Nov. 23, 2020
Interviews
Full reference: Frison-Roche, M.-A., Facebook: Quand le Droit de la Compliance démontre sa capacité à protéger les personnes (Facebook: When Compliance Law proves its ability to protect people), interview with Olivia Dufour, Actu-juridiques Lextenso, 23rd of November 2020
Read the interview (in French)
Read the news of the Newsletter MAFR - Law, Compliance, Regulation about this question
Nov. 18, 2020
Thesaurus : 05. CJCE - CJUE
Full reference: CJEU, 1st chamber, 18th of November 2020, decision C‑519/19, Ryanair DAC vs DelayFix
Summary of the decision
This decision of the CJEU of 18th of November 2020 is about the jurisdiction clause for any dispute in air transport contracts, here those of Ryanair. This decision is especially interesting about the question to know whether the professional assignee (collection company) of a debt whose holder was a consumer may or may not avail itself of the consumer protection provisions, canceling the scope of this type of clause.
The Court takes back the criteria and the solution already used in 2019 about a credit contract: the protection applies by the criterion of the parties to the contract and not of the parties to the disputes. Such a clause is effective only if the integrality of the contract is transferred to the professional, and not only some of the stipulations.
This Regulatory decision, through "private enforcement", incentivizes consumers to transfer their compensation claim (around 250 euros) to collection companies which, in turn, discipline airlines to stay on schedule.
Nov. 16, 2020
Thesaurus : Soft Law
Full reference: US Securities and Exchanges Commission, Whistleblower Program. 2020 Annual Report to Congress, 16th of November 2020
Read, to go further on the question of whistleblowers:
Nov. 4, 2020
Thesaurus : Doctrine
►Full Reference: Barraud de Lagerie, P., Béthoux, E, Mias, A., Penalva Icher, E., 📝 La mise en oeuvre du devoir de vigilance : une managérialisation de la loi ?, in Droit et Société, 2020/3 n° 106, p. 699-714.
____
►English Summary of the Article:(done by the Authors) : Implementing the Corporate Duty of Vigilance: A Case of Managerialization of Law?
The 2017 French Corporate Duty of Vigilance Law obliges companies within its scope to draw up a “vigilance plan” and to publish it immediately in their next annual management report.
The article analyzes how these first “vigilance plans” were drafted in 2018-2019. Following Lauren B. Edelman's theory of legal endogeneity, the authors question how the French law is being incorporated by companies and they examine the extent to which a process of managerialization shapes these plans.
Firstly, the authors argue that companies have heavily relied on pre-existing tools and policies, while taking the drafting of the plans as an opportunity to rationalize these tools.
Secondly, the authors argue that this managerialization of law occurs under the critical eye of the nongovernmental organizations that actively contributed to the statute’s adoption and that promote alternative ways for its implementation. Duty of vigilance – Endogenization of law – Implementation – Managerialization – Multinational companies.
____
Nov. 1, 2020
Newsletter MAFR - Law, Compliance, Regulation
Full reference: Frison-Roche, M.-A., Due process and Personal Data Compliance Law: same rules, one Goal (CJEU, Order, October 29, 2020, Facebook Ireland Ltd v/ E.C.), Newsletter MAFR - Law, Compliance, Regulation, 1st of November 2020
Read by freely subscribing other news of the Newsletter MAFR - Law, Compliance, Regulation
Read Marie-Anne Frison-Roche's interview in Actu-juridiques about this decision (in French)
Summary of the news:
As part of a procedure initiated for anti-competitive behaviors, the European Commission has three times requested, between the 13th of March and the 11th of November 2019, from Facebook the communication of information, reitarated in a decision in May 2020.
Facebook contests it alleging that the requested documents would contain sensitive personal information that a transmission to the Commission would make accessible to a too broad number of observers, while "the documents requested under the contested decision were identified on the basis of wideranging search terms, (...) there is strong likelihood that many of those documents will not be necessary for the purposes of the Commission’s investigation".
The contestation therefore evokes the violation of the principles of necessity and proportionality but also of due process because these probatory elements are collected without any protection and used afterwards. Moreover, Facebook invokes what would be the violation of a right to the respect of personal data of its employees whose the emails are transferred.
