On July 10, 2023, the European Commission (“Commission”) adopted an adequacy decision for the EU-US Data Privacy Framework (“DPF”). The DPF is the successor to the EU-US Privacy Shield, which the Court of Justice of the European Union (“CJEU”) declared invalid in 2020.

This adequacy decision reflects agreement by the Commission that the DPF offers

On January 14, the French data protection authority (the “CNIL”) released a proposal for a set of practical requirements for placing cookies in web-based and mobile application environments (the “Recommendations”).

The Recommendations1 follow the CNIL’s publication in July 2019 of guidelines summarizing the applicable cookies framework and its later consultation with stakeholders in the