The French Data Protection Authority (Commission nationale de l’informatique et des libertés – Cnil) is launching a public consultation on a draft practical guide designed to “clarify the legal obligations of open data distributors and reusers of publicly accessible data, as well as the best practices to be adopted with a view to protecting data from the outset”.
Consisting of “principles” and “use case” sheets, it is designed to “help stakeholders with their projects to open up and reuse publicly accessible data, in order to facilitate their compliance with the legal framework for personal data protection”.
The use cases concern the “dissemination and re-use of company data declared to the administration”, but also the re-use of publicly accessible data for the purposes of :
- distribution of enriched directories of professionals, particularly healthcare professionals, such as the health directory ;
- creation and enrichment of databases for commercial prospecting ;
- scientific research outside the field of health, the Cnil specifies that “this sheet nevertheless remains applicable to the processing of health data in the context of studies outside the field of health” ;
- fulfill the missions of public authorities.
Online data distributors and re-users of publicly accessible data are invited to respond to this public consultation, which is open until October 15, 2023.
The definitive guide will be available on the Cnil website by the end of 2023.
[Consultation (in French)] [The draft guide (in French)]