The court reminds that the office of the judge is here constraint by the condition of emergency to adopt a temporary measure, acceptable by the way only if there is an imminent and irreversible damage. It underlines that public authorities benefit of a presumption of legality when they act and can obtain and use personal data since this is necessary to their function of public interest. Many allegations of Facebook are rejected as being hypothetical.
But the Court analyzes the integrality of the evoked principles with regards with the very concrete case. But, crossing these principles and rights in question, the Court estimates that the European Commission did not respect the principle of necessity and proportionality concerning employees' very sensitive data, these demands broadening the circle of information without necessity and in a disproportionate way, since the information is very sensitive (like employees' health, political opinions of third parties, etc.).
It is therefore appropriate to distinguish among the mass of required documents, for which the same guarantee must be given in a technique of communication than in a technic of inspection, those which are transferable without additional precaution and those which must be subject to an "alternative procedure" because of their nature of very sensitive personal data.
This "alternative procedure" will take the shape of an examination of documents considered by Facebook as very sensitive and that it will communicate on a separate electronic support, by European Commission's agents, that we cannot a priori suspect to hijack law. This examination will take place in a "virtual data room" with Facebook's attorneys. In case of disagreement between Facebook and the investigators, the dispute could be solved by the director of information, communication and medias of the Directorate-General for Competition of the European Commission.
___
We can draw three lessons from this ordinance:
__________
Nov. 1, 2020
Publications
This working paper served as a basis for an interview organized by Olivia Dufour in French in Actu-juridiques-Lextenso on 11st of January 2021.
Oct. 27, 2020
Newsletter MAFR - Law, Compliance, Regulation
Full reference: Frison-Roche, M.-A., From Competition Law to Compliance Law: example of French Competition Authority decision on central purchasing body in Mass Distribution, Newsletter MAFR - Law, Compliance, Regulation, 27th of October 2020
Read by freely subscribing the other news of the Newsletter MAFR - Law, Compliance
_____
Summary of the news: Through its decision of 22nd of October 2020, the Autorité de la concurrence (French Competition Authority) accepted the commitments proposed by retail sector's firms Casino, Auchan, Metro and Schiever so that their agreement by which a common body centralizes purchases from numerous retailers, allowing each to offer these products under private label, is admissible with regard to competitive requirements.
In this particular case, the Authority had self-sized in July 2018, estimating that such a purchase center could harm competition, opening immediately a large consultation on the terms of the contract. In October 2018, the law Egalim permitted to the Authority to take temporary measures to suspend such a contract, what the Authority did from September.
The convention parties' firms committed on the one hand to update their contract limiting the power on suppliers, especially small and very small suppliers, excluding totally of the field of the contract some kind of products, especially food products and reducing the share of bought products volume dedicated to their transformation in distributor brand.
The Autorité de la concurrence accepts this proposal of commitments, congratulates itself of the protection of small suppliers operating like that and observe the similarity with the contract consisting in a purchase center between Carrefour and Tesco, which will be examined soon.
_____
We can draw three lessons of this innovating decision, which could be a model for after:
1. The technique of Compliance Law permits to the Autorité de la concurrence to find a reasonable solution for the future.
2. The retail sector finally regulated by Compliance technics.
3. The political nature of Compliance law in the retail sector
___________
See in counterpoints the pursuit of a contentious procedure against Sony, whose the proposals of commitments, made after a public consultation, were not found satisfying.
To go further, on the question of Compliance law permitting through indirect way the rewriting by the Conseil of a structuring contract (linking a platform created by the State to centralize health data with an American firm subsidy to manage them).
Oct. 15, 2020
Thesaurus : Soft Law
Full reference: Serious Fraud Office, Operational Handbook about Deferred Prosecution Agreements, October 2020
Sept. 24, 2020
Publications
Full Reference: Frison-Roche, M.-A., L'aventure du Droit de la Compliance ("The Adventure of Compliance Law"), Chronique de Droit de la Compliance ("Chronicles MAFR - Compliance Law"), Recueil Dalloz, September 24, 2020.
Read the Chronicle (in French)
This Chronicle of Compliance Law is based on a bilingual working document with additional developments, technical references and hypertext links.
Read the Working Paper (written in English).
____
Chronicle Summary:
Compliance Law is an "adventure" in that it is a new branch of Law, anchored in Regulatory Law, which has freed itself from it while retaining the major principles to which it gives a new breath.
