Tine A. Larsen, president of the Commission Nationale pour la Protection des Donnés explained that her service is looking to offer advice and information about the directive. This includes new brochures detailing new data obligations, but also a new online data breach notification form which is mandatory under GDPR. A new support tool is also available on the CNPD website. Larsen also briefly addressed the status of the UK after Brexit, when it will be a third country. “The UK is a leader in data protection, and its government has made clear its intention to retain this status. Data protection is therefore a key policy area in Brexit negotiations,” she said on 28 February 2018.
Arnaud Habran from the CNPD legal service, together with Gary Cywie, legal counsel in data protection, delivered more detailed explanations of the obligations companies face in transferring data. Habran provided a guide the principals of data protection under the directive. “The accountability principal, which is a new thing under GDPR, means that you not only have to respect the six other principals, but also have to be able to demonstrate your compliance,” he said.