Data Advocacy for France
Law No. 78 17 of 6 January 1978 on ‘Information Technology, Data Files and Civil Liberty’ (‘Law’) is the principal law regulating data protection in France.
The EU Data Protection Directive 95/46/EC was implemented via Law No. 2004-801 of 6 August 2004 which amended the Law. Enforcement of the Law is principally through the ‘Commission Nationale de l’Informatique et des Libertés’ (CNIL).
Commission Nationale de l’Informatique et des Libertés (CNIL)
3 place de Fontenoy
TSA 80175
75334 Paris Cedex 07
T 01 53 73 22 22
F 01 53 73 22 00
https://www.cnil.fr/en/home
The CNIL is responsible for ensuring that information technology remains at the service of citizens, and does not jeopardise human identity or breach human rights, privacy or individual or public liberties.
However, an organisation is exempt from making prior declarations to the CNIL if the organisation has appointed a DPO.
The appointment of a DPO does not exempt an organisation from requesting prior authorisation, where necessary (e.g. for the transfer of data to a country that does not provide an adequate level of protection to personal data).
The DPO is in charge of verifying the compliance of data processing with the Law. The DPO communicates, to any person who requests, information on the processing such as its purposes, interconnections, the types of data and the categories of concerned persons, the length of data retention and the department in charge of implementing the processing.
The Law does not set out any general obligation to notify the CNIL or the data subject in the event of a data security breach.
However, electronic communication services providers must notify the CNIL without delay in the event of a data security breach during the provision of electronic communications services via publicly available electronic communications networks. The breach must also be notified without delay to subscribers if it may violate their personal data or privacy, except if the CNIL has already established that appropriate protection measures have been implemented by the provider in relation to the data implicated by the breach.
Electronic communication services providers must keep an up to date inventory of all breaches of personal data.
Information / Notice Requirements:
An organization that collects Personal Data must provide Data Subjects with information about: the organization’s identity; the purposes for collecting Personal Data; its privacy practices (which must be given in a clear and transparent way); third parties to which the organization will disclose the Personal Data; the consequences of not providing consent; the rights of the Data Subject; how long the Personal Data is to be retained (or if not possible, the criteria used to determine such retention period); where the Personal Data is to be transferred; how to contact the privacy officer or other person accountable for the organization’s policies and practices; how to access and/or correct the Data Subject’s Personal Data; and the duration of the proposed processing.
Opt-in regime: no direct marketing electronic mail can be legally sent without the express consent of the receiver, unless a pre-existing business or commercial relationship exists. (Consent is however not mandated for marketing to legal persons.)
Also, a specific opt out must be offered with each message. Disguised sender identities are prohibited, and a valid return address must be provided.
The term “Opt-Out Rule” means that the sending of e-marketing to the recipient is permitted on an opt-out basis if:
- the recipient’s details were originally collected “in the context of a sale”.
- the entity sending the marketing is the same legal entity that collected the recipient’s details initially.
- the marketing relates to “similar” products and/or services for which the recipient’s details were originally obtained.
- the recipient is given the opportunity free of charge to object to the e-marketing, both at the time their details were collected and in each subsequent communication.
Applicable Legislation:
Article L34-5 of the Postal and Electronic Communications Code
First party e-marketing
(entity that collects the data will send the e-marketing itself)
B2C: Opt-in. Opt-out permitted where Opt-Out Rule applies.
B2B: Opt-out
Third party e-marketing
(entity that collects the data will share with third party partner for e-marketing)
B2C: Opt-in
B2B: Opt-in.
