{"id":36559,"date":"2023-01-05T22:33:03","date_gmt":"2023-01-05T21:33:03","guid":{"rendered":"https:\/\/www.iteanu.law\/?p=36559"},"modified":"2023-01-06T12:28:33","modified_gmt":"2023-01-06T11:28:33","slug":"5-janv-2023-violation-de-donnees-a-la-caf","status":"publish","type":"post","link":"https:\/\/www.iteanu.law\/en\/5-janv-2023-violation-de-donnees-a-la-caf\/","title":{"rendered":"5 Janv. 2023 &#8211; Violation de donn\u00e9es \u00e0 la CAF"},"content":{"rendered":"<p class=\"qtranxs-available-languages-message qtranxs-available-languages-message-en\">Sorry, this entry is only available in <a href=\"https:\/\/www.iteanu.law\/fr\/wp-json\/wp\/v2\/posts\/36559\" class=\"qtranxs-available-language-link qtranxs-available-language-link-fr\" title=\"FR\">FR<\/a>. For the sake of viewer convenience, the content is shown below in the alternative language. You may click the link to switch the active language.<\/p><p>Ma\u00eetre Alexandra Iteanu intervient dans le<a href=\"https:\/\/www.radiofrance.fr\/franceinter\/podcasts\/le-journal-de-7h30\"> journal de France Inter de 7h30<\/a> sur une affaire de violation de donn\u00e9es \u00e0 caract\u00e8re personnel.<\/p>\n<p>Les donn\u00e9es de milliers d&#8217;allocataires de la <a href=\"https:\/\/www.caf.fr\/\">Caisse d&#8217;Allocations Familiales dite CAF<\/a> se sont retrouv\u00e9es pendant 18 mois, disponibles sur Internet.<\/p>\n<p>Le revenu, l&#8217;adresse postale, les allocations per\u00e7ues de plus de 10.000 allocataires, \u00e9taient visibles de tous. Au total, 181 donn\u00e9es d&#8217;allocataires se trouvaient librement accessibles.<\/p>\n<p>Tout s&#8217;est pass\u00e9 lorsque la CAF eut recours \u00e0 un prestataire ext\u00e9rieur, charg\u00e9 de la formation de 9 employ\u00e9s de la CAF.<\/p>\n<p>L&#8217;origine de cette publication frauduleuse serait \u00e0 l&#8217;initiative d&#8217;un prestataire ext\u00e9rieur de la CAF, charg\u00e9 de formation, auquel la CAF aurait transf\u00e9r\u00e9 ces donn\u00e9es. La CAF lui aurait ainsi transmis un jeu de donn\u00e9es bien r\u00e9el, pour r\u00e9aliser sa formation, que le prestataire chargeait sur son site web.<\/p>\n<p>Or, ces donn\u00e9es se trouvaient d\u00e8s lors visibles.<\/p>\n<p>Interrog\u00e9e, Ma\u00eetre Alexandra Iteanu tranchait qu&#8217;au del\u00e0 m\u00eame de ce qui est une violation de donn\u00e9es au sens du R\u00e8glement Communautaire UE 2016\/679 dit <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/FR\/TXT\/PDF\/?uri=CELEX:32016R0679\">RGPD<\/a>, la CAF n&#8217;avait pas le droit de transmettre ces donn\u00e9es \u00e0 ce prestataire sans le consentement et bien s\u00fbr l&#8217;information, des personnes concern\u00e9es.<\/p>\n<p>La question des violations de donn\u00e9es personnelles est devenue une question essentielle, qu&#8217;on retrouve r\u00e9guli\u00e8rement.<\/p>\n<p>Au del\u00e0 des sanctions potentielles de la CNIL, le gendarme des donn\u00e9es personnelles, des recours judiciaires des personnes concern\u00e9es victimes de la violation de leurs donn\u00e9es, recours qui commencent \u00e0 se multiplier, c&#8217;est l&#8217;image m\u00eame du responsable de traitement, ici la CAF, qui est engag\u00e9e.<\/p>\n<p>Un enjeu d\u00e8s lors colossal pour toutes ces organisations qui requiert de r\u00e9agir en termes d&#8217;organisation interne, de process, de communications et de droit.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>","protected":false},"excerpt":{"rendered":"<p>Sorry, this entry is only available in FR. For the sake of viewer convenience, the content is shown below in the alternative language. You may click the link to switch the active language.Ma\u00eetre Alexandra Iteanu intervient dans le journal de France Inter de 7h30 sur une affaire de violation de donn\u00e9es \u00e0 caract\u00e8re personnel. Les [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":36563,"comment_status":"closed","ping_status":"closed","sticky":true,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-36559","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.iteanu.law\/en\/wp-json\/wp\/v2\/posts\/36559","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.iteanu.law\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.iteanu.law\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.iteanu.law\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.iteanu.law\/en\/wp-json\/wp\/v2\/comments?post=36559"}],"version-history":[{"count":3,"href":"https:\/\/www.iteanu.law\/en\/wp-json\/wp\/v2\/posts\/36559\/revisions"}],"predecessor-version":[{"id":36572,"href":"https:\/\/www.iteanu.law\/en\/wp-json\/wp\/v2\/posts\/36559\/revisions\/36572"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.iteanu.law\/en\/wp-json\/wp\/v2\/media\/36563"}],"wp:attachment":[{"href":"https:\/\/www.iteanu.law\/en\/wp-json\/wp\/v2\/media?parent=36559"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.iteanu.law\/en\/wp-json\/wp\/v2\/categories?post=36559"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.iteanu.law\/en\/wp-json\/wp\/v2\/tags?post=36559"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}