{"id":32985,"date":"2022-02-28T15:44:00","date_gmt":"2022-02-28T13:44:00","guid":{"rendered":"https:\/\/www.e2.law\/?post_type=compliances&p=32985"},"modified":"2022-12-05T13:06:44","modified_gmt":"2022-12-05T11:06:44","slug":"delegue-a-la-protection-des-donnees-dpo","status":"publish","type":"compliances","link":"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/","title":{"rendered":"Quand faut-il d\u00e9signer un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es (DPO)"},"content":{"rendered":"

Un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es<\/a> doit \u00eatre d\u00e9sign\u00e9 dans les cas suivants (RGPD,<\/a> art. 37)<\/p>\n

    \n
  1. Le traitement des donn\u00e9es est effectu\u00e9 par une autorit\u00e9 ou un organisme public<\/strong> (\u00e0 l’exception des juridictions agissant dans l’exercice de leur fonction juridictionnelle)<\/li>\n
  2. Les activit\u00e9s de base du responsable de traitement ou du sous-traitant consistent en des op\u00e9rations de traitement qui, du fait de leur nature, de leur port\u00e9e et\/ou de leurs finalit\u00e9s<\/strong>, exigent un suivi r\u00e9gulier<\/span> et syst\u00e9matique \u00e0 grande \u00e9chelle <\/span>des personnes concern\u00e9es<\/strong><\/li>\n
  3. Les activit\u00e9s de base du responsable de traitement ou du sous-traitant consistent en un traitement \u00e0 grande \u00e9chelle de cat\u00e9gories de donn\u00e9es particuli\u00e8res<\/strong> (sensibles selon l’article 9 du RGPD) ou de donn\u00e9es relatives aux condamnations p\u00e9nales et aux infractions<\/strong><\/li>\n<\/ol>\n

    A premi\u00e8re vue, il est possible de croire qu’une petite entreprise n’entrerait dans le champ d’application d’aucun de ces trois points. Pour autant, il faut se demander ce que signifient les termes \u00ab r\u00e9gulier \u00bb, \u00ab syst\u00e9matique \u00bb et \u00ab \u00e0 grande \u00e9chelle \u00bb<\/span> et comment les interpr\u00e9ter dans le cas de votre entreprise ou organisme.<\/strong><\/p>\n

    Les notions de \u00ab suivi r\u00e9gulier et syst\u00e9matique \u00bb sont interpr\u00e9t\u00e9s largement, au point de d\u00e9signer toutes les formes de suivi et de profilage<\/strong> (dont la publicit\u00e9 comportementale).<\/p>\n

    Nombre d’entreprises tomberont facilement dans ces interpr\u00e9tations qui peuvent concerner la majorit\u00e9 des traitements de donn\u00e9es personnelles.<\/strong><\/p>\n

    Le G29<\/a> pr\u00e9conise d’ailleurs la d\u00e9signation d’un DPO. Elle permet en effet de confier \u00e0 un expert l\u2019identification et la coordination des actions \u00e0 mener en mati\u00e8re de protection des donn\u00e9es personnelles.<\/p>\n

