployed for the purposes of contact tracing, infection tracking, and quarantine compliance.
Approaching its second anniversary this month, the European General Data Protection Regulation (GDPR) has never been as relevant as in these unprecedented COVID-19 times.
With COVID-19 officially declared a pandemic by the World Health Organization, European governments and companies, facing unprecedented challenges, are encouraging their employees to work from home, protect their health and support government measures.
On March 29, 2018, French President Emmanuel Macron announced his plan to turn France into a global leader in AI.
TRIBUNAL DE GRANDE INSTANCE DE PARIS ORDONNANCE DE RÉFÉRÉ rendue le 27 novembre 2019 N° RG 19/58626 N° Portalis 352J-W-B7D-CQFA H par Pascale COMPAGNIE, 1re vice-présidente au Tribunal de Grande Instance de Paris, agissant par délégation du Président du N° : 1/FF Tribunal, Assistée de Fabienne FELIX...
EU: IAPP Europe Data Protection Congress 2019 and Paris Pre-congress KnowledgeNet Meeting November will see several opportunities to discuss privacy matters in Europe and meet with The Privacist contributors within the K&L Gates’ platform, in connection with the International Association of Priv...
Retour sur l’ordonnance de référé du Tribunal de grande instance de Paris du 2 août 2019 rendue dans le contentieux ayant opposé la société Mile High Distribution à la société Orange S.A.
Brexit: Deal Or No-Deal? Data is the Question** With the Brexit deadline looming ahead on 31 October 2019, the situation seemingly reaches new levels of uncertainty every day.
A French Revolution, at last? Despite optimistic statements in 2016 on both sides of the Atlantic (in between the European Commission’s communication on connected cars for Europe, and the Obama administration’s Detroit Auto Show announcement), it would seem that some of the hype surrounding connecte...
Le 26 février 2019, le Comité Européen de la Protection des Données (« CEPD ») publiait un premier rapport (« First overview on the implementation of the GDPR and the roles and means of the national supervisory authorities » (le « Rapport »)) sur l’application du Règlement n°2016/679 du 27 avril 201...
Le feuilleton de l’été de la Revue Lamy Droit de l’Immatériel s’apprête à tirer sa révérence après les contributions de ce numéro aoûtien.
Entretien avec Atlantico.fr - 18 juillet 2019 Atlantico : Certaines applications qui permettent à une personne de modifier des photos prises sur son portable avec des filtres divertissants disposent de conditions générales d’utilisation particulièrement gênantes.
Le secteur de la publicité en ligne a été l’un des secteurs les plus touchés par l’entrée en vigueur du RGPD, qui a profondément transformé tant les règles de son jeu que les rapports de forces au sein de cet écosystème.
Si l’année écoulée a été marquée par l’engouement (voire l’affolement) suscité par l’entrée en vigueur du Règlement Général sur la Protection des Données n°2016-679 du 27 avril 2016 (« RGPD »), le cadre posé par ce nouveau règlement ne couvre qu’une partie de la politique européenne pour encadrer le...
Quels sont les principaux apports des lignes directrices sur la transparence du 29 novembre 2017 révisées le 11 avril 2018 ? La transparence, plus qu’une simple obligation légale1 et, de plus en plus morale pour les entreprises, matérialise la pierre angulaire du RGPD.
_Depuis plus d’un an, nous assistons à une génération spontanée de demandes d’acceptation à la mise en œuvre de traitement de données à caractère personnel (« _Données Personnelles _ »).
Le 25 mai 2018 - il y a un an déjà, mais pourtant, il n’y a qu’un an seulement.
Further to the adoption of the so-called Trademark Package at European level, comprised of Regulation no.2015/2424 (as codified by Regulation no.2017/1001 dated 14 June 2017) on EU Trademarks (the “Regulation ”) and Directive no.2015/2436, harmonizing Member States’ trademark regime (the “Directive ...
Italian law no.12/19 dated 11 January 2019 (the “Law ”) came into force on 13 February 2019 and cemented the legal enforceability of electronic timestamping performed through blockchain technologies.
Si la confiance n’exclut pas le contrôle, le contrôle ne saurait non plus outrepasser certains principes essentiels aux droits des salariés et caractériser la défiance de l’employeur à l’égard de ces derniers.
On 23 January 2019, the EU Data Protection Board (“EDPB ” - the gathering of all European Union (EU) data protection authorities) adopted opinion no.
On January 21, 2019, the French Data Protection Authority (Commission Nationale de l’Information et des Libertés, or “CNIL ”) published its first sanction rendered under the General Data Protection Regulation (“GDPR ”).
On 23 November 2018, the European Data Protection Board (“EDPB ”) - the gathering of all European Union (EU) data protection authorities - adopted new draft guidelines on territorial scope of the General Data Protection Regulation (“GDPR” - external source).
