Checked on September 27, 2026
GDPR in France
How the GDPR works in France: the supervisory authority, the national law that supplements the regulation, and where to notify a breach.
- Supervisory authority
- National Commission on Informatics and Liberty (CNIL) (Commission nationale de l'informatique et des libertés (CNIL))
- National law supplementing the GDPR
- Law on Information Technology, Data Files and Civil Liberties · Loi n° 78-17 du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés · Loi n° 78-17 du 6 janvier 1978, as amended
- Age of digital consent
- 15
- National specifics
- CNIL accepts a two-step breach notification: initial notification, then a supplementary one.
Where does your company stand?
The free assessment applies these national rules to your answers and scores every area of the law.
Sources
National laws and portals change. This page is general information, not legal advice; confirm with the authority before relying on it.