In the same way that I entered Sciences Po in 2000 to create a Master de Droit économique centered around Regulation Law, this new branch of Law, a Forum de la Régulation and a Chaire Régulation, now "20 ans après" and as in any adventure, the objective is to give solid, coherent and substantial bases to this Compliance Law which is practiced intensely without being fully conceived.
Compliance should not be reduced to a procedure of effectiveness and efficiency of other rules, such as Competition Law or Criminal Law, a sort of enforcement process going from the Ex Post to the Ex Ante, because that would be both too little (simply processes) and too much (the power of Compliance Law in the service of all rules, the violence of Compliance being able to serve in very violent Substantial Law itself, which one can observe in some legal systems).
It is necessary to anchor all this new branch of Law in goals, this Law being teleological in nature as is the Law of Regulation. These goals are "monumental", by which the public authorities express still, and more now than in the past, "pretensions", such as the protection of the environment or of people even if they are distant from the territory on which they have traditionally taken.
All these "monumental goals" converge towards a goal that encompasses them all: the protection of the person, which justifies the unusual power of legal Compliance mechanisms and the new relationship between States and "crucial operators". In this, Europe is exemplary of what could be this new branch of Law of which it bears the model.
______
Sept. 21, 2020
Newsletter MAFR - Law, Compliance, Regulation
Full reference: Frison-Roche, M.-A., Regulation, Compliance & Cinema: learning about Internet Regulation with the series "Criminals", Newsletter MAFR - Law, Compliance, Regulation, 21st of September 2020
Read by freely subscribing other news of the Newsletter MAFR - Law, Compliance, Regulation
Summary of the news:
Season 2 Episode 3 of the British version of the series "Criminals" features the character of Danielle. Danielle is a mother which has decided to hunt down pedophiles on social networks in order to trap them and show to the world their acts. Danielle insists on the efficiency of her action with regard to the police and justice that she finds unproductive. In the episode, Danielle is accused of defamation by the police. While policemen try to explain to Danielle the importance of using a regular procedure and to respect the Rule of Law aiming to prove its accusations, she makes efficiency her only principle. According to her, her methods get results (on the contrary of those used by the police which respect procedures) and those she accuses to be pedophiles do not deserve defense rights.
We can learn three lessons from Danielle's story:
Sept. 16, 2020
Publications
🌐follow Marie-Anne Frison-Roche on LinkedIn
🌐subscribe to the Newsletter MAFR Regulation, Compliance, Law
____
Full reference: M.-A. Frison-Roche, Se tenir bien dans l'espace numérique, in Penser le droit de la pensée. Mélanges en l'honneur de Michel Vivant, Lexis Nexis and Dalloz, 2020, pp. 155-168.
____
📝Read the article (in French)
____
English summary of the article: The digital space is one of the scarce spaces not framed by a specific branch of Law, Freedom also offering opportunity to its actors to not "behave well", that is to express and diffuse broadly and immediately hateful thoughts through Hate speechs, which remained before in private or limited circles. The intimacy of Law and of the legal notion of Person is broken: Digital permits to individuals or organizations to act as demultiplied and anonymous characters, digital depersonalized actors who carry behaviors that are hurtful to other's dignity.
Against that, Compliance Law offers an appropriate solution: internalizing in digital crucial operators the mission to disciplinary and substantially hold the digital space. The digital space has been structured by powerful firms able to maintain order. Because Law must not reduce digital space to be only a neutral market of digital prestations, these crucial operators, like social networks or search engines, must be forced to substantially control behaviors. It could be about an obligation of internet users to act with their face uncover, "real identity" policy controlled by firms, and to respect others' rights, privacy rights, dignity, intellectual property rights. In their Regulatory function, digital crucial firms must be supervised by public authorities.
Thus, Compliance law substantially defined is the protector of the person as "subject of law" in the digital space, by the respect that others must have, this space passing from the status of free space to the one of civilized space, in which everyone is obliged to behave well.
______
Read to go further:
Sept. 13, 2020
Thesaurus : Doctrine
►Référence complète : A. Maymont. ”Le droit de la compliance au secours de la stabilité financière”. Revue Banque, Revue Banque édition, 2020, pp. 50-53.
