Blog

News, expert advice, best practices... It's all here! Explore our blog to decipher the key issues in personal data protection and keep abreast of the latest developments.

Voir tout
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
GDPR compliance and best practices

Digital governance and privacy: why we need to treat the causes rather than the symptoms

Faced with the omnipresence of screens and AI, current regulations often simply treat symptoms rather than causes. For data professionals, the challenge goes beyond simple compliance with the GDPR: it is a question of restoring real attentional and decision-making sovereignty. This summary analyzes why systemic governance is essential to protect human balances and collective performance.
Guillemette Songy
Articles
GDPR compliance and best practices

What does cookies mean: definition and advice to protect your browsing

Understanding what cookies mean is essential to protect your online privacy in 2026. A cookie is a digital memory placed by a site on your browser to remember your preferences or track your behavior. While they offer convenience (basket, language), they also ask the question of whether to accept cookies in the face of the risks of profiling. This guide gives you a clear cookie def and the method to clear Chrome cookies in one click.
Anne-Angélique de Tourtier
Articles
GDPR compliance and best practices

AI and cybersecurity: how to anticipate compliance with the AI Act

The entry into force of the AI Act defines the new framework for European innovation, reconciling technology and the protection of fundamental rights. For DPOs and CISOs, this regulation imposes increased vigilance on the “red lines” of Article 5, such as cognitive manipulation or social scoring. The success of your compliance now depends on integrated governance, linking the requirements of the AI Act to the rigor of the GDPR to ensure a sovereign and secure growth trajectory.
Anne-Angélique de Tourtier
Articles
News

Cegedim Santé data leak: when medical confidentiality is endangered

The e-health sector is going through a major crisis with the massive intrusion suffered by Cegedim Santé, jeopardizing the personal data of nearly 15 million French patients. While medical records have become the priority target of cybercriminals on the dark web, this flaw highlights the fragility of digital medical infrastructures. This analysis deciphers the mechanisms of the attack, the risks of the supply chain (supply chain risk) and the concrete protection measures to be deployed to restore trust between practitioners and patients.
Guillemette Songy
Actualités
News

GDPR and IA Act compliance: summary of the major news of March 2026

The month of March 2026 marks a turning point in digital governance with the forced convergence between cybersecurity, data protection and the regulation of artificial intelligence. Between the historic condemnation of Meta, the adoption of the Resilience Law transposing NIS 2 and DORA, and the official designation of the CNIL as the supervisory authority for the IA Act, compliance officers must now unify their processes. This summary analyzes systemic threats and regulatory changes to transform your obligations into performance drivers.
Calixte Descamps
Articles
Interviews

AI and GDPR compliance in health: feedback from Artic with Adequacy

Compliance with the GDPR and the AI Act is a major challenge for health and clinical research actors. In this exchange, Eve Lepicard and Sophie Malabous from the Artic association explain how the use of Adequacy compliance software allows them to structure their processing register in an agile way. Thanks to an educational interface and the support of Calixte Descamps, they transform regulatory constraints into concrete operational deliverables.
Calixte Descamps
Interview
GDPR compliance and best practices

AI in health: risks, AI Act compliance and GDPR challenges

The integration of AI in health imposes new compliance challenges related to the GDPR and the AI Act. While the ergonomics of the tools facilitate care, it should not lead to medical disempowerment. For DPOs and CISOs, the challenge is to guarantee effective human surveillance and data sovereignty in the face of legal and technical risks. Learn how to secure your AI deployments while respecting medical confidentiality.
Calixte Descamps
Articles
Secteur de la santé

AI Act et RGPD en santé : comment concilier les deux réglementations avec Adequacy ?

L'entrée en vigueur de l'IA Act ne doit pas être vue comme une contrainte supplémentaire mais comme une extension naturelle du RGPD, particulièrement dans le secteur de la santé où les systèmes sont souvent classés à haut risque. La réussite de cette double mise en conformité repose sur l’AIPD, pivot central permettant d'intégrer la transparence et la supervision humaine. Grâce à Adequacy, cette interopérabilité réglementaire devient un levier d'innovation éthique et de gain de temps opérationnel.
Calixte Descamps
Articles
GDPR compliance and best practices

UNSS and Cegedim Santé data leaks: how to regain control?

The news at the beginning of 2026 is marked by two major data breaches: the theft of 1.5 million photos of UNSS students and the intrusion at Cegedim Santé affecting 15 million patients. Faced with this “long-lasting” hemorrhage of data (health, identity of minors), RGPD compliance must evolve from simple administrative management to an active resilience system. For professionals, this means strict control of third party risks, the adoption of strong authentication (MFA) and a rigorous data purge policy.
Guillemette Songy
Articles
Secteur de la santé

How to frame the reuse of health data: a look back at our webinar

Discover the questions asked during our webinar “How to frame the reuse of health data?”. Led by Calixte Descamps (Adequacy) and Valentine Chauveau (Aumans Avocats), it provides concrete answers on legality, health data warehouses (EDS) and the AI Act to ensure your GDPR compliance. The replay and the PPT support are available to deepen these issues.
Articles
GDPR compliance and best practices

UNSS data leak: the shock of 1.5 million student photos

The massive leak of 1.5 million photos of students from UNSS (National Union of School Sport) on BreachForums marks a turning point in educational cybersecurity. This digital vulnerability, exposing minors from middle school to high school, highlights the critical risk of dormant data. For data protection professionals, this incident requires an urgent review of retention policies, the minimization of collections, and the automation of purges in order to ensure real and protective GDPR compliance.
Guillemette Songy
Articles
GDPR compliance and best practices

GDPR register: how to define the right level of granularity for your treatment sheets?

