{"id":11695,"date":"2021-04-21T22:59:06","date_gmt":"2021-04-21T20:59:06","guid":{"rendered":"https:\/\/blogdelarechercheclinique.com\/?p=11695"},"modified":"2025-06-12T14:50:42","modified_gmt":"2025-06-12T12:50:42","slug":"notify-cnil-violation","status":"publish","type":"post","link":"https:\/\/blogdelarechercheclinique.com\/en\/notify-cnil-violation\/","title":{"rendered":"Who must notify the CNIL of a violation?"},"content":{"rendered":"<p><iframe data-src=\"https:\/\/www.youtube.com\/embed\/QIP56Dlo3EA\" width=\"560\" height=\"315\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" data-load-mode=\"1\"><\/iframe><\/p>\n<p>Hello everyone, this is Manon DURAND, health lawyer at Pharmaspecific. We meet again to talk about the General Data Protection Regulation (the GDPR), which is the reference text in terms of personal data protection, and which came into force in the European Union on May 25, 2018.<\/p>\n<p>The question of the day is who should file a <a href=\"https:\/\/blogdelarechercheclinique.com\/en\/\"><strong>data breach notification with the CNIL<\/strong><\/a>. As a reminder, a personal data breach is a breach of security resulting in the accidental or unlawful destruction, loss, alteration or unauthorized disclosure of or access to personal data. When such a personal data breach occurs and it entails a risk to the rights and freedoms of the persons concerned, it must be notified to the CNIL within 72 hours.<\/p>\n<p>In practice, how does this happen? If the clinical research associate (CRA) realizes that a personal data breach has occurred, he\/she informs the project manager who will contact the sponsor &#8211; or its DPO, if one has been designated &#8211; directly so that the latter can notify the CNIL of the breach. It is therefore the sponsor or its DPO who will be responsible for this breach notification.<\/p>\n<p>When a subcontractor works with the controller, with the developer, the same applies: if there is a personal data breach at the subcontractor&rsquo;s premises, it must directly inform the developer or its DPO, who will be responsible for notifying the data breach to the CNIL.<\/p>\n<p>In conclusion, the person in charge of making this <a href=\"https:\/\/blogdelarechercheclinique.com\/en\/\"><strong>data breach notification to the CNIL<\/strong><\/a>, within the 72-hour time limit, is the sponsor or his DPO if he has been appointed.<\/p>\n<p>Get in touch with the CNIL website to find out how to notify a data breach to the CNIL, knowing that when the breach does not entail any risk for the rights and freedoms of the persons concerned, you simply have to document it internally, if the breach entails a risk, you have to document it internally and inform the CNIL within 72 hours, and finally, if the risk is high, you have to document it internally, notify it to the CNIL and inform the persons concerned as soon as possible<\/p>\n<p>That&rsquo;s it for this new video, I hope you liked it. If you did, don&rsquo;t hesitate, as usual, to subscribe to our channel, to like this video and you will find in the information bar the information about our services and in particular the monthly legal watch and the legal advice in clinical research. As for me, I&rsquo;ll see you soon for a new video.<\/p>","protected":false},"excerpt":{"rendered":"<p>We meet again to talk about the General Data Protection Regulation (the GDPR), which is the reference text in terms of personal data protection, and which came into force in the European Union on May 25, 2018.<\/p>","protected":false},"author":4,"featured_media":14376,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"facebook_122143508198123560_331463380343150":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[873],"tags":[],"class_list":{"0":"post-11695","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-clinical-research-news"},"translation":{"provider":"WPGlobus","version":"3.0.2","language":"en","enabled_languages":["fr","en"],"languages":{"fr":{"title":true,"content":true,"excerpt":true},"en":{"title":false,"content":false,"excerpt":false}}},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Who must notify the CNIL of a violation?<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blogdelarechercheclinique.com\/en\/notify-cnil-violation\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Who must notify the CNIL of a violation? -\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blogdelarechercheclinique.com\/en\/notify-cnil-violation\/\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/blogdelarechercheclinique\" \/>\n<meta property=\"article:published_time\" content=\"2021-04-21T20:59:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-12T12:50:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/violation-donnees-personnelles.png\" \/>\n\t<meta property=\"og:image:width\" content=\"556\" \/>\n\t<meta property=\"og:image:height\" content=\"307\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Vanessa Montanari\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Vanessa Montanari\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/\"},\"author\":{\"name\":\"Vanessa Montanari\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/13ee3f7a1251afe7e98918a482685938\"},\"headline\":\"Who must notify the CNIL of a violation?