France’s data protection authority, the Commission nationale de l’informatique et des libertés, released the final version of its guide on data transfer impact assessments. The CNIL described the guide as providing “a methodology that identifies the steps prior to carrying out” a TIA. The regulator also outlined the changes to the final guide following a prior public consultation.
Full story