The register of processing activities is not a static archive, but a living governance lever. For many DPOs, the major challenge lies in the granularity of processing forms: how to be precise without unnecessarily multiplying documents? Based on a set of indicators (purposes, data categories, retention periods), it is possible to structure a coherent register. This guide details the golden rules for grouping or dividing your activities in order to ensure sustainable compliance and simplified management thanks to the appropriate SaaS tools.
Calixte Descamps
Articles
GDPR compliance and best practices

Why do consulting and law firms have an interest in relying on a GDPR and IA Act compliance tool?

Faced with the increasing complexity of the GDPR and the arrival of the AI Act, consulting and law firms must transform compliance from a constraint into a strategic lever. The use of dedicated software makes it possible to centralize records, automate document production and guarantee total traceability, where traditional tools such as Excel reach their limits. By adopting a SaaS solution like Adequacy, professionals secure their deliverables, accelerate the execution of their missions and offer continuous management that retains their customers over the long term.
Guillemette Songy
Articles
GDPR compliance and best practices

Cyberbullying and algorithmic surveillance: the urgency of digital ethics

In 2026, total digital immersion erased the boundaries between private and professional life, giving way to systemic cyberbullying fuelled by intrusive algorithms. Whether it's viral lynchings assisted by AI among adolescents or permanent micro-control via People Analytics in business, data has become a vector of psychological suffering. To counter this invisible epidemic, organizations must move from simple paper compliance to an ethics of responsibility including rigorous audits of their surveillance tools, the anonymization of performance data, and technical compliance with a right to digital darkness.
Guillemette Songy
Articles
News

Privacy & IA: the big change of February 2026

February 2026 marked a turning point with the designation of the CNIL as the supervisory authority for the AI Act, the launch of the first NIS2 audits and a record sanctions record of 486 million euros. Between critical cyberattacks (UNSS, Cegedim) and new requirements on EHDS or the marking of content generated by AI, the convergence between cybersecurity and data protection is becoming an operational obligation. This analysis analyzes the 9 pillars that are redefining compliance for businesses and public organizations.
Guillemette Songy
Actualités
Product

Adequacy V6.2: ensure that your compliance with the GDPR is maintained over time

Compliance with the GDPR is not a one-off project but a daily challenge to maintain it over time. Faced with the requirements of the CNIL, the new Adequacy V6.2 version offers a robust platform to facilitate the management of resources, strengthen risk control and improve the user experience. In particular, this update makes it possible to automate the life cycle of resources and to optimize the management of incidents and violations.
Alessandro Fiorentino
Articles
News

AI social networks and data protection: the new risks of manipulation

In 2026, autonomous AI social networks are turning data protection into an algorithmic security challenge. These spaces, where humans become spectators of exchanges between language models, mask major risks of cognitive manipulation, data poisoning and model reversal. Compliance can no longer be limited to the management of data flows, but must uncover the human intentions behind each interaction to ensure information sovereignty and compliance with the GDPR in the face of the AI Act.
Calixte Descamps
Articles
GDPR compliance and best practices

Minors' Data and AI: Understanding Systemic Compliance Debt

By 2026, the exploitation of data derived from "sharenting" will no longer be just an ethical debate, but a major operational risk for organizations. The massive sharing of minors' data by third parties creates a systemic compliance debt. Between the technical impossibility of algorithmic unlearning and evolving regulations on the digital sovereignty of digital natives, companies face exposure to mass litigation. This briefing note analyzes why managing minors' digital identity is becoming a pillar of data governance and a critical issue of civil and administrative liability.
Calixte Descamps
Articles
News

EU-US Data Privacy Framework: what are the implications for your compliance?

The Data Privacy Framework (DPF), adopted in July 2023, is the third attempt to secure data transfers between Europe and the United States. It establishes a level of protection deemed “substantially equivalent” through new redress mechanisms like the DPRC. However, this adequacy only applies to certified organizations and remains vulnerable to the US Cloud Act and future legal challenges from Max Schrems. To ensure lasting compliance, encryption and Standard Contractual Clauses (SCCs) remain the strongest technical and legal protections.
Anne-Angélique de Tourtier
Articles
GDPR compliance and best practices

DPIA and AI Act: how to optimize AI compliance through threat automation

The entry into force of the AI Act requires an overhaul of data protection impact assessments (DPIA) to integrate systemic risks and algorithmic biases. In 2026, compliance is based on an integrated approach between the GDPR and the AI Act, where the automation of threat scenarios becomes essential. The Adequacy software industrializes this process via the EBIOS methodology, making it possible to generate accurate impact analyses directly from the treatment register to guarantee total control of risks related to artificial intelligence.
Calixte Descamps
Articles
News

Wearable AI and third party consent: the challenges of the Friend.com necklace

Wearable AI, illustrated by devices like the Friend.com necklace, captures data from those around us continuously. This evolution poses the challenge of third party AI consent, as voice is personal data protected by the GDPR. Compliance is based here on transparency, respect for the right to object and rigorous management of data processed outside of any prior framework (Shadow AI).
Calixte Descamps
Articles
GDPR compliance and best practices

Why is the “nothing to hide” argument a data protection error?