\",\"datePublished\":\"2021-04-21T20:59:06+00:00\",\"dateModified\":\"2025-06-12T12:50:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/\"},\"wordCount\":433,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/violation-donnees-personnelles.png?fit=556%2C307&ssl=1\",\"articleSection\":[\"Clinical Research News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/\",\"url\":\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/\",\"name\":\"Who must notify the CNIL of a violation?\",\"isPartOf\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/violation-donnees-personnelles.png?fit=556%2C307&ssl=1\",\"datePublished\":\"2021-04-21T20:59:06+00:00\",\"dateModified\":\"2025-06-12T12:50:42+00:00\",\"description\":\"The question of the day is who should file a data breach notification with the CNIL. In practice, how does this happen? If the clinical research associate (CRA) realizes that a personal data breach has occurred, he\/she informs the project manager who will contact the sponsor. In conclusion, the person in charge of making this data breach notification to the CNIL, within the 72-hour time limit, is the sponsor or his DPO if he has been appointed. That's it for this new video, I hope you liked it. If you did, don't hesitate, as usual, to subscribe to our channel, to like this video and you will find in the information bar the information about our services and in particular the monthly legal watch and the legal advice in clinical research. As for me, I'll see you soon for a new video.\",\"breadcrumb\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#primaryimage\",\"url\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/violation-donnees-personnelles.png?fit=556%2C307&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/violation-donnees-personnelles.png?fit=556%2C307&ssl=1\",\"width\":556,\"height\":307,\"caption\":\"Violation donn\u00e9es personnelles\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/blogdelarechercheclinique.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Who must notify the CNIL of a violation?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#website\",\"url\":\"https:\/\/blogdelarechercheclinique.com\/\",\"name\":\"Blog de la recherche clinique\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blogdelarechercheclinique.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#organization\",\"name\":\"Blog de la recherche clinique\",\"url\":\"https:\/\/blogdelarechercheclinique.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/04\/cropped-BLOG-logo.png?fit=512%2C512&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/04\/cropped-BLOG-logo.png?fit=512%2C512&ssl=1\",\"width\":512,\"height\":512,\"caption\":\"Blog de la recherche clinique\"},\"image\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/blogdelarechercheclinique\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/13ee3f7a1251afe7e98918a482685938\",\"name\":\"Vanessa Montanari\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ddf428208f542d6c2239ace6606ebe9beb71049642a9c784967f23e4e76e8efc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ddf428208f542d6c2239ace6606ebe9beb71049642a9c784967f23e4e76e8efc?s=96&d=mm&r=g\",\"caption\":\"Vanessa Montanari\"},\"url\":\"https:\/\/blogdelarechercheclinique.com\/en\/author\/vanessa\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Who must notify the CNIL of a violation?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blogdelarechercheclinique.com\/en\/notify-cnil-violation\/","og_locale":"en_US","og_type":"article","og_title":"Who must notify the CNIL of a violation? -","og_url":"https:\/\/blogdelarechercheclinique.com\/en\/notify-cnil-violation\/","article_publisher":"https:\/\/www.facebook.com\/blogdelarechercheclinique","article_published_time":"2021-04-21T20:59:06+00:00","article_modified_time":"2025-06-12T12:50:42+00:00","og_image":[{"width":556,"height":307,"url":"https:\/\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/violation-donnees-personnelles.png","type":"image\/png"}],"author":"Vanessa Montanari","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Vanessa Montanari","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#article","isPartOf":{"@id":"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/"},"author":{"name":"Vanessa Montanari","@id":"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/13ee3f7a1251afe7e98918a482685938"},"headline":"Who must notify the CNIL of a violation?","datePublished":"2021-04-21T20:59:06+00:00","dateModified":"2025-06-12T12:50:42+00:00","mainEntityOfPage":{"@id":"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/"},"wordCount":433,"commentCount":0,"publisher":{"@id":"https:\/\/blogdelarechercheclinique.com\/#organization"},"image":{"@id":"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/violation-donnees-personnelles.png?fit=556%2C307&ssl=1","articleSection":["Clinical Research News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/","url":"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/","name":"Who must notify the CNIL of a violation?","isPartOf":{"@id":"https:\/\/blogdelarechercheclinique.