On 25 November 2020, the French DPA (“CNIL”) launched a public consultation on its draft recommendation regarding the applicable framework in case data subjects mandate an agent to exercise their data protection rights.
Among others, according to the CNIL’s press release, the draft recommendation addresses the form of the mandate and its content, the specific cases where a mandate can be renewed automatically, the cases where a controller may consider a request of an agent acting on the data subjects behalf as being manifestly unfounded or excessive, and the conditions under which an agent can reuse the data that has been the subject of the exercise of the right, for his/her own purposes.
The public consultation will end on 6 January 2021.
The press release may be accessed here, the draft recommendation here, and an example of the mandate may be accessed here (only in French).