The expression “I have nothing to hide” is based on a major confusion between innocence and intimacy. Privacy is not a hiding place for the guilty, but the indispensable foundation of individual freedom and human dignity. Faced with algorithmic surveillance and AI, protecting personal data is an absolute necessity to avoid behavioral manipulation and preserve everyone's autonomy.
Guillemette Songy
Articles
GDPR compliance and best practices

Why and how to refuse third-party cookies to protect your privacy

Refusing advertising cookies is essential to protect your health data, your financial situation and your emotional balance in the face of algorithmic scoring. Unlike technical cookies necessary for navigation, third-party trackers transform your behavior into a product. Rigorous management via the “refuse all” button or dedicated tools allows you to regain control without degrading the web experience.
Guillemette Songy
Articles
Secteur de la santé

How to frame the processing of health data for research: a compliance guide

The use of health data for research purposes is based on a complex regulatory framework, between the RGPD, the Data Protection Act (LIL) and the recommendations of the CNIL or the ANS. To secure your projects, it is imperative to correctly qualify the actors (data controller or subcontractor) and to choose the appropriate legal regime: internal studies, research subject to reference methodologies (MR) or constitution of a health data warehouse (EDS). This guide summarizes the compliance obligations to navigate peacefully in this ecosystem that is changing with the arrival of the EHDS.
Valentine Chauveau
Articles
Events

Meet Adequacy at the 20th AFCDP DPO University

On February 05 and 06, 2026, the Adequacy team invites you to the Maison de la Chimie in Paris for the unmissable event for data professionals.
Rémy Bozonnet
Événements
GDPR compliance and best practices

Article 32 of the GDPR: why data security and accountability are the pillars of your compliance in 2026

In 2026, article 32 of the RGPD imposes a reinforced obligation of means, placing computer security at the heart of legal compliance. To ensure data protection, organizations must deploy technical and organizational measures that are proportionate to the risks (encryption, 2FA, resilience) while respecting the principle of Accountability. This responsibility requires proving the effectiveness of these devices in the face of tighter sanctions and the new requirements of the Digital Omnibus project.
Calixte Descamps
Articles
GDPR compliance and best practices

Audit the GDPR compliance of your subcontractors: the guide to secure your liability

The compliance of a data controller depends directly on the rigor of its service providers. Under the GDPR, outsourcing does not exempt you from liability: you must ensure that your subcontractors offer sufficient guarantees in terms of security and confidentiality. This guide details vigilance obligations, contractual levers such as the Security Assurance Plan (PAS) and offers a checklist of 16 control points to industrialize your audits and prove your diligence (Accountability).
Anne-Angélique de Tourtier
Articles
Secteur de la santé

Digital Omnibus and health data: impacts on the reuse of medical data

The Digital Omnibus project aims to harmonize the GDPR and the AI Act to simplify the reuse of health data and promote medical innovation in Europe. By clarifying the identifiability of pseudonymized data, this reform could transform research practices while requiring strengthened governance.
Calixte Descamps
Articles
News

DPO, AI Act, and Digital Omnibus: compliance strategies for 2026

The role of the DPO is changing following the gradual entry into force of the Digital Omnibus (DSA, DMA, Data Act) and the AI Act. These texts require organizations to move from traditional GDPR compliance to a global data and AI governance strategy. The DPO is becoming a strategic player that must guarantee algorithmic transparency, data interoperability and the classification of AI systems according to their level of risk. The challenge for 2026 is the integration of compliance by design to prevent sanctions and transform these regulatory challenges into competitive advantage.
Guillemette Songy
Articles
GDPR compliance and best practices

GDPR consent: strategic pillar for the protection of personal data

Consent is the most strategic legal basis under the GDPR for the processing of any personal data. It requires a positive, free, specific and informed action by the person concerned, in particular for the collection of cookies, newsletters and marketing treatments. Invalid consent exposes your organization to major sanctions (GDPR fines, loss of trust, suspension of campaigns). To ensure defensible compliance and secure your future treatments, including those involving AI and the AI Act, it is crucial to document each step, offer a fair choice (accept/refuse), and ensure full traceability of evidence.
Guillemette Songy
Articles
Product

