--- title: "France — Cross-Border & Adequacy | Data Protection Monitor" canonical: https://dataprotection.gi/jurisdictions/france/cross-border-and-adequacy/ source_html: /jurisdictions/france/cross-border-and-adequacy/index.html description: "France — Cross-Border & Adequacy: cross_border_and_adequacy Cross-Border & Adequacy COVERAGE GAP 6 sub-modules Not assessed ▾ # No FR-specific T1/T2 evidence on transfer mechanisms, adequacy lists, SCC/BCR uptake o" generated_at: 2026-10-25T04:46:50Z content_sha256: e6de9822d2fdc7a9d0250afddd0d5e26b0dbde040e2f9a7f86019cf58bda55a6 generator: "fe-fleet/md-twin@1.0" --- # France — Cross-Border & Adequacy | Data Protection Monitor ### D5Cross-Border & AdequacyCOVERAGE GAP6 sub-modulesNot assessed▾# No FR-specific T1/T2 evidence on transfer mechanisms, adequacy lists, SCC/BCR uptake or TIA practice was located this cycle; adequacy decisions are an EU-level Commission competence rather than a distinct French instrument. Primary framework GDPR Arts 44-49 (EU-level, applied uniformly in France) Supervisory authority [CNIL](https://www.cnil.fr/) Traffic-light rationale — Not assessed No FR-specific T1/T2 evidence on transfer mechanisms, adequacy lists, SCC/BCR uptake or TIA practice was located this cycle; adequacy decisions are an EU-level Commission competence rather than a distinct French instrument. #### Sub-modules (6) #### Transfer MechanismsRed No FR-specific transfer-mechanism findings this cycle. Absence provenance: unavailable . Searched: unavailable . #### Adequacy ReceivedRed Adequacy decisions received are an EU Commission competence applied uniformly across Member States including France; no FR-specific instrument identified. Absence provenance: unavailable . Searched: unavailable . #### Adequacy GrantedRed Adequacy decisions granted to third countries are adopted by the European Commission, not France individually. Absence provenance: unavailable . Searched: unavailable . #### Sccs And BcrsRed No FR-specific SCC/BCR uptake data surfaced this cycle. Absence provenance: unavailable . Searched: unavailable . #### Transfer Impact AssessmentRed No FR-specific TIA guidance surfaced this cycle. Absence provenance: unavailable . Searched: unavailable . #### Data LocalisationAmber France operates a sector-specific CNIL authorisation gate for health-data warehouses (e.g., IQVIA's LRX/EMR warehouses) rather than a blanket localisation mandate. Claims (1): - CLM-FR-a10016o2 (claim on file) Category narrative 37 words France applies the GDPR's uniform EU transfer regime (adequacy decisions, SCCs, BCRs, derogations) as an EU Member State; no FR-specific derogation or localisation mandate beyond the sector-specific CNIL authorisation gate for health-data warehouses was evidenced this cycle. no periodic updates on record for this sub-brief Evidence 0 — none recorded