---
title: "France — Lawful Processing & Special Data | Data Protection Monitor"
canonical: https://dataprotection.gi/jurisdictions/france/lawful-processing-and-special-data/
source_html: /jurisdictions/france/lawful-processing-and-special-data/index.html
description: "France — Lawful Processing & Special Data: lawful_processing_and_special_data Lawful Processing & Special Data 4 sub-modules Green ▾ # Well-evidenced, GDPR-aligned regime with active CNIL enforcement on special categories a"
generated_at: 2026-10-25T04:46:50Z
content_sha256: ed6d06fa7e1b08925374e54b1fab22587567b8f2cdb3296a247200f59a2c48e7
generator: "fe-fleet/md-twin@1.0"
---
# France — Lawful Processing & Special Data | Data Protection Monitor

### D2Lawful Processing & Special Data4 sub-modulesGreen▾#

Well-evidenced, GDPR-aligned regime with active CNIL enforcement on special categories and anonymisation claims.

Primary framework GDPR Arts 6, 7, 9 + Loi Informatique et Libertés Arts 66, 82

Supervisory authority [CNIL](https://www.cnil.fr/)

Traffic-light rationale — Green Well-evidenced, GDPR-aligned regime with active CNIL enforcement on special categories and anonymisation claims.

#### Sub-modules (4)

#### Lawful BasesGreen

GDPR Article 6 bases apply directly, replacing prior national equivalents.

Claims (1):

- CLM-FR-a10007b7 (claim on file)

#### Consent ThresholdsGreen

Consent to trackers must be a clear positive act, freely revocable, and refusal must be as easy as acceptance.

Claims (1):

- CLM-FR-a10008b8 (claim on file)

#### Special CategoriesGreen

Health data subject to Article 66 LIL enhanced safeguards and CNIL authorisation for data warehouses.

Claims (1):

- CLM-FR-a10009b9 (claim on file)

#### Pseudonymisation And AnonymisationAmber

CNIL's IQVIA decision held re-identifiable warehouse data was pseudonymous, not anonymous, rejecting a post-SRB-judgment anonymisation defence.

Claims (1):

- CLM-FR-a1000ac0 (claim on file)

Category narrative 44 words

GDPR Article 6 lawful bases apply directly; consent for trackers must be a clear positive act under Article 82 LIL. Health and other special-category data receive enhanced national safeguards (Article 66 LIL), and CNIL enforcement (e.g., the IQVIA decision) actively tests the pseudonymisation/anonymisation boundary.

no periodic updates on record for this sub-brief

Evidence 0 — none recorded