Adequacy NIS 2 pack: integrated GDPR and AI Act compliance

Since January 2023, the NIS 2 directive has strengthened cybersecurity obligations in Europe. This directive, combined with the GDPR and the AI Act (gradual application from 2026), makes the regulatory burden complex. Adequacy's NIS 2 Pack meets this challenge by offering a step-by-step approach and a unique and integrated SaaS tool. This solution supports DPOs, CIOs and CISOs towards sustainable compliance by covering these three regulations, thus avoiding redundancies, reducing costs and generating automatic proof of compliance for audits.
Guillemette Songy
Articles
Secteur de la santé

Reuse of health data: the 8 prerequisites (RGPD, Public Health Code, CNIL doctrine and sectoral requirements)

The reuse of health data is a crucial innovation driver, especially for research, the improvement of care and the development of AI tools. However, this process is strictly regulated by the RGPD, the Public Health Code and the CNIL doctrine. Before any project, it is imperative to validate 8 essential prerequisites that condition the legality and conformity of subsequent processing. From the qualification of use (primary vs secondary) to HDS hosting and the requirements of the AI Act, a methodical and rigorous approach is the only guarantee of innovative, controlled and sustainable use.
Rémy Bozonnet
Articles
News

Viral marketing: from the Intermarkt ad that's going viral... to the importance of protecting personal data

The recent viral advertising by InterMarché illustrates the power of emotion in digital marketing, but this success should not make us forget the major challenge of protecting personal data. Today, every digital interaction — from watching a commercial on social networks to browsing a site — involves the collection of information. For brands, consumer trust is no longer based solely on the quality of content, but also, and above all, on transparent and responsible management of their data, in line with the GDPR. Combining a strong message and respect for confidentiality is now the real guarantee of success in a hyper-connected world.
Guillemette Songy
Articles
GDPR compliance and best practices

Compliance debt RGPD & AI Act: the silent risk that is already costing companies dearly

Compliance debt is the insidious accumulation of incomplete processes, obsolete documentation, and untracked data processing. This silent risk, generated by the proliferation of SaaS tools and requirements like RGPD and the AI Act, is no longer just a legal issue, but a genuine strategic and financial risk. Direct consequences include heavy fines, loss of productivity, and the blocking of AI or data-driven projects. To reduce it, companies must imperatively industrialize and centralize their compliance processes, equipping their DPOs with adapted, sovereign platforms.
Guillemette Songy
Articles
Intelligence artificielle

AI Act: limited risk AI systems, transparency, and compliance

The category of limited-risk AI systems under the AI Act aims to govern innovation while protecting users. While these systems do not pose a critical threat to fundamental rights, their use is subject to strict transparency obligations. The article details how professionals (suppliers and deployers) must ensure traceability and user information, particularly through rigorous documentation and light monitoring, which are essential principles for AI Act compliance within organizations.
Anne-Angélique de Tourtier
Articles
GDPR compliance and best practices

RGPD legitimate interest: secure your personal data processing

The GDPR legitimate interest is a key basis for the processing of personal data, but it imposes a rigorous legitimate interest test. To secure your transactions and avoid sanctions, you must ensure the need for processing, transparency and respect for the right to object. In this article, discover compliance requirements and best practices for mastering this pillar of the GDPR with appropriate tools.
Guillemette Songy
Articles
Intelligence artificielle

High-risk AIs according to the AI Act: how to identify them?

Unlike prohibited systems, high-risk AIs defined by the AI Act (automated recruitment, public services, biometrics) are authorized, but subject to strict obligations. Identifying, documenting and securing each use case is now mandatory to build a robust compliance file.
Anne-Angélique de Tourtier
Articles
Intelligence artificielle

AI ranking: French, European and global — Choosing a solution that complies with the GDPR and the AI Act

Artificial Intelligence is omnipresent, but behind innovation there is a major challenge of digital sovereignty and compliance with the GDPR and the recent AI Act. This article is intended for Legal, IT and Compliance departments to guide them in the ranking of AIs (French, European or global) and to help them structure the use of these technologies in a responsible and sustainable way.
Guillemette Songy
Articles
News

Digital Omnibus: anticipate the impacts on GDPR and compliance

The Digital Omnibus, a European legislative project, aims to group and simplify digital texts, but could change pillars of the GDPR, the e-Privacy Directive and the AI Act, creating risks of weakening digital rights. For DPOs and Compliance Managers, it is crucial to anticipate these changes in the definition of personal data, legitimate interest and the processing of sensitive data in order to immediately strengthen governance and secure GDPR compliance.
Guillemette Songy
Articles
Intelligence artificielle

AIs prohibited by the AI Act: when the use becomes risky and unacceptable

The European AI Act strictly prohibits uses of AI deemed to be at “unacceptable risk”, such as social scoring, cognitive manipulation (subliminal messages) or the exploitation of vulnerabilities. It is imperative for any organization to identify, block and document the absence of these prohibited practices.
Anne-Angélique de Tourtier
Articles
Métier

RGPD and IA Act: what should DPOs prepare by 2025?

