Data Breach Notifications

and the advice that DPAs are giving in various European countries – France

• Paraskevi Georganta

Between the 25 May 2018 and the 1st October 2018, the French Data Protection Authority, the Commission Nationale Informatique et Libertés (CNIL) received 742 data breach notifications involving the data of 33.727.384 persons in France or abroad:
– 695 notifications concerned data confidentiality breach,
– 71 notifications involved incidents regarding the data availability,
– 50 notifications involved a breach relevant with the integrity of the data.
CNIL commented that this high proportion of confidentiality breaches could be explained by the fact that integrity and availability issues include most of the times confidentiality failures. Moreover, enterprises often have the means to retrieve data within 72 hours of an integrity or availability incident.