Conclusion

Since the introduction of the French Data Protection Act in 1978, the nature, diversity and quantity of personal data processing have exploded. At the same time, French, European and international regulations have been updated in leaps and bounds to take account of these developments. Building these regulatory frameworks is a difficult operation that must ensure the protection of individuals against increasingly complex risks, but also take into account the need to implement increasingly rich processing, which benefits both organizations and individuals. The RGPD attempts to incorporate new issues, such as the right to be forgotten or profiling, which has led to it being criticized as hindering certain innovative activities or imposing unreasonable responsibilities on businesses. It also strives to lighten the formalities weighing on organizations, focusing on the most problematic processing...