From 2025, DPOs will have to articulate RGPD and IA Act for all high-risk AI systems, by updating their DPIs, registers and internal procedures, and by guaranteeing traceability, transparency and human supervision to ensure integrated and secure compliance.
Laurent Chollat-Namy
Articles
GDPR compliance and best practices

Measuring your company's GDPR maturity: preparing 2026 with the CNIL method

En 2026, la conformité ne suffit plus : la maturité RGPD devient un levier stratégique. Découvrez comment évaluer votre niveau de maturité et piloter efficacement votre conformité grâce à la méthode d’autoévaluation de la CNIL.
Anne-Angélique de Tourtier
Articles
News

Shadow AI in Business: The Invisible Threat to AI Act and Performance

Shadow AI — the unauthorized use of artificial intelligence tools within an organization — poses a critical threat to compliance with both the GDPR and the EU AI Act. Identifying hidden AI usage, establishing clear governance, and promoting responsible innovation are essential steps to turn this invisible risk into a driver of secure, compliant, and controlled innovation.
Rémy Bozonnet
Articles
Secteur de la santé

Health methodologies, guides and standards: apply the GDPR effectively

Entre référentiels CNIL, méthodologies de référence et guides pratiques, les professionnels de santé disposent de nombreux outils pour appliquer le RGPD efficacement — encore faut-il savoir lesquels suivre, comment les articuler et les adapter à leurs traitements de données sensibles.
Laurent Chollat-Namy
Articles
News

Video Surveillance and AI: Ensuring GDPR Compliance to Protect Public Freedoms

La vidéosurveillance algorithmique associée à l’IA transforme le contrôle et la sécurité dans l’espace public et privé, mais sa conformité au RGPD et à l’IA Act est essentielle pour protéger les libertés publiques, encadrer les algorithmes, limiter la conservation des données et garantir transparence et traçabilité.
Guillemette Songy
Articles
News

10 GDPR news to remember in September 2025

In September 2025, GDPR news was marked by record sanctions from the CNIL, the entry into force of the Data Act, the validation of the Data Privacy Framework and new obligations for companies in terms of data, AI and transparency.
Alessandro Fiorentino
Actualités
GDPR compliance and best practices

Write a privacy policy and information notices that comply with the GDPR, are clear, transparent and accessible to all

Writing a privacy policy in accordance with the GDPR is an essential step in inspiring trust and ensuring transparency in the processing of personal data. This practical guide explains how to design documents that are legible, accessible, and effective for your users.
Anne-Angélique de Tourtier
Articles
GDPR compliance and best practices

GDPR and Human Resources: 5 mistakes that cost companies dearly

HR is on the front line of GDPR. Recruitment, payroll, training, and occupational health are just a few of the processes that expose employees' personal data. Excessive data retention, sending incorrect emails, and incomplete contracts are costly mistakes. Adopting the right reflexes allows HR to ensure compliance and strengthen employee trust.
Guillemette Songy
Articles
Product

Adequacy V6.1: the GDPR software that integrates compliance with the AI Act

Adequacy V6.1 centralizes GDPR and AI Act compliance by offering DPOs, lawyers and compliance managers a modular solution to map, assess and manage their AI systems and models while automating European regulatory obligations.
Alessandro Fiorentino
Articles
Secteur de la santé

Health sector: master the RGPD in your EDS

Setting up a health data warehouse requires strict compliance with the RGPD and the CNIL standard, based on clear governance, comprehensive documentation and high security measures. The DPO is the guarantor, ensuring transparency and compliance at each stage of the project.
Laurent Chollat-Namy
Articles
GDPR compliance and best practices

Cutting the GDPR budget: a risk for your business opportunities

The GDPR is a strategic investment: cutting your budget weakens the confidence of investors, limits access to financing and weakens the company's competitiveness on the market.
Anne-Angélique de Tourtier
Articles
News

European AI regulation: a regulatory goose game?

Complying with the GDPR is a challenge for all businesses. A dedicated RGPD software allows you to automate your legal obligations, centralize the management of personal data and significantly reduce the risks of sanctions.
Alessandro Fiorentino
Articles
News

Geolocating your children: safety or surveillance? Legal, ethical and sociological issues to know

The geolocation of children is attracting more and more parents concerned about safety, but it also raises legal and ethical risks. Between protection and surveillance, the legal framework (RGPD, CNIL) and sociological issues make it possible to understand where to put the limit to protect without locking in.
Guillemette Songy
Actualités
GDPR compliance and best practices

GDPR and Small Businesses (SMEs & Micro-Enterprises): A Requirement, but Above All an Opportunity

The GDPR also applies to small businesses: a client database, a newsletter, or HR data is enough to be concerned. Far from being a constraint, compliance helps reduce risks, build credibility, and transform data management into a competitive advantage.
Anne-Angélique de Tourtier
Actualités
GDPR compliance and best practices

Digital Right to Be Forgotten Charter: Targeted Advertising, Collaborative Platforms, and Search Engines

Two charters adopted in 2010 established the foundations of the digital right to be forgotten, from targeted advertising to search engines. They foreshadowed GDPR and continue to remind businesses today of the importance of transparency, data control, and digital trust.
Guillemette Songy
Articles
GDPR compliance and best practices

HR Engagement in Data Protection: A Strategic and Legal Imperative

On a daily basis, HR teams manage highly sensitive information and must comply with both labor law and the GDPR. Key risks include data breaches, unlawful retention, and loss of employee trust. With Adequacy, HR departments can secure their data processing, comply with statutory retention periods, and strengthen both trust and competitiveness.
Guillemette Songy
Articles
Secteur de la santé

EHDS: what is the impact for DPOs in the health sector?

