A CNIL inspection? Every hour counts.
A letter from the CNIL, an on-site inspection announced or under way: we organize the evidence, the answers and the teams — activated within 4 business hours, clearly bounded scope, price known in advance.
What we put in place, in order
An inspection cannot be improvised — it has to be organized. Five steps, each with a deliverable.
- 1
Immediate framing
A video call within 4 business hours: qualification of the letter or the inspection, scope concerned, deadlines and points of contact. You know what to expect before the end of the day.
- 2
Freezing and gathering the evidence
Record of processing activities, impact assessments (DPIAs), access-rights matrices, processor contracts, breach register: we gather and organize what the CNIL most often requests.
- 3
Response plan
Who answers, to what, and by when: a written plan, validated by your management, that prevents improvised and contradictory answers — the kind that weaken an otherwise defensible file.
- 4
Preparing the teams
The people likely to be interviewed are prepared: what they need to know, what they must not improvise, and how to refer questions to the right person.
- 5
Coordination with your lawyer
Reserved legal consultation, litigation strategy and representation belong to your lawyer. We prepare the documentary file and coordinate with them — each in their role, no grey areas.
Terms of engagement
From €5,900 excl. VAT — activated within 4 business hours.
Scope, deliverables and limits set out in writing before any commitment. Legal representation and litigation belong to your lawyer, with whom we coordinate.
Priority response — mention “CNIL inspection” in your message.
What we’re asked before activating
Can you guarantee no sanction?
No — and nobody seriously can. What we guarantee contractually: a response within 4 business hours, a written response plan, organized evidence and prepared teams. An organized file and consistent answers concretely change how an inspection unfolds.
Do you step in if we have never been a client?
Yes. The inspection assistance is designed to be activated with no prior relationship: the initial framing lets us get up to speed on your situation within a few hours. Clients on a DPO subscription benefit from the terms set out in their contract.
Do you work with our lawyer?
Yes, systematically whenever the situation requires it: we prepare and document everything that falls under data protection, while your lawyer handles legal consultation and litigation strategy. If you do not have a lawyer, we refer you to independent lawyers familiar with these proceedings.
What happens after the inspection?
An inspection almost always reveals gaps to correct. We turn the findings into a prioritized action plan, and most organizations follow up with a Compliance Foundation package or a DPO subscription so the situation does not happen again.
Security incident under way? See health data breach management
The worst reflex is to wait
The earlier the response is prepared, the more consistent it is. Describe the situation in two sentences: we frame the next steps within 4 business hours.
Priority response — activated within 4 business hours