    <\/div><\/span><\/p>\n","protected":false},"featured_media":43328,"template":"","categories":[141],"tags":[],"class_list":["post-32985","compliances","type-compliances","status-publish","has-post-thumbnail","hentry","category-non-classifiee"],"acf":[],"yoast_head":"\nQuand faut-il d\u00e9signer un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es (DPO) - e2.law<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Quand faut-il d\u00e9signer un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es (DPO) - e2.law\" \/>\n<meta property=\"og:description\" content=\"Un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es doit \u00eatre d\u00e9sign\u00e9 dans les cas suivants (RGPD, art. 37) Le traitement des donn\u00e9es est effectu\u00e9 par une autorit\u00e9 ou un organisme public (\u00e0 l’exception des juridictions agissant dans l’exercice de leur fonction juridictionnelle) Les activit\u00e9s de base du responsable de traitement ou du sous-traitant consistent en des op\u00e9rations [...]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/\" \/>\n<meta property=\"og:site_name\" content=\"e2.law\" \/>\n<meta property=\"article:modified_time\" content=\"2022-12-05T11:06:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.e2.law\/wp-content\/uploads\/2022\/02\/learning.png\" \/>\n\t<meta property=\"og:image:width\" content=\"500\" \/>\n\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/compliances\\\/delegue-a-la-protection-des-donnees-dpo\\\/\",\"url\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/compliances\\\/delegue-a-la-protection-des-donnees-dpo\\\/\",\"name\":\"Quand faut-il d\u00e9signer un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es (DPO) - e2.law\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/compliances\\\/delegue-a-la-protection-des-donnees-dpo\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/compliances\\\/delegue-a-la-protection-des-donnees-dpo\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.e2.law\\\/wp-content\\\/uploads\\\/2022\\\/02\\\/learning.png?fit=500%2C500&ssl=1\",\"datePublished\":\"2022-02-28T13:44:00+00:00\",\"dateModified\":\"2022-12-05T11:06:44+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/compliances\\\/delegue-a-la-protection-des-donnees-dpo\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.e2.law\\\/fr\\\/compliances\\\/delegue-a-la-protection-des-donnees-dpo\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/compliances\\\/delegue-a-la-protection-des-donnees-dpo\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.e2.law\\\/wp-content\\\/uploads\\\/2022\\\/02\\\/learning.png?fit=500%2C500&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.e2.law\\\/wp-content\\\/uploads\\\/2022\\\/02\\\/learning.png?fit=500%2C500&ssl=1\",\"width\":500,\"height\":500},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/compliances\\\/delegue-a-la-protection-des-donnees-dpo\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Quand faut-il d\u00e9signer un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es (DPO)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/#website\",\"url\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/\",\"name\":\"e2.law\",\"description\":\"A Business Law Firm\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/#organization\",\"name\":\"E2.law\",\"url\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.e2.law\\\/wp-content\\\/uploads\\\/2018\\\/12\\\/logo-2.png\",\"contentUrl\":\"https:\\\/\\\/www.e2.law\\\/wp-content\\\/uploads\\\/2018\\\/12\\\/logo-2.png\",\"width\":152,\"height\":40,\"caption\":\"E2.law\"},\"image\":{\"@id\":\"https:\\\/\\\/www.e2.law\\\/fr\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/e2.law\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Quand faut-il d\u00e9signer un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es (DPO) - e2.law","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/","og_locale":"fr_FR","og_type":"article","og_title":"Quand faut-il d\u00e9signer un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es (DPO) - e2.law","og_description":"Un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es doit \u00eatre d\u00e9sign\u00e9 dans les cas suivants (RGPD, art. 37) Le traitement des donn\u00e9es est effectu\u00e9 par une autorit\u00e9 ou un organisme public (\u00e0 l’exception des juridictions agissant dans l’exercice de leur fonction juridictionnelle) Les activit\u00e9s de base du responsable de traitement ou du sous-traitant consistent en des op\u00e9rations [...]","og_url":"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/","og_site_name":"e2.law","article_modified_time":"2022-12-05T11:06:44+00:00","og_image":[{"width":500,"height":500,"url":"https:\/\/www.e2.law\/wp-content\/uploads\/2022\/02\/learning.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Dur\u00e9e de lecture estim\u00e9e":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/","url":"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/","name":"Quand faut-il d\u00e9signer un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es (DPO) - e2.law","isPartOf":{"@id":"https:\/\/www.e2.law\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/#primaryimage"},"image":{"@id":"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/www.e2.law\/wp-content\/uploads\/2022\/02\/learning.png?fit=500%2C500&ssl=1","datePublished":"2022-02-28T13:44:00+00:00","dateModified":"2022-12-05T11:06:44+00:00","breadcrumb":{"@id":"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/#primaryimage","url":"https:\/\/i0.wp.com\/www.e2.law\/wp-content\/uploads\/2022\/02\/learning.png?fit=500%2C500&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.e2.law\/wp-content\/uploads\/2022\/02\/learning.png?fit=500%2C500&ssl=1","width":500,"height":500},{"@type":"BreadcrumbList","@id":"https:\/\/www.e2.law\/fr\/compliances\/delegue-a-la-protection-des-donnees-dpo\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.e2.law\/fr\/home\/"},{"@type":"ListItem","position":2,"name":"Quand faut-il d\u00e9signer un d\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es (DPO)"}]},{"@type":"WebSite","@id":"https:\/\/www.e2.law\/fr\/#website","url":"https:\/\/www.e2.law\/fr\/","name":"e2.law","description":"A Business Law Firm","publisher":{"@id":"https:\/\/www.e2.law\/fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.e2.law\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/www.e2.law\/fr\/#organization","name":"E2.law","url":"https:\/\/www.e2.law\/fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.e2.law\/fr\/#\/schema\/logo\/image\/","url":"https:\/\/www.e2.law\/wp-content\/uploads\/2018\/12\/logo-2.png","contentUrl":"https:\/\/www.e2.law\/wp-content\/uploads\/2018\/12\/logo-2.png","width":152,"height":40,"caption":"E2.law"},"image":{"@id":"https:\/\/www.e2.law\/fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/e2.law"]}]}},"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.e2.law\/fr\/wp-json\/wp\/v2\/compliances\/32985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.e2.law\/fr\/wp-json\/wp\/v2\/compliances"}],"about":[{"href":"https:\/\/www.e2.law\/fr\/wp-json\/wp\/v2\/types\/compliances"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.e2.law\/fr\/wp-json\/wp\/v2\/media\/43328"}],"wp:attachment":[{"href":"https:\/\/www.e2.law\/fr\/wp-json\/wp\/v2\/media?parent=32985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.e2.law\/fr\/wp-json\/wp\/v2\/categories?post=32985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.e2.law\/fr\/wp-json\/wp\/v2\/tags?post=32985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}