🇫🇷 France · Privacy & Data Protection
Data-protection regime (GDPR/CCPA/PIPL and local laws), registration duties, and the official supervisory authority.
France applies the EU GDPR together with the Loi Informatique et Libertés, supervised by the Commission nationale de l'informatique et des libertés (CNIL). Organisations need a lawful basis to process personal data, must respect individuals' rights, keep records of processing, secure the data, and notify the CNIL of personal-data breaches within 72 hours.
- You need a lawful basis to process personal data and must keep records of processing.
- Respect data-subject rights and secure personal data.
- Notify the CNIL of personal-data breaches within 72 hours.
Official authorities
- CNIL
Official French data-protection authority.
Official-information aggregation, not legal advice. Always verify on the authority's own site.
Government portals
- Government of France — Office of the French Prime Minister — government policies, ministers, and key legislation
- France Public Services (Service-Public) — France's unified administrative services — residence permits, taxes, social security, civil records
- French General Tax Directorate (DGFiP) — French income tax, VAT, wealth tax filing; tax residency determination; French tax number (NIF) application