Data Protection Monitor
Global Privacy & Data Protection Intelligence

France (FR) · Module Detail

France: Cross-Border & Adequacy

← Full France overview Build report with France Request deeper dive

#

No FR-specific T1/T2 evidence on transfer mechanisms, adequacy lists, SCC/BCR uptake or TIA practice was located this cycle; adequacy decisions are an EU-level Commission competence rather than a distinct French instrument.

Primary frameworkGDPR Arts 44-49 (EU-level, applied uniformly in France)
Supervisory authorityCNIL
Traffic-light rationale — Not assessedNo FR-specific T1/T2 evidence on transfer mechanisms, adequacy lists, SCC/BCR uptake or TIA practice was located this cycle; adequacy decisions are an EU-level Commission competence rather than a distinct French instrument.

Sub-modules (6)

Transfer MechanismsRed

No FR-specific transfer-mechanism findings this cycle.

Absence provenance: unavailable. Searched: unavailable.

Adequacy ReceivedRed

Adequacy decisions received are an EU Commission competence applied uniformly across Member States including France; no FR-specific instrument identified.

Absence provenance: unavailable. Searched: unavailable.

Adequacy GrantedRed

Adequacy decisions granted to third countries are adopted by the European Commission, not France individually.

Absence provenance: unavailable. Searched: unavailable.

Sccs And BcrsRed

No FR-specific SCC/BCR uptake data surfaced this cycle.

Absence provenance: unavailable. Searched: unavailable.

Transfer Impact AssessmentRed

No FR-specific TIA guidance surfaced this cycle.

Absence provenance: unavailable. Searched: unavailable.

Data LocalisationAmber

France operates a sector-specific CNIL authorisation gate for health-data warehouses (e.g., IQVIA's LRX/EMR warehouses) rather than a blanket localisation mandate.

Claims (1):

  • CLM-FR-a10016o2 (claim on file)
Category narrative37 words

France applies the GDPR's uniform EU transfer regime (adequacy decisions, SCCs, BCRs, derogations) as an EU Member State; no FR-specific derogation or localisation mandate beyond the sector-specific CNIL authorisation gate for health-data warehouses was evidenced this cycle.

no periodic updates on record for this sub-brief