{"id":103,"date":"2026-08-05T09:34:25","date_gmt":"2026-08-05T09:34:25","guid":{"rendered":"https:\/\/metamine.eu\/?p=103"},"modified":"2026-08-05T09:37:35","modified_gmt":"2026-08-05T09:37:35","slug":"comment-gerer-une-violation-de-donnees-personnelles","status":"publish","type":"post","link":"https:\/\/dataprotect-rgpd.com\/index.php\/2026\/08\/05\/comment-gerer-une-violation-de-donnees-personnelles\/","title":{"rendered":"Comment g\u00e9rer une violation de donn\u00e9es personnelles ?"},"content":{"rendered":"<style>\n.title_outer{display:none!important}.page_container_inner{padding-top:0!important}.content .container_inner.default_template_holder{width:100%!important;max-width:none!important}\n.nmc-hero{min-height:520px;display:flex;align-items:center;background-position:center;background-size:cover;padding:52px 7%;box-sizing:border-box}.nmc-hero>div{max-width:920px}.nmc-hero h1{color:#fff;font-size:48px;line-height:1.12;margin:0 0 16px}.nmc-hero p{color:#fff;font-size:21px;line-height:1.5;max-width:780px}.nmc-wrap{max-width:1160px;margin:auto;padding:72px 28px}.nmc-lead{font-size:20px;line-height:1.65;max-width:920px}.nmc-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:22px;margin:32px 0}.nmc-card{border:1px solid #e2e7e9;border-radius:12px;padding:28px;background:#fff;box-shadow:0 10px 30px rgba(22,38,43,.06)}.nmc-card h3{margin-top:0}.nmc-band{background:#f2f6f7;padding:34px;border-radius:14px;margin:36px 0}.nmc-steps{display:grid;grid-template-columns:repeat(5,1fr);gap:12px;margin:26px 0}.nmc-step{background:#143b45;color:#fff;padding:20px;border-radius:10px}.nmc-btn{display:inline-block;background:#bf3038;color:#fff!important;padding:13px 22px;border-radius:5px;text-decoration:none;font-weight:600}.nmc-link{font-weight:600;color:#a92832!important}.nmc-table{width:100%;border-collapse:collapse;margin:26px 0}.nmc-table th,.nmc-table td{border-bottom:1px solid #dce3e5;padding:16px;text-align:left;vertical-align:top}.nmc-table th{background:#143b45;color:#fff}.nmc-faq details{border-bottom:1px solid #dce3e5;padding:16px 0}.nmc-faq summary{font-weight:600;cursor:pointer}.nmc-cta{background:#143b45;color:#fff;padding:38px;border-radius:14px;margin-top:44px}.nmc-cta h2,.nmc-cta p{color:#fff}\n@media(max-width:800px){.nmc-hero{min-height:390px;padding:40px 22px}.nmc-hero h1{font-size:34px}.nmc-wrap{padding:48px 20px}.nmc-grid,.nmc-steps{grid-template-columns:1fr}.nmc-table{font-size:14px}}\n<\/style><article class=\"nmc-wrap\" style=\"padding-top:78px\"><h1>Comment g\u00e9rer une violation de donn\u00e9es personnelles ?<\/h1><p><em>Mis \u00e0 jour le 5 ao\u00fbt 2026.<\/em><\/p><p class=\"nmc-lead\">Une violation peut toucher la confidentialit\u00e9, l\u2019int\u00e9grit\u00e9 ou la disponibilit\u00e9 de donn\u00e9es personnelles. La premi\u00e8re urgence est de contenir l\u2019incident tout en documentant les faits et en \u00e9valuant les risques pour les personnes.<\/p><div class=\"nmc-band\"><h2>Le r\u00e9flexe des premi\u00e8res heures<\/h2><ol><li>Contenir et s\u00e9curiser.<\/li><li>Qualifier les donn\u00e9es, les personnes et l\u2019impact.<\/li><li>Documenter l\u2019heure de d\u00e9tection et les faits connus.<\/li><li>\u00c9valuer le risque pour les droits et libert\u00e9s.