The European Health Data Space (EHDS) complements the GDPR by harmonizing access, exchange and reuse of health data at the EU level, in order to improve care and stimulate innovation. For DPOs, this means a strengthened role in governance, security, compliance and ethics, with new practical obligations (audits, AIPD, documentation, cooperation with authorities).
Laurent Chollat-Namy
Articles
Secteur de la santé

How can you control the processing of your health data? Sensitive information! [DPO Notice]

Health data is one of the most sensitive types of data. Its processing requires a strict GDPR framework, solid legal bases, and rigorous governance. Read our article to discover the keys to staying compliant and securing your projects.
Laurent Chollat-Namy
Articles
Secteur de la santé

Reference methodologies (MR) in healthcare: which ones to choose and how to use them?

Healthcare Reference Methodologies (MR): Master CNIL rules and secure your processing operations. Learn about the seven MRs and their conditions of use.
Laurent Chollat-Namy
Articles
GDPR compliance and best practices

GDPR penalties: what to expect and how to avoid them

GDPR penalties, which can reach €20 million or 4% of a company's turnover, affect businesses, local authorities, banks, and subcontractors. These penalties are often the result of avoidable breaches, such as missing records, excessive data collection, and failure to meet deadlines. With Adequacy compliance software, however, you can structure your processes, secure your data, and reduce the risk of penalties, including those related to DORA compliance.
Guillemette Songy
Articles
GDPR compliance and best practices

Is complying with the GDPR using Excel or dedicated software really an issue?

While Excel can help you get started with GDPR, only dedicated software can ensure long-term secure and collaborative compliance.
Stéphane Galois
Articles
Intelligence artificielle

AI Act: Everything you need to know about the new European law on artificial intelligence

The AI Act is a historic turning point for Europe. It promises to strengthen trust in AI and force organizations to reconsider how they use it and ensure compliance.
Rémy Bozonnet
Articles
GDPR compliance and best practices

GDPR Record of Processing Activities [DPO Insights]

A key GDPR tool, the Record of Processing Activities tracks the use of personal data and helps organizations ensure compliance while avoiding heavy penalties.
Laurent Chollat-Namy
Articles
Events

GDPR and AI Act: Master your GDPR compliance today and prepare for the future

Join our webinar to simplify your GDPR compliance and prepare for the AI Act. Our all-in-one software is designed for DPOs and lawyers and includes mapping, registers, risk analysis, and unified governance.
Alessandro Fiorentino
Événements
Adequacy

Adequacy has announced its 2025 ambitions, citing its growth as a key factor in achieving these goals

Adequacy is strengthening its governance and developing innovative solutions to help companies comply with the RGPD and beyond; with over 600 customers in 80 countries, the company now aims to accelerate its international expansion.
Alessandro Fiorentino
Articles
News

NIS 2: what the directive changes for your business

The NIS 2 directive reinforces cybersecurity obligations in Europe. Find out who is affected, what is changing in practice and how to effectively prepare for it.
Alessandro Fiorentino
Actualités
News

Digital dependency: 3 factors in a predicted surge?

Europe's dependence on U.S. digital services costs €264 billion a year and undermines its sovereignty. With extraterritorial legal influence, industrial backwardness, and economic short-termism, building sustainable digital autonomy requires a leap of faith.
Alessandro Fiorentino
Actualités
Product

Discover what’s new with version 6.0!

This major update to ADEQUACY rethinks ergonomics, enhances RGPD functionalities, and paves the way for future developments in AI and security.
Stéphane Galois
Articles
Adequacy

Adequacy appoints Fabrice de Salaberry as Chief Executive Officer

Adequacy appoints Fabrice de Salaberry, B2B SaaS expert, as CEO to accelerate the French regulatory compliance specialist's European growth. His arrival marks a new phase of development for Adequacy.
Christian des Lauriers
Articles
Adequacy

Adequacy obtains the EcoVadis gold medal: a recognition of our CSR commitment

The EcoVadis gold medal gives us a distinction that ranks us among the 5% of the most exemplary companies in terms of social responsibility. This reference label recognizes our concrete actions in favor of the environment, human rights and ethics, and confirms our desire to combine digital innovation, GDPR compliance and sustainable development.
Alessandro Fiorentino
Articles
Adequacy

Adequacy ranked best GDPR compliance software by Déciders Magazine

Adequacy a été classé numéro 1 des logiciels de conformité RGPD en 2024 par le Magazine Décideurs. Cette distinction récompense notre engagement à rendre la conformité accessible, sécurisée et souveraine, grâce à une solution complète adoptée par plus de 10 000 entités à travers le monde. Un gage de confiance pour toutes les organisations qui placent la protection des données au cœur de leur stratégie.
Alessandro Fiorentino
Articles
News

