Hacker News Reader

Why is the onus on the CNIL to notify companies on the law (which they actually did by issuing this press release) and not on companies to keep up-to-date with the law (which they could to by reading the news)?

This is just how it works. I'm not making the rules. The CNIL send "mise en demeure" to companies that do not complies with the GDPR and even before that with the "loi informatique et libertés" and if the companies ignore the "mise en demeure" after some time the CNIL can fine them.

It also happens that the CNIL is notoriously more and more lenient on a lot of things.

They will know about the ruling [1]. It's up to them what to do next.

[1] https://news.google.com/search?q=Cnil&hl=fr&gl=FR&ceid=FR%3A...

nul n'est censé ignorer la loi.

Yes and of course because of that everyone is respecting the law, especially companies when they're not at any risk if they don't. /s

Yes I'm a bit pessimistic about this. Let's all hope I'm wrong.

Translated into English: The law everyone ignores isn't.

You never catch all the law breakers, but fines can be a good deterrent. That’s how it works.