France · Privacy & Data Protection
The country's own data-protection regime, registration duties, and its official supervisory authority.
AI-drafted, editorially reviewed. Confirm specifics with the official authority.
France applies the EU GDPR together with the Loi Informatique et Libertés, supervised by the Commission nationale de l'informatique et des libertés (CNIL). Organisations need a lawful basis to process personal data, must respect individuals' rights, keep records of processing, secure the data, and notify the CNIL of personal-data breaches within 72 hours.
- You need a lawful basis to process personal data and must keep records of processing.
- Respect data-subject rights and secure personal data.
- Notify the CNIL of personal-data breaches within 72 hours.
- CNIL
Official French data-protection authority.
Government portals
- Government of France — Office of the French Prime Minister — government policies, ministers, and key legislation
- France Public Services (Service-Public) — France's unified administrative services — residence permits, taxes, social security, civil records
- French General Tax Directorate (DGFiP) — French income tax, VAT, wealth tax filing; tax residency determination; French tax number (NIF) application