Data Protection in the Age of COVID-19

Article published on February 5, 2021, in Les Affiches Parisiennes— here.

The GDPR, which has become a global benchmark for data protection, has been put to the test by the COVID-19 pandemic, which has forced organizations to process more personal data—particularly health data—within a complex legal framework. The sudden shift to remote work and the need to monitor employees’ health have created new challenges, as organizations must balance public health imperatives with respect for the fundamental rights of data subjects. Faced with these challenges, companies must adopt a proactive approach—by conducting impact assessments, following the recommendations of supervisory authorities, and meeting regulatory deadlines—to limit their exposure to penalties, while anticipating new issues related to the return to the office and vaccination.