Data Privacy Framework: 3 factors of an inevitable shock

Alors que le Data Privacy Framework devait rétablir un cadre de confiance entre l’Europe et les États-Unis, sa stabilité est aujourd’hui remise en question. Des membres du Privacy and Civil Liberties Oversight Board, garant clé de ce dispositif, ont été poussés à la démission, fragilisant un accord déjà critiqué pour sa base juridique instable. À l’approche d’un potentiel bouleversement politique aux États-Unis, l’Europe peut-elle encore s’appuyer sur un système aussi précaire pour protéger les données de ses citoyens ?
Alessandro Fiorentino
Articles
Témoignage client

Interview with Dominique Pissoort, DPO of STIB

Dominique Pissoort, DPO de la STIB, nous raconte comment Adequacy a simplifié la gestion du RGPD et transformé la conformité des données dans cette grande entreprise publique.
Alessandro Fiorentino
Interview
Events

Adequacy at DPO Morning

On the occasion of the DPO Morning organized by Le Printemps des DPO, our experts spoke during a morning dedicated to the challenges of DPOs. Claire de la Fouchardière, Product Manager, and Alessandro Fiorentino, Product Owner, shared their expertise on a current topic: “The GDPR is no longer alone: what solution is there to ensure your compliance with other data protection regulations? ”. A rich exchange around strategies, tools and challenges related to global compliance to be discovered in replay.
Alessandro Fiorentino
Événements
Témoignage client

Interview with Camille Bradfer, HR Manager and GDPR representative at Ma Petite Mercerie

Discover how Ma Petite Mercerie, leader in online haberdashery sales in France, optimized its GDPR compliance with Adequacy. Camille Bradfer reveals to us the advantages of the solution, its impact on the internal organization and the development of teams' skills, while sharing her vision of the DPO of tomorrow.
Alessandro Fiorentino
Articles
Events

Adequacy & Phenix Privacy at the DPO Forum Lyon 2024!

At the DPO Forum Lyon 2024, Phenix Privacy and our team presented best practices for conducting effective impact assessments (AIPD), strengthening GDPR compliance and anticipating future regulations such as the AI Act.
Alessandro Fiorentino
Événements
Events

Adequacy was present at Printemps des DPO 2024

Present at the DPO Spring 2024, Alessandro Fiorentino led two masterclasses dedicated to data breaches and the collaboration between DPO, RSSI and DSI in the face of new regulations (NIS2, DORA, IA Act). An event rich in expertise, at the service of ever more operational and strategic compliance.
Alessandro Fiorentino
Événements
Témoignage client

Interview with Philippe Ebert, DPO of the Dassault Aviation Group

Philippe Ebert, DPO of the Dassault Aviation Group, shares his experience with the Adequacy solution for managing the RGPD. Learn how the tool has improved their auditability, transparency, and ability to adapt to ever-changing legislation. An informed vision on the future of the DPO role in a dynamic digital context.
Alessandro Fiorentino
Articles
Events

Adequacy alongside the CCI France Belgium

During an event organized with CCI France Belgium, we brought together experts and companies around the intersecting challenges of the GDPR, NIS2, DORA and the IA Act. An opportunity to strengthen the synergies between DPO and CISO, and to present our compliance solution adapted to European requirements and the Belgian market.
Alessandro Fiorentino
Événements
News

Anticipate the entry into force of the NIS II directive and the future IA ACT in light of the RGPD

Alors que la directive NIS II entrera en application en octobre 2024 et que l’IA Act approche, les organisations doivent anticiper les impacts croisés de ces réglementations avec le RGPD. En combinant sécurité des systèmes, protection des données et gestion des risques, elles renforcent leur conformité globale et préparent une gouvernance numérique responsable et alignée sur les exigences européennes.
Alessandro Fiorentino
Témoignage client

Interview with Bénédicte Wautelet, Legal Director and DPO of the Figaro Group

Bénédicte Wautelet, Legal Director and DPO of the Figaro Group, discusses her partnership with Adequacy for the management of GDPR compliance. Discover the reasons for his choice, the benefits of the Adequacy tool and his vision of the DPO of tomorrow in a constantly evolving digital environment.
Alessandro Fiorentino
Articles
Events

Adequacy at the DPO Forum Paris 2024!

At the DPO Forum Paris 2024, Alessandro Fiorentino gave an unmissable conference on the collaboration between DPO and RSSI to ensure compliance with the RGPD. He addressed key issues such as clarifying responsibilities, effective communication, and ongoing risk assessment, while linking NIS2, cybersecurity and GDPR. An event rich in exchanges and learning, underlining the importance of collective commitment to data protection.
Alessandro Fiorentino
Événements
Témoignage client

Interview with Nicolas Courtier, lawyer, DPO and Associate Lecturer at the University of Aix-Marseille

Nicolas Courtier, expert in digital law and data protection, shares his career, his partnership with Adequacy and his vision of the DPO of tomorrow in the face of legislative change. An essential interview for GDPR compliance professionals.
Alessandro Fiorentino
Articles
Events

Adequacy partner of the University of DPO organized by the AFCDP

During the University of DPO 2024, a major event in GDPR compliance, we were pleased to partner with AFCDP for this celebration of the association's 20th anniversary. Over 1000 participants exchanged views over two days rich in discussions and sharing around the challenges of protecting personal data.
Alessandro Fiorentino
Événements
Events

WEBINAR — DPO & CISO, discover the 7 keys to successful GDPR compliance!