While Capitol Hill is inundated with proposed privacy legislations from the Data Breach Prevention and Compensation Act (DBPCA), the CLOUD Act and the ENCRYPT Act, organizations the world over are trying to understand how to get their own regulations deemed adequate enough to ensure the flow of busi...
Amidst the international tidal wave caused by the entry into force of the EU General Data Protection Regulation (“GDPR ”) in May 2018, many half, or even false truths have been spread about hindrance on a global scale of innovative technologies.
Voiture autonome : suit sa route La loi d’orientation des mobilités , dont le site en ligne Contexte a publié l’avant-projet la semaine dernière, permettrait au gouvernement de légiférer, via ordonnance, en ce qui concerne les véhicules autonomes sur des sujets tels que la formation ainsi que la cir...
Quand verra-t-on des voitures sans chauffeur sur les routes françaises ? Peut-être dès 2019 : comme proposé par le rapport Idrac remis en mai dernier, la loi Pacte devrait faciliter les expérimentations de voitures autonomes dans l’Hexagone.
“Quand verra-t-on des voitures sans chauffeur sur les routes françaises ? Peut-être dès 2019 : comme proposé par le rapport Idrac remis en mai dernier , la loi Pacte devrait faciliter les expérimentations de voitures autonomes dans l’Hexagone.
On 17 July 2018, the European Union (the “EU ”) and Japan reached an agreement to recognize each other’s data protections systems as “ equivalent ”, and each commits to complete internal procedures by fall 2018 (the “Data Agreement ”).
A la suite de l’amende record contre Google, Claude-Etienne Armingaud revient sur la question et les enjeux majeurs de la protection des données personnelles.
La prégnance croissante des technologies de l’information et de la communication (« TIC ») dans l’activité des entreprises, ainsi que le rôle central de tels systèmes dans la conduite quotidienne de leurs activités, force à considérer les problématiques liées à l’exploitation des TIC de façon éclair...
On 2 July 2018, the French Data Protection Authority (“Commission Nationale de l’Informatique et des Libertés” or “CNIL ”) published its yearly thematic guidance for the priority axes of its control activities, notably further to the entry into force of the recent General Data Protection Regulation ...
Consacré au développement des véhicules autonomes en France, le rapport Idrac a été rendu public le 14 mai 2018.
The French Autorité des Marchés Financiers has recently published a synthesis of the contributions it received in response to its public consultation on Initial Coin Offerings (ICOs) to obtain stakeholder views on how these new types of blockchain offerings might be regulated.
Mode information on K&L Gates website.
On 26 October 2017, France’s Financial Markets Authority, the “ Autorité des Marchés Financiers ” (“AMF ”), published a discussion paper focusing on initial coin offerings (“ICOs ”) that highlights the (many) dangers that arise from these unregulated transactions and discusses the regulation options...
Après plus de dix huit mois d’attente, la consultation de plus d’une vingtaine d’acteurs et deux versions intermédiaires, la Commission Nationale de l’Informatique et des libertés (CNIL) a publié ce mardi 17 octobre la version définitive d’un pack de conformité sur les véhicules connectés (« Pack de...
On 17 October 2017, after about 18 months of waiting, a consultation involving more than 20 players, and two intermediate versions, the French Data Protection Authority (“Commission Nationale de l’Informatique et des Libertés” or “CNIL ”) has released the final version of its “compliance package” on...
In June 2017, the Article 29 Working Party – the gathering the all Member States’ Data Protection Authorities (DPAs) – announced that the five last guidelines to be adopted as companion pieces to the General Data Protection Regulation (“GDPR”) would be published in December 2017.
Suite à l’annonce en juin dernier des cinq dernières lignes directrices sur le Règlement Européen sur la Protection des Données (« RGPD ») restant à adopter par le groupe de travail de l’Article 29, qui réunit les autorités nationales de protection des données des États membres, pour décembre procha...
Further to the adoption of Act no.2016-1691, dated 9 December 2016, on Transparency, Anti-Corruption and Modernization of Economic Life (“Sapin II ” – see our compliance coverage here) and the public consultation whose results were made public on 30 August 2017 (see our coverage here), the French Mi...
“«Le texte prévoit de consigner toute violation des données à caractère personnel, quel que soit le niveau de gravité de cette violation.
The French Act no.2016-1691 dated 9 December 2016 on Transparency, Anti-Corruption and Modernization of Economic Life (Or “Sapin II” – see our compliance coverage here) empowered the Government to amend the regulatory framework to facilitate the transmission of certain financial securities through b...
The European Union Court of Justice confirmed the intellectual property rights owned by the French company “ Forge de Laguiole ”, but solely in areas in which it pursued an actual business activity.
