Data Protection Monitor
Global Privacy & Data Protection Intelligence

France (FR) · Module Detail

France: Lawful Processing & Special Data

← Full France overview Build report with France Request deeper dive

#

Well-evidenced, GDPR-aligned regime with active CNIL enforcement on special categories and anonymisation claims.

Primary frameworkGDPR Arts 6, 7, 9 + Loi Informatique et Libertés Arts 66, 82
Supervisory authorityCNIL
Traffic-light rationale — GreenWell-evidenced, GDPR-aligned regime with active CNIL enforcement on special categories and anonymisation claims.

Sub-modules (4)

Lawful BasesGreen

GDPR Article 6 bases apply directly, replacing prior national equivalents.

Claims (1):

  • CLM-FR-a10007b7 (claim on file)

Special CategoriesGreen

Health data subject to Article 66 LIL enhanced safeguards and CNIL authorisation for data warehouses.

Claims (1):

  • CLM-FR-a10009b9 (claim on file)

Pseudonymisation And AnonymisationAmber

CNIL's IQVIA decision held re-identifiable warehouse data was pseudonymous, not anonymous, rejecting a post-SRB-judgment anonymisation defence.

Claims (1):

  • CLM-FR-a1000ac0 (claim on file)
Category narrative44 words

GDPR Article 6 lawful bases apply directly; consent for trackers must be a clear positive act under Article 82 LIL. Health and other special-category data receive enhanced national safeguards (Article 66 LIL), and CNIL enforcement (e.g., the IQVIA decision) actively tests the pseudonymisation/anonymisation boundary.

no periodic updates on record for this sub-brief