Taking GDPR training has many advantages. You will gain an in-depth understanding of data protection regulations, enabling you to implement compliant practices, avoid costly data breaches, and build trust with your customers. In addition, you will be able to make informed decisions and assume your responsibilities as a data controller. Following inspections or complaints, in the event of lack of knowledge of the provisions of the GDPR or the law on the part of data controllers and subcontractors, the CNIL may impose sanctions on data controllers and/or their subcontractors who do not comply with these texts.
When breaches of the GDPR or the law are brought to its attention, the CNIL can:
-
- Pronounce a call to order;
-
- Order the processing to be brought into compliance, including under penalty;
-
- Temporarily or permanently limit treatment;
-
- Order to satisfy requests to exercise people’s rights, including under penalty;
-
- Pronounce an administrative fine which may be made public and the amount of which may be:
-
- Up to 2% of the company’s global turnover for breaches such as the absence of a processing register, failure to notify following a detected vulnerability, failure to carry out a privacy impact study (in the case of sensitive data), etc.
-
- Up to 4% of global turnover, particularly in the event of refusal to comply with orders from the CNIL, illegal data processing, lack of consent, non-respect of individual rights, etc.
Also, any person affected by a violation of their personal data by the data controller and/or its subcontractor, and having suffered material or moral damage as a result of this violation, may obtain compensation for their damage, particularly in the form of damages. In the event of an inspection by the CNIL, you must be able to guarantee the protection of personal data and demonstrate the measures taken for this purpose.