La Cour de Justice de l’Union Européenne (« CJUE ») a confirmé la protection accordée à la dénomination sociale de la société française « Forge de Laguiole », mais exclusivement pour les activités effectivement exercées par elle à la date d’enregistrement de la marque, conformément à la jurisprudenc...
Décision commentée : CA Paris, pôle 1, ch.
In view of the strong international dimension, notably European, of commercial issues related to trademarks, the economic players do not limit the scope of their protection to one single national territory anymore.
As stated in a previous article published in the Trademark and Unfair Competition Bulletin[ref]“FR - Creation of a new industrial property right in France : « The Geographical indication of industrial and handicraft products »”, Olivia Roche and Claude-Etienne Armingaud, TM and Unfair Competition Bu...
The new generic top-level domain (gTLD) .africa, a regional domain for users located in and out of the continent, has been officially validated by ICANN.
Global Manufacturing and Industrialisation Summit, Abu Dhabi.
The French Act No. 2016-1321 of 7 Oct.
After its invalidation of the data retention requirements imposed by Directive 2006/24/EC in its Digital Rights Ireland decision dated 8 April 2014, the ECJ was requested to assess the compatibility with the Directive 2002/58/EC (the “ePrivacy Directive ”) and the Charter of Fundamental Rights of th...
Le 23 février 2017, la Commission Nationale de l’Informatique et des Libertés (« CNIL ») a lancé une consultation publique sur trois thèmes : la notification de violation de données à caractère personnel, le profilage et le consentement.
The advent of autonomous cars represents a unique opportunity to rethink urbanism globally.
Quatre nouveaux arrêtés sectoriels relatifs à la sécurité des systèmes d’information des opérateurs d’importance vitale ont été publiés au Journal Officiel du 4 décembre 2016.
New China Article: “However, the convention has been signed by 75 contracting countries only, said Claude-Etienne Armingaud, Paris partner at K &L; Gates.
ArabianIndustry.com article by Fatima De La Cerna “Autonomous transportation systems may no longer be the stuff of science fiction, but there’s still a large amount of work, regulation-wise, that needs to be done before they can replace conventional vehicles on the road.
Despite the lack of announcement by UK Government to give notification to the EU under Article 50 of the Lisbon Treaty of its decision to withdraw from the Union, France is already making its move to move into the steps of the former Fintech capital of Europe.
La “blockchain” suscite la curiosité de professionnels de nombreux domaines, y compris des juristes.
Editions Legislative - Olivier Hielle “Au-delà de la création d’une monnaie cryptographique comme le Bitcoin, la blockchain permet d’autres applications.
On November 10, 2016, the French Government issued a decree against the financing of terrorism which contains various measures addressing anonymous electronic money [source in French].
On 3 October 2016, during a conference organized by the French Comity of Car Manufacturers (“CCFA ”) during the Paris Motor Show, Mrs.
Ce lundi 3 octobre 2016, lors d’une conférence organisée par le CCFA (Comité des Constructeurs Français d’Automobiles) en marge du Salon de l’Automobile de Paris, la Directrice de la conformité de la Commission Nationale de l’Informatique et des Libertés (la « CNIL »), Mme Sophie Nerbonne, a révélé ...
**LA QUESTION ** La blockchain.
Le Monde du Droit - Arnaud Dumourier “Quels sont vos objectifs pour ce cabinet ? Continuer de grandir et de nous diversifier, en décloisonnant les matières juridiques et les secteurs d’activités, qui s’entremêlent toujours plus.
“À 35 ans, Claude-Étienne Armingaud est coopté associé de K&L Gates.
On March 24, the French National Assembly hosted a day-long conference on “ Blockchain: Disruption and Opportunities.
Avec Internet, la photo passe du statut d’œuvre de l’esprit à celle de bien de consommation.
Dans la mouvance du projet de loi « Lemaire », la lettre recommandée électronique soulève un grand nombre de problématiques intéressantes dans le domaine contractuel qu’elle couvre actuellement.
While the Obama administration just announced that the financing of the autonomous car would be one of its last projects during the Detroit Auto Show, the research services from the European Parliament also published a prospective note on a similar topic.
Alors que l’administration Obama vient d’annoncer que le financement de la voiture autonome serait l’un de ses derniers chantiers en marge de l’Auto Show de Détroit , le service de la recherche du Parlement Européen vient également de publier une note prospective sur ce même sujet .
Following the November ’15 terror attacks in Paris, the French Trademark Office (“INPI”) received and subsequently rejected numerous attempts of registration of the signs “Pray For Paris” and “Je Suis Paris” (“I am Paris”).
