Providers of analytics solutions must now independently assess their compliance with the exemption regime, while website or application publishers remain responsible for proper implementation. That is because the CNIL (the French Data Protection Authority) is moving from its consent exemption validation program to a self-assessment model.
The CNIL introduced a