<\/li><li>D\u00e9cider des notifications requises sans attendre d\u2019avoir toutes les r\u00e9ponses.<\/li><\/ol><\/div><h2>Trois niveaux de r\u00e9ponse<\/h2><table class=\"nmc-table\"><thead><tr><th>Situation<\/th><th>Action RGPD<\/th><\/tr><\/thead><tbody><tr><td>Aucun risque pour les personnes<\/td><td>Documenter la violation en interne.<\/td><\/tr><tr><td>Risque pour les droits et libert\u00e9s<\/td><td>Documenter et notifier la CNIL dans les meilleurs d\u00e9lais, si possible sous 72 heures apr\u00e8s prise de connaissance.<\/td><\/tr><tr><td>Risque \u00e9lev\u00e9<\/td><td>Documenter, notifier la CNIL et informer les personnes concern\u00e9es dans les conditions pr\u00e9vues par le RGPD.<\/td><\/tr><\/tbody><\/table><h2>Si toutes les informations ne sont pas encore disponibles<\/h2><p>La CNIL permet une notification initiale puis une notification compl\u00e9mentaire. Attendre d\u2019avoir une connaissance parfaite de l\u2019incident peut faire perdre un temps critique.<\/p><h2>Checklist d\u2019incident<\/h2><ul><li>Chronologie et p\u00e9rim\u00e8tre document\u00e9s.<\/li><li>Donn\u00e9es et personnes concern\u00e9es estim\u00e9es.<\/li><li>Mesures de confinement prises.<\/li><li>Risque \u00e9valu\u00e9 et d\u00e9cision de notification justifi\u00e9e.<\/li><li>Communication coordonn\u00e9e avec DPO, DSI\/RSSI, direction et m\u00e9tiers.<\/li><li>Retour d\u2019exp\u00e9rience et plan de correction lanc\u00e9s.<\/li><\/ul><p><a class=\"nmc-link\" href=\"https:\/\/www.cnil.fr\/fr\/violations-de-donnees-personnelles-les-regles-suivre\" target=\"_blank\" rel=\"noopener\">Source officielle : CNIL \u2014 violations de donn\u00e9es \u2192<\/a><\/p><\/article>","protected":false},"excerpt":{"rendered":"<p>Comment g\u00e9rer une violation de donn\u00e9es personnelles ? Mis \u00e0 jour le 5 ao\u00fbt 2026. Une violation peut toucher la confidentialit\u00e9, l\u2019int\u00e9grit\u00e9 ou la disponibilit\u00e9 de donn\u00e9es personnelles. La premi\u00e8re urgence est de contenir l\u2019incident tout en documentant les faits et en \u00e9valuant les risques&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-103","post","type-post","status-publish","format-standard","hentry","category-rgpd-protection-donnees"],"_links":{"self":[{"href":"https:\/\/dataprotect-rgpd.com\/index.php\/wp-json\/wp\/v2\/posts\/103","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dataprotect-rgpd.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dataprotect-rgpd.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dataprotect-rgpd.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dataprotect-rgpd.com\/index.php\/wp-json\/wp\/v2\/comments?post=103"}],"version-history":[{"count":1,"href":"https:\/\/dataprotect-rgpd.com\/index.php\/wp-json\/wp\/v2\/posts\/103\/revisions"}],"predecessor-version":[{"id":104,"href":"https:\/\/dataprotect-rgpd.com\/index.php\/wp-json\/wp\/v2\/posts\/103\/revisions\/104"}],"wp:attachment":[{"href":"https:\/\/dataprotect-rgpd.com\/index.php\/wp-json\/wp\/v2\/media?parent=103"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dataprotect-rgpd.com\/index.php\/wp-json\/wp\/v2\/categories?post=103"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dataprotect-rgpd.com\/index.php\/wp-json\/wp\/v2\/tags?post=103"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}