Adequacy x Altanis Protect: a webinar to help DPOs and CISOs better collaborate and ensure GDPR compliance. Learn about roles, responsibilities, tools, and best practices for sustainable compliance, with a focus on NIS2 and AI.
Alessandro Fiorentino
Événements
Events

Meet Adequacy at the 18th AFCDP University of DPoS

We were present at the 18th University of DPO in Paris. A key event on GDPR compliance, with experts and more than 1000 participants.
Alessandro Fiorentino
Événements
GDPR compliance and best practices

Parents : be careful about sharing images of your children online

Depuis octobre 2023, la législation encadre mieux la publication de photos d'enfants. Les parents doivent désormais obtenir l'accord des deux parties avant de partager des images en ligne. Découvrez les risques et les bonnes pratiques pour protéger la vie privée de vos enfants.
Guillemette Songy
Articles
GDPR compliance and best practices

Dissemination of the image of students by schools: beware danger!

La publication de photos d'élèves sur les réseaux sociaux sans précaution, un risque pour la sécurité des données et la protection des mineurs. Découvrez pourquoi cette pratique peut être problématique.
Guillemette Songy
News

Interview — Adequacy in the columns of the Medef magazine!

In an exclusive interview for Inspir', the Medef magazine, Angélique de Tourtier d'Adequacy shares her expertise on the GDPR, SMEs and the key role of the DPO. Learn about his powerful and compelling answers, and understand why GDPR compliance is critical for your business.
Alessandro Fiorentino
Actualités
Events

FORUM— Adequacy is transforming the test at the CBC - Cybersecurity Business Convention in Toulouse!

We are participating in the CBC in Toulouse for its 3rd edition. Calixte Descamps, CSM from Adequacy, will speak on the topic “RGPD & Cybersecurity”.
Alessandro Fiorentino
Événements
Events

RECAP of the CBC — an exceptional event

We were back at the Cybersecurity Business Convention in Toulouse for an edition focused on exchanges and co-construction. Alongside our partners and experts in the sector, the team shared its GDPR & cybersecurity vision and strengthened its presence in the cyber ecosystem.
Alessandro Fiorentino
Événements
Events

We are very proud to be partners of the 10 years of La French Tech Brussels!

On the occasion of the 10th anniversary of La French Tech Brussels, Adequacy is celebrating a strong partnership with the Belgian tech ecosystem. A festive evening alongside renowned customers, which marks a new stage in our development in Benelux.
Alessandro Fiorentino
Événements
Events

FORUM— For the 3rd year in a row, Adequacy was a partner of the DPO Forum in Belgium.

Adequacy participated for the 3rd consecutive year in the DPO Forum in Belgium. A look back at a strong moment with Alessandro Fiorentino.
Alessandro Fiorentino
Événements
GDPR compliance and best practices

Predatory strategies and techniques of social networks to capture the personal data of minors

Les réseaux sociaux déploient des techniques subtiles et invasives pour capter les données personnelles des mineurs. Découvrez les 7 stratégies prédatrices analysées par Alessandro Fiorentino dans le cadre du programme AdoPrivacy.
Alessandro Fiorentino
Articles
Adequacy

Adequacy and the Data Circle: A Look Back on 5 Years of Partnership

For 5 years, Adequacy has been working alongside the Data Circle to promote ethical and European data management. Discover the reasons and actions behind this strategic partnership.
Alessandro Fiorentino
Articles
Product

A simple, secure and connected solution for business compliance

Découvrez comment la solution Adequacy, simple, sécurisée et souveraine, accompagne efficacement DPO, juristes et DSI dans leur mise en conformité RGPD, grâce à des fonctionnalités puissantes et un accompagnement expert.
Alessandro Fiorentino
Events

3rd Club U Adequacy 2022

Our Club U made a big comeback in 2022, bringing together DPO, experts and users around the challenges of GDPR compliance, business evolution and product innovations. A day rich in exchanges, perspectives... and conviviality.
Alessandro Fiorentino
Événements
Events

Meet Adequacy at Printemps des DPOs

On June 28, Adequacy invites you to the Printemps des DPO, at the Parc des Princes. Our experts will speak on two highlights around health data and AIPD. A unique opportunity to exchange with professionals committed to the concrete challenges of GDPR compliance.
Alessandro Fiorentino
Événements
Events

Meet Adequacy at the Law Summit

On April 20, we will be present at the Law Summit at the Pavillon d'Armenonville, in Paris. Join our expert Alessandro Fiorentino for a conference on digital sovereignty and multi-regulation, and discover the impacts on business data strategy. An unmissable event for compliance professionals!
Alessandro Fiorentino
Événements

Discover Adequacy

One of our experts introduces Adequacy to you in a real situation.