On October 6 2015, the Commercial Division of the French Supreme Court (“Cour de Cassation”) confirmed the refusal of Paris Court of Appeal to register the “Ice Watch” trade mark.
The BIC company registered the shape of its renowned pens as a tri-dimensional Community trademark in 1997.
Le Gouvernement vient de clore la consultation publique ouverte à l’occasion du projet de loi pour une République numérique, défendu par Madame le Secrétaire d’État au Numérique Axelle Lemaire (le « Projet Lemaire »).
Atlantico : La signature électronique et la signature manuscrite constituent deux manières de donner son consentement de manière radicalement différente techniquement.
Impression 3D, voiture connectée, plateforme d’intermédiarisation, les innovations technologiques semblent progresser de manière exponentielle.
On October 6, 2015, the European Court of Justice (“ECJ”) ruled in the “Schrems” case that the U.S.-EU Safe Harbor framework on the transfer of personal data from Europe to the United States, was invalid.
Depuis l’ouverture de Facebook[ref]Année d’ouverture du site facebook.com après l’abandon du déterminant « The » mais toujours en version bêta [/ref], il y a dix ans à peine, les articles de presse générale et spécialisée se sont multipliés pour annoncer la venue d’un nouveau messie médiatique ou s’...
Ce nouveau régime de protection complète l’arsenal juridique de protection de la propriété industrielle.
The French law no.2014-344 on consumer protection, named “Hamon Act ” (for the name of the Ministry in charge of this reform) and dated March 17, 2014, creates a new industrial property right: the “Geographical Indications protecting Industrial Products and Crafts ” (or “ Indications Géographiques p...
Le présent article constitue une mise en perspective des arrêts Bluetouff rendu par la Cour d’appel de Paris, le 5 février 2014 et Svensson rendu par la Cour de justice de l’Union européenne, le 13 février 2014.
The earlier is the owner of the French and Community semi-figurative trademark “vente-privee.com”, underlined with a pink line drawn in diagonal, enriched by two pink butterflies.
Le récent engouement des médias pour la Big Data ne doit pas faire perdre de vue qu’à la source de ce concept se trouvent des données personnelles dont les traitements sont encadrés par la loi.
« _Big data _» : Depuis près d’un an, les spécialistes du marketing et de la relation client raffolent de cette nouvelle expression, au point de consacrer plusieurs numéros spéciaux de leurs publications au sujet.
La saga européenne des navigateurs embarqués fait l’objet d’une mise à jour pour Microsoft ce mercredi 6 mars.
La Vierge, l’Enfer de Dame Nation [dropcap]L[/dropcap]’internet tend facilement la joue lorsqu’on cherche un coupable de la crise économique qui frappe l’industrie française.
[dropcap]L[/dropcap]a Cour de justice européenne a précisé, dans un arrêt du 3 juillet 2012, que le droit de distribution d’un logiciel est épuisé après téléchargement payant et sans limitation de durée.
La difficile appréhension de la photographie comme œuvre de l’esprit et ses conséquences au cœur des réseaux sociaux.
Of the difficulty to frame photograph as a protected work and its consequences on social network.
Au milieu de la torpeur estivale de l’an dernier, la Commission Nationale de l’Informatique et des Libertés (CNIL) a publié une mise à jour de sa déclaration simplifiée relative aux traitements des données de clients et de prospects (ou « Norme simplifiée 48 »).
After almost a decade of vigorous debate among interested parties, the Court of Justice of the European Union (CJEU) has finally issued a decision that moves toward unifying the European perspective on internet filtering.
[dropcap]C[/dropcap]‘est dans la continuité de sa décision du 24 novembre 2011[ref]CJUE, 3ème chambre – 24 novembre 2011 – Affaire C70/10 – Scarlet Extended SA c./ SABAM (ci-après, “SABAM 1”)[/ref] que la Cour de Justice de l’Union Européenne (CJUE) s’est prononcée le 16 février dernier[ref]CJUE, 3è...
[dropcap]L[/dropcap]a police allemande aurait utilisé un “cheval de Troie” pour enregistrer les communications et contrôler à distance des ordinateurs.
[dropcap]A[/dropcap]lors que Noël arrive, l’affaire Wikipedia/Houellebecq semble ne plus avoir autant l’attention des médias.
[dropcap]L[/dropcap]e Sénat a adopté en première lecture dans la nuit du 26 au 27 octobre 2010 uneproposition de loi sur le prix unique du livre numérique, initiée par les sénateurs Catherine Dumas et Jacques Legendre, qui entendaient s’inspirer de la loi « Lang » instaurant depuis 1982 le système d...
Analyse juridique des dispositifs de protection envisageables Rapport réalisé par la FEVAD avec l’assistance du cabinet Morgan, Lewis & Bockius 1.