hotmail.fr 13936239
yahoo.fr 8039605
live.fr 3777947
orange.fr 2267619
free.fr 2167076
wanadoo.fr 1372847
neuf.fr 432551
sfr.fr 392937
voila.fr 353868
aliceadsl.fr 201601
club-internet.fr 176031
numericable.fr 109146
noos.fr 96937
bbox.fr 83319
gmx.fr 63639
libertysurf.fr 41072
tiscali.fr 40443
outlook.fr 38923
tele2.fr 37015
aol.fr 35806
gmail.fr 30851
9online.fr 20388
msn.fr 19566
badoo.fr 15612
infonie.fr 14908
laposte.fr 12397
homail.fr 11807
clubinternet.fr 11798
yopmail.fr 11177
hotmai.fr 10249
speed.1s.fr 10086
nordnet.fr 9379
modulonet.fr 9293
estvideo.fr 8154
caramail.fr 7807
club.fr 7764
marketplace.amazon.fr 7462
wanado.fr 7264
worldonline.fr 6926
online.fr 6321
otmail.fr 5653
yahoogroupes.fr 5120
freesurf.fr 5072
chello.fr 4833
freesbee.fr 4493
hotmal.fr 4435
ool.fr 3733
myspace.fr 3587
htmail.fr 3559
terre-net.fr 3515
jubii.fr 3500
yaho.fr 3383
airfrance.fr 3383
hotmil.fr 3188
hotamil.fr 3155
nomade.fr 3067
pgsm.fr 2966
edf.fr 2833
escem.fr 2831
etudiants.ensam.fr 2682
axa.fr 2609
9business.fr 2439
yaoo.fr 2431
cea.fr 2268
tempomail.fr 2265
hotail.fr 2250
get2mail.fr 2223
yahou.fr 2200
facebook.fr 2175
ensae.fr 2063
essec.fr 2045
ive.fr 2031
ceram.fr 2029
ymail.fr 1986
hotil.fr 1965
hoymail.fr 1947
yhoo.fr 1946
mail.fr 1868
numeo.fr 1844
esme.fr 1821
pole-emploi.fr 1815
hormail.fr 1782
hotamail.fr 1771
love.fr 1753
univ-lyon2.fr 1750
web.fr 1672
insa-lyon.fr 1661
hot.fr 1615
educagri.fr 1604
agroparistech.fr 1603
justice.fr 1600
paris.fr 1593
bv.toulouse.iufm.fr 1591
yahho.fr 1573
wandoo.fr 1565
hotma.fr 1530
hotmaill.fr 1528
sncf.fr 1515
ahoo.fr 1503
inserm.fr 1490
alcatel-lucent.fr 1463
hotemail.fr 1382
htomail.fr 1372
homtail.fr 1371
anpe.fr 1365
eigsi.fr 1361
notaires.fr 1356
cic.fr 1355
mail-temporaire.fr 1331
skymail.fr 1322
hsbc.fr 1319
eleve-efb.fr 1305
cpe.fr 1264
livr.fr 1229
interieur.gouv.fr 1228
diplomatie.gouv.fr 1226
bouyguestelecom.fr 1211
magic.fr 1195
liv.fr 1193
etu.univ-cezanne.fr 1187
netcourrier.fr 1186
hotmaim.fr 1174
ratp.fr 1157
mines-paristech.fr 1119
hotmeil.fr 1096
u-psud.fr 1087
life.fr 1083
etudiant.u-clermont1.fr 1078
hotmial.fr 1067
developpement-durable.gouv.fr 1044
imode.fr 1043
tf1.fr 1034
alcatel.fr 1031
hitmail.fr 1022
yhaoo.fr 1018
hec.fr 1016
alice.fr 1011
francetv.fr 997
telecom-paristech.fr 981
lycos.fr 974
deloitte.fr 972
afpa.fr 972
cario.fr 966
hotmaile.fr 958
skype.fr 949
alicemail.fr 944
unice.fr 943
email.fr 940
agf.fr 934
pourri.fr 932
capgemini.fr 926
only.fr 919
blackberry.orange.fr 915
lve.fr 905
range.fr 904
utbm.fr 896
houtmail.fr 894
fre.fr 884
esc-lille.fr 880
campus-igs-toulouse.fr 868
ieseg.fr 860
ac-nantes.fr 849
hotml.fr 846
efrei.fr 843
excite.fr 842
ac-rouen.fr 838
auchan.fr 827
etu.lasalle-beauvais.fr 815
mailistec.fr 806
anadoo.fr 804
univ-nantes.fr 803
ac-toulouse.fr 802
equipement.gouv.fr 793
utt.fr 773
groupe-casino.fr 771
cegetel.fr 763
wannadoo.fr 755
ac-rennes.fr 754
hayoo.fr 753
fr.fr 751
ac-nancy-metz.fr 744
ac-poitiers.fr 743
hptmail.fr 742