____
►Résumé de l'article : L'article reprend la définition du Droit de la Compliance comme ce qui prévient les risques de systèmes, notamment les "risques d'instabilité" qui affectent tout particulièrement les risques financiers, lesquels sont désormais principalement extra-financiers, notamment les cyber risques et les risques environnementaux et climatiques.
Il rappelle que le Droit de la Compliance incorpore le principe juridique de stabilité et confie aux autorités publiques le pouvoir d'inférer dans les contrats pour donner primauté à celui-ci. En matière de stabilité financière, c'est notamment l'ACPR et l'AMF qui le font.
Il souligne que pour être efficace, les régulateurs incitent les entreprises à coopérer. Leur action se justifie par l'ordre public financier, lequel évolue, le principe juridique de stabilité permet aux Autorités d'écarter les règles juridiques ordinaires, notamment la liberté contractuelle des banquiers, l'interdiction des ventes à découvert pendant le Covid étant une illustration de cela.
________
Sept. 5, 2020
Thesaurus : Doctrine
► Référence complète : N. Ida, "La charge de la preuve en matière de compliance : réflexion à partir de la décision Imerys", Rev. sociétés, 2020, pp. 464-470
____
► Résumé de l'article (fait par l'auteur) : "La commission des sanctions de l'Agence française anticorruption a rendu sa deuxième décision de sanction le 7 février 2020 dans l'affaire Imerys. À cette occasion, elle a rappelé que la vraisemblance du manquement reproché à la société mise en cause suffit à renverser la charge de la preuve sur cette dernière, qui est alors tenue de démontrer qu'elle a respecté ses obligations. Cette solution est originale en ce qu'elle déroge au principe d'attribution de la charge de la preuve à l'accusation. Elle se justifie néanmoins dans le contexte particulier du droit de la compliance, en raison de la plus grande aptitude probatoire des entreprises assujetties aux obligations de prévention de la corruption, qui sont légalement tenues de se préconstituer des preuves par le biais de documents imposés.".
____
🦉Cet article est accessible en texte intégral pour les personnes inscrites aux enseignements de la Professeure Marie-Anne Frison-Roche
________
Sept. 2, 2020
Newsletter MAFR - Law, Compliance, Regulation
Full reference: Frison-Roche, M.-A., Compliance & Regulatory Soft Law, legal Certainty and Cooperation: example of the U.S. Financial Crimes Enforcement Network new Guidelines on AML/FT, Newsletter MAFR - Law, Compliance, Regulation, 2nd of September 2020
Read by freely subscribing other news of the Newsletter MAFR - Law, Compliance, Regulation
Summary of the news
The Financial Crimes Enforcement Network (FinCEN) is an organ, depending on the American Treasury, in charge of fighting against financial criminality and especially against money laundering and terrorism financing. For this, it has large control and sanction powers.
In August 2020, the FinCEN published a document untitled "Statement on Enforcement" which aimed to explicit its control and sanction methods. It reveals what firms risk in case of offense (from the simple warning letter to criminal pursuits passing through financial fines) and the different criteria on which FinCEN is based to use one sanction rather than another. Among these criteria, we find for examples the nature and the seriousness of committed violations or the firm's history but also the implementation of compliance program or the quality and the spread of the cooperation with FinCEN durning the investigation.
One of the objectives of the publication of such an information document is to obtain the cooperation of firms by creating a confidence relationship between the regulator and the regulated firm. However, it is very difficult to ask to the firms to cooperate and to furnish information if they can fear that this same information can be used later as proof against them by the FinCEN.
Another objective is to reinforce legal security and transparency. However, the FinCEN's declaration does not seem to commit it, because it is not presented as a chart but as a simple declaration. Indeed, the list of the possible sanctions and the criteria used by the FinCEN are far from being exhaustive and can be completed in concreto by the FinCEN without any justification.
Aug. 31, 2020
Newsletter MAFR - Law, Compliance, Regulation
Full reference: Frison-Roche, M.-A., Compliance by Design, a new weapon? Opinion of Facebook about Apple new technical dispositions on Personal Data protection, Newsletter MAFR - Law, Compliance, Regulation, 31st of August 2020
Read by freely subscribing other news of the Newsletter MAFR - Law, Compliance, Regulation
Summary of the news:
Personal Data, as they are information, are Compliance Tools. They represent a precious resource for firms which must implement a vigilance plan in order to prevent corruption, money laundering or terrorism financing, for examples. It is the reason why personal data are the angular stone of "Compliance by design" systems. However, the use of these data cannot clear the firm of its simultaneous obligation to protect these same personal data, that is also a "monumental goal" of Compliance Law.