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#primaryimage"},"image":{"@id":"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/violation-donnees-personnelles.png?fit=556%2C307&ssl=1","datePublished":"2021-04-21T20:59:06+00:00","dateModified":"2025-06-12T12:50:42+00:00","description":"The question of the day is who should file a data breach notification with the CNIL. In practice, how does this happen? If the clinical research associate (CRA) realizes that a personal data breach has occurred, he\/she informs the project manager who will contact the sponsor. In conclusion, the person in charge of making this data breach notification to the CNIL, within the 72-hour time limit, is the sponsor or his DPO if he has been appointed. That's it for this new video, I hope you liked it. If you did, don't hesitate, as usual, to subscribe to our channel, to like this video and you will find in the information bar the information about our services and in particular the monthly legal watch and the legal advice in clinical research. As for me, I'll see you soon for a new video.","breadcrumb":{"@id":"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#primaryimage","url":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/violation-donnees-personnelles.png?fit=556%2C307&ssl=1","contentUrl":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/violation-donnees-personnelles.png?fit=556%2C307&ssl=1","width":556,"height":307,"caption":"Violation donn\u00e9es personnelles"},{"@type":"BreadcrumbList","@id":"https:\/\/blogdelarechercheclinique.com\/notify-cnil-violation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/blogdelarechercheclinique.com\/"},{"@type":"ListItem","position":2,"name":"Who must notify the CNIL of a violation?"}]},{"@type":"WebSite","@id":"https:\/\/blogdelarechercheclinique.com\/#website","url":"https:\/\/blogdelarechercheclinique.com\/","name":"Blog de la recherche clinique","description":"","publisher":{"@id":"https:\/\/blogdelarechercheclinique.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blogdelarechercheclinique.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/blogdelarechercheclinique.com\/#organization","name":"Blog de la recherche clinique","url":"https:\/\/blogdelarechercheclinique.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogdelarechercheclinique.com\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/04\/cropped-BLOG-logo.png?fit=512%2C512&ssl=1","contentUrl":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/04\/cropped-BLOG-logo.png?fit=512%2C512&ssl=1","width":512,"height":512,"caption":"Blog de la recherche clinique"},"image":{"@id":"https:\/\/blogdelarechercheclinique.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/blogdelarechercheclinique"]},{"@type":"Person","@id":"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/13ee3f7a1251afe7e98918a482685938","name":"Vanessa Montanari","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ddf428208f542d6c2239ace6606ebe9beb71049642a9c784967f23e4e76e8efc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ddf428208f542d6c2239ace6606ebe9beb71049642a9c784967f23e4e76e8efc?s=96&d=mm&r=g","caption":"Vanessa Montanari"},"url":"https:\/\/blogdelarechercheclinique.com\/en\/author\/vanessa\/"}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/violation-donnees-personnelles.png?fit=556%2C307&ssl=1","jetpack-related-posts":[{"id":11689,"url":"https:\/\/blogdelarechercheclinique.com\/en\/dpo-data-protection-officer\/","url_meta":{"origin":11695,"position":0},"title":"How do I become a DPO (Data Protection Officer)?","author":"Vanessa Montanari","date":"21 April 2021","format":false,"excerpt":"The question of the day is how to become a DPO. As a reminder, the DPO or data protection officer, is the person who will take care of the compliance of the company that has appointed him to the GDPR. That is to say, he is the one who will\u2026","rel":"","context":"In &quot;Becoming a Clinical Research Associate: training, funding&quot;","block_context":{"text":"Becoming a Clinical Research Associate: training, funding","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/becoming-a-clinical-research-associate-training-funding\/"},"img":{"alt_text":"D\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/DPO.png?fit=552%2C308&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/DPO.png?fit=552%2C308&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/DPO.png?fit=552%2C308&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":11686,"url":"https:\/\/blogdelarechercheclinique.com\/en\/gdrp-assessment-after-processing\/","url_meta":{"origin":11695,"position":1},"title":"GDPR: Can an impact assessment be made after once the processing has begun?","author":"Vanessa Montanari","date":"21 April 2021","format":false,"excerpt":"We are meeting today to talk about the General Data Protection Regulation (the GDPR) which is, I remind you, the reference text in terms of personal data protection and which came into force in the European Union on May 25, 2018.","rel":"","context":"In &quot;Clinical Research News&quot;","block_context":{"text":"Clinical Research News","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/clinical-research-news\/"},"img":{"alt_text":"analyse d'impact