On 14 April 2016, the Commission Nationale de l’Informatique et des Libertés (CNIL) published three blanket authorisations for data controllers that operate in the social and healthcare sector. A blanket authorisation (“authorisation unique”) allows for a simplified registration procedure, where the data controller self certifies that its processing conforms to a “norm” dictated by the CNIL. The three blanket authorisations are AU 074 (social and medical assistance and monitoring of disabled and elderly persons); AU 048 (social assistance and monitoring of person in difficulties); and AU 049 (social assistance and monitoring within prevention and protection of minors and young adults). They are intended to be the first part of a “compliance pack” to be implemented by the CNIL in this sector.
Press release (in French)