The French data protection authority (CNIL) has published its annual investigation program for 2018, and the report indicates that the CNIL intends to conduct more than 300 investigations and will focus on verifying GDPR compliance. It will investigate whether organizations are in compliance with the new obligations of the GDPR, including the right to portability and DPIAs. The CNIL will also verify compliance with preexisting data protection rules and principles under the French data protection regulation, in addition to the adequacy of the data provided and collected, the information of users, the way in which data is stored and retained, as well as security measures.