RGPD","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":1459,"url":"https:\/\/blogdelarechercheclinique.com\/en\/invalidation-safe-harbor\/","url_meta":{"origin":11695,"position":2},"title":"Invalidation of Safe Harbor, what to do?","author":"Vanessa Montanari","date":"4 November 2015","format":false,"excerpt":"Did you know that the trade agreement between the European Economic Area and the United States had been invalidated and that personal data transfers made under the Safe Harbor framework were not allowed? Here concretely what this means for your tests.","rel":"","context":"In &quot;Les r\u00e8glementaires&quot;","block_context":{"text":"Les r\u00e8glementaires","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/reglementaires\/"},"img":{"alt_text":"Personal datas transfer to USA","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2015\/11\/safe-harbour.png?fit=777%2C557&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2015\/11\/safe-harbour.png?fit=777%2C557&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2015\/11\/safe-harbour.png?fit=777%2C557&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2015\/11\/safe-harbour.png?fit=777%2C557&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":11692,"url":"https:\/\/blogdelarechercheclinique.com\/en\/gdrp-certification-company-compliant\/","url_meta":{"origin":11695,"position":3},"title":"Is there an GDPR certification? How can I prove that my company is GDRP compliant?","author":"Vanessa Montanari","date":"21 April 2021","format":false,"excerpt":"We're meeting again to talk about the General Data Protection Regulation (the GDPR), which is the reference text in terms of personal data protection, and which came into force in the European Union on May 25, 2018.","rel":"","context":"In &quot;Clinical Research News&quot;","block_context":{"text":"Clinical Research News","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/clinical-research-news\/"},"img":{"alt_text":"Certification RGPD","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/Certification-RGPD.png?fit=552%2C307&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/Certification-RGPD.png?fit=552%2C307&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/Certification-RGPD.png?fit=552%2C307&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":11536,"url":"https:\/\/blogdelarechercheclinique.com\/en\/invalidating-privacy-shield-clinical-researc\/","url_meta":{"origin":11695,"position":4},"title":"The earthquake:  Invalidating the Privacy Shield and clinical research (Now, what?)","author":"Vanessa Montanari","date":"22 November 2020","format":false,"excerpt":"Hello everyone, this is Manon Durand, health lawyer with Pharmaspecific. Today, we are going to talk about the protection of personal data through the invalidation of the privacy shield.","rel":"","context":"In &quot;Clinical Research News&quot;","block_context":{"text":"Clinical Research News","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/clinical-research-news\/"},"img":{"alt_text":"Privacy shield","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/invalidation-privacy-shield.png?fit=552%2C307&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/invalidation-privacy-shield.png?fit=552%2C307&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/invalidation-privacy-shield.png?fit=552%2C307&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":13922,"url":"https:\/\/blogdelarechercheclinique.com\/en\/mr-002-clinical-research\/","url_meta":{"origin":11695,"position":5},"title":"After the MR-001, the MR-002&#8230; procession statement biomedical research","author":"Vanessa Montanari","date":"11 November 2015","format":false,"excerpt":"In a previous blog post that you can find here, we told you about the RM-001, procedure simplifying the data processing statement during biomedical research at the CNIL-France (National Commission for Data Protection and Liberties).","rel":"","context":"In &quot;Les r\u00e8glementaires&quot;","block_context":{"text":"Les r\u00e8glementaires","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/reglementaires\/"},"img":{"alt_text":"MR002: nouvelle m\u00e9thodologie de r\u00e9f\u00e9rence","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/05\/MR002.png?fit=738%2C656&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/05\/MR002.png?fit=738%2C656&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/05\/MR002.png?fit=738%2C656&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/05\/MR002.png?fit=738%2C656&ssl=1&resize=700%2C400 2x"},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/posts\/11695","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/comments?post=11695"}],"version-history":[{"count":2,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/posts\/11695\/revisions"}],"predecessor-version":[{"id":14381,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/posts\/11695\/revisions\/14381"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/media\/14376"}],"wp:attachment":[{"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/media?parent=11695"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/categories?post=11695"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/tags?post=11695"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}