In order to be able to exploit these data in an objective of Compliance and protecting them in the same time, the digital firm Apple adopted for example new dispositions in order to the exploitation of the Identifier For Advertisers (IDFA) integrated in the iPad and in the iPhone and broadly used by targeted advertising firms, is conditioned to the consumer's consent.
Facebook reacted to this new disposition explaining that such measures will restrict the access to data for advertisers who will suffer from that. Facebook suspects Apple to block the access to advertisers in order to develop its own advertising tool. Facebook guaranteed to advertisers who work with it that it will not take similar measures and that it will always favor consultation before decision making in order to concile sometimes divergent interests.
We can sleep and already make some remarks:
The whole paradox of Compliance Law rests in the equilibrium between circulation of information and secret.
Aug. 26, 2020
Newsletter MAFR - Law, Compliance, Regulation
Full reference: Frison-Roche, M.-A., Difficulty of Compliance in Self-Regulation system: example of the Summer 2020 meetings of OPEC about the "conformity" for Oil Market Stability, Newsletter MAFR - Law, Compliance, Regulation, 26th of August 2020
Read by freely subscribing other news of the Newsletter MAFR - Law, Compliance, Regulation
Summary of the news
The world production of oil is largely coordinated by the Organization of the Petroleum Exporting Countries (OPEC) and especially by its Joint Ministerial Monitoring Committee (JMMC). On 15th of July 2020, this Committee decides to reduce the world production of oil in order to maintain a certain price stability in a context of restricted demand because of the COVID-19 pandemic.
However, such a stability can be maintained only if each member respects this decision and effectively reduce its production level. This meeting of 15th of July also aimed to get member's conformity. In order to get this conformity, the JMMC declared that it will use "name and shame", shaming countries which do not respect the Committee's declaration and naming those which respect it. A second meeting, on 19th of August 2020, reminded to non-compliant countries their obligation and urged them to comply before the 28th of August.
We can observe two things:
Aug. 25, 2020
Newsletter MAFR - Law, Compliance, Regulation
Full reference: Frison-Roche, M.-A., The always in expansion "Right to be Forgotten": a legitimate Oxymore in Compliance Law built on Information. Example of Cancer Survivors Protection, Newsletter MAFR - Law, Compliance, Regulation, 25th of August 2020
Read by freely subscribing other news of the Newsletter MAFR - Law, Compliance, Regulation
Summary of the news
The "right to be forgotten" is an invention of the Court of Justice of the European Union during the case Google Spain in 2014. It implies that digital firms block the access to personal data of someone who asks it. This "right to be forgotten", which permits to impose secret to third parties has largely been generalized by GDPR in 2016. This new fundamental subjective right is a very political and European right. United-States which, on the contrary of Europe, did not experience nazism, links the "right to be forgotten" to the protection of consumer, conception which especially leads California Consumer Privacy Act adopted in 2018 to link this right to a situation of absence of necessity of this data for the firm which obtained it.
In Europe, this willingness to protect directly the person increases the scope of such a subjective right. Thus, in France and in Luxembourg, since 2020, a cancer survivor can thus ask that such an information is not accessible among his or her health data, especially for insurance companies which use them in their risk calculus to set premium amount. Netherlands will do the same in 2021 to fight against discrimination between banks' and insurances' clients.
The "monumental goal" is therefore not so much here the protection of individual freedoms as the protection of the vulnerable person, which is bye the way the keystone of a Compliance Law, concealing sometimes prohibition to circulate information (as here) and sometimes obligation to circulate information (in other cases, where the alert must be given) depending on whether vulnerable people are protected either by one or by the other.
Aug. 20, 2020
Thesaurus : Doctrine
► Référence complète : Dreyfuss, S., Remplacer la culture de la corruption par une culture de la compliance : l’Europe prend ses responsabilités pour son propre avenir, Le Grand Continent, août 2020.
