“No one is supposed to be ignorant of the law”
The General Data Protection Regulation, developed at the European level, has been applicable in France since May 25, 2018. Have you taken the steps to comply with the GDPR?
… French curses… and Europeans,
Even if you have a very small structure (a micro-enterprise for example), you can be concerned as long as you have a website. It applies implicitly to any foreign site with visibility in France (even minimal, even involuntary or unwanted)
In concrete terms, from the moment your site collects certain personal data , a form (newsletter or contact/email address, a competition, etc.), you must comply with the GDPR.
To find out about your obligations and comply with the GDPR, as well as the steps you need to take to meet them, follow the advice in this infographic or/and 2 free guides.
Beware of scams
At the same time, be careful if you receive an email “formal notice” from the CNIL concerning the application of this directive! It is probably a scam designed to scam you who are trying to take advantage of the windfall to make ends meet.
To avoid being trapped, it is best to take a few minutes to consult this article http://www.gautier-girard.com/actualites/attention-nouvelle-arnaque-des-escrocs-se-font-passer-pour-la-cnil/
In any case, if you have not yet taken the step of bringing your site and internal processes into compliance, it is time to think about it! Initially, the administration will be understanding and open to dialogue but… You might as well anticipate to avoid trouble!
Author of the infographic: orson.io
See also
https://www.cnil.fr/sites/default/files/atoms/files/bpi-cnil-guide-rgpd-tpe-pme.pdf