____
July 9, 2020
Thesaurus : Doctrine
► Full reference: M.-E. Boursier, "Qu'est-ce que la compliance ? Essai de définition", D. 2020, Chron., p. 1419-1424.
____
► Summary of the article (done by the author, in French): Au-delà de la diversité de ses sources et de ses finalités, de la variabilité de sa valeur normative et des sanctions encourues, apparaît un élément commun à toutes les déclinaisons de la compliance : la méthode par laquelle elle se déploie.
La compliance se définit avant tout comme une méthode, inspirée des théories de la procéduralisation du droit. Elle consiste en une « internalisation », par l'entreprise et dans l'entreprise, de systèmes de conformité (cartographie des risques, procédures, vigilance, alerte) qui conduisent in fine les opérateurs économiques à assister les États dans la réalisation de leurs missions (lutte contre les grandes infractions du droit pénal des affaires internationales comme le blanchiment et la corruption, respect des droits humains, etc.).
________
Dec. 19, 2019
Publications
Complète Reference : Frison-Roche, M.-A., Théorie juridique de la cartographie des risques, centre du Droit de la Compliance (Legal Theory of Risk Mapping, center of Compliance Law), D.2019, chronique Compliance, p.
Summary : The act of mapping risks is not currently defined by Law. It is only described in special laws. While risks mapping is central to preventing in Ex Ante the occurrence of crises or behaviors from which the occurrence is excluded, no legal regime is available, due to the lack of a legal definition available. This legal definition is proposed here in 5 stages, starting from special laws and specific cases to go towards a general conception. Risk mapping then appears as a concern for others taken care of willingly or by force by crucial operators, through a new subjective right: the “right to be alarmed”, the map being the structural counterpart of the character of the whistleblower. Two articulated systems of Compliance Law.
Read the article, published in French.
Read its translation in English.
_______________
Dec. 12, 2019
Thesaurus : Doctrine
Référence complète : Malik, A., La conformité dans les établissements financiers sous le prisme du droit pénal, thèse Toulouse, 2019.
Nov. 21, 2019
Thesaurus : Doctrine
July 25, 2019
Thesaurus : Doctrine
Full reference : Avout, L. d', L'entreprise et les conflits internationaux de lois, coll. "Les livres de poche de l'Acédémie de droit internationa de La Haye, 2019, 854 p.
Developments about Compliance are n°279 and following and page 722 and following.
July 18, 2019
Interviews
► Référence complète : M.-A. Frison-Roche, M.-A., "Gouvernance d'Internet : nous sommes face à un enjeu de civilisation", Petites affiches, 18 juillet 2019, entretien mené avec Olivia Dufour, à propos du rapport reçu par le Gouvernement le 15 juillet 2019 :
► Présentation de l'entretien par Les Petites Affiches : "Dans le rapport qu’elle a remis au secrétaire d’État au numérique en juillet, Marie-Anne Frison-Roche émet 55 propositions visant à élaborer une gouvernance d’internet fondée sur la compliance. Il s’agit en pratique pour le politique de définir des buts monumentaux : par exemple la lutte contre le réchauffement climatique et de les internaliser dans les acteurs cruciaux, par exemple Facebook ou Google sous le contrôle d’un superviseur. Ainsi Facebook serait-il appelé à surveiller les échanges numériques de la même façon qu’aujourd’hui Euronext surveille les échanges financiers. Au-delà de la question cruciale de la régulation du numérique, l’ambition consiste pour l’Europe à être fidèle à sa tradition humaniste en imposant par le droit la protection de la personne.".
____
____
► Se reporter au Rapport de Marie-Anne Frison-Roche, L'apport du Droit de la Compliance dans la Gouvernance d'Internet, à propos duquel l'interview a été donné.
________
May 29, 2019
Thesaurus : Doctrine
► Full Reference: M. Canto-Sperber, "La compliance et les définitions traditionnelles de la vertu" ("Compliance and traditional definitions of virtue"), in M.-A. Frison-Roche (ed.), Pour une Europe de la Compliance, series "Régulations & Compliance", Dalloz, 2019, p. 73-77.
____
📕read a general presentation of the book, Pour une Europe de la Compliance, in which this article is published
____
► Summary of the article (done by the Journal of Regulation & Compliance):
____
🦉This article is available in full text to those registered for Professor Marie-Anne Frison-Roche's courses
________