dgfip.finances.gouv.fr 742
yahooo.fr 739
ac-versailles.fr 738
viacesi.fr 724
etu.utc.fr 723
sante.gouv.fr 716
pasteur.fr 714
univ-lyon1.fr 713
nantes.fr 705
etu.enseeiht.fr 698
caissedesdepots.fr 696
yayoo.fr 695
insa-rouen.fr 691
hei.fr 686
epita.fr 679
univ-rennes1.fr 674
u-bourgogne.fr 669
ac-grenoble.fr 668
monster.fr 665
exemple.fr 664
adecco.fr 660
wanadou.fr 659
alicepro.fr 658
hotmzil.fr 653
bouygtel.fr 648
google.fr 646
orage.fr 644
esc-rouen.fr 643
easynet.fr 637
llive.fr 634
m6.fr 627
ac-amiens.fr 621
livel.fr 618
agriculture.gouv.fr 618
upmc.fr 614
veoliaeau.fr 613
chu-lyon.fr 606
culture.gouv.fr 603
lives.fr 600
etu.esc-saint-etienne.fr 600
vinci-construction.fr 599
hotrmail.fr 590
ac-creteil.fr 588
unistra.fr 587
snecma.fr 586
hatmail.fr 586
generali.fr 586
hotlail.fr 585
yahoo.com.fr 580
orangr.fr 570
atoutfiat.fr 566
rocketmail.fr 565
ac-orleans-tours.fr 564
gotmail.fr 562
supelec.fr 557
mobileemail.vodafone.fr 555
neufcegetel.fr 554
hotmail.com.fr 550
cirad.fr 547
ac-lille.fr 545
yahhoo.fr 543
oange.fr 542
france3.fr 542
yahool.fr 541
allianz.fr 538
lemel.fr 532
kpmg.fr 529
nrj.fr 520
esc-rennes.fr 519
isep.fr 516
uha.fr 506
univ-paris1.fr 504
ujf-grenoble.fr 504
univ-lille1.fr 502
tmail.fr 502
hotmaol.fr 502
hottmail.fr 501
inria.fr 500
centrale-marseille.fr 500
cnam.fr 497
edfgdf.fr 496
ac-montpellier.fr 496
croix-rouge.fr 495
manpower.fr 492
finances.gouv.fr 491
aviation-civile.gouv.fr 491
ensiacet.fr 489
student.ecp.fr 488
reseau.renault.fr 488
cegetel.rss.fr 486
etu.univ-tours.fr 485
cmcee.creditmutuel.fr 485
ap-hm.fr 483
ac-bordeaux.fr 483
lhotmail.fr 481
hhotmail.fr 481
apec.fr 481
esc-larochelle.fr 479
bordeaux.archi.fr 473
ac-lyon.fr 473
cybercable.fr 472
cdn.fr 472
sonepar.fr 470
adp.fr 468
univ-fcomte.fr 467
hotmait.fr 467
hotmmail.fr 466
wibox.fr 464
univ-reims.fr 464
spray.fr 461
eurorscg.fr 460
yoo.fr 458
ubifrance.fr 458
hahoo.fr 458
enscp.fr 458
backlinkfactory.fr 458
li.fr 455
hautmail.fr 453
ens-lyon.fr 453
douane.finances.gouv.fr 450
esiee.fr 448
ecole.ensicaen.fr 447
univmed.fr 446
int-evry.fr 446
ece.fr 445
com.fr 445
ec-marseille.fr 441
gan.fr 439
hotmali.fr 438
univ-poitiers.fr 435
hootmail.fr 435
darty.fr 434
univ-lorraine.fr 433
univ-brest.fr 432
mcom.fr 432
yohoo.fr 431
univ-tours.fr 431
essilor.fr 431
ccip.fr 428
enst-bretagne.fr 426
egis.fr 426
mma.fr 425
mazars.fr 424
ve.fr 421
myicn.fr 417
paris.notaires.fr 415
creditfoncier.fr 413
cc-parthenay.fr 411
cnes.fr 410
lyonnaise-des-eaux.fr 409
veolia-proprete.fr 408
enst.fr 408
banque-france.fr 407
insee.fr 405
example.fr 404
ifp.fr 401
tahoo.fr 400
grignon.inra.fr 399
etu.univ-nantes.fr 398
itech.fr 397
ac-aix-marseille.fr 397
maaf.fr 396
orang.fr 394
ens.fr 394
jotmail.fr 393
ensta.fr 393
saur.fr 391
malix.univ-paris1.fr 391
ac-nice.fr 387
students.rouenbs.fr 385
imag.fr 384
ifrance.fr 384
univ-rouen.fr 383
rms.fr 382
pagesjaunes.fr 382
chru-lille.fr 379
systeme-u.fr 375
leroymerlin.fr 370
hoomail.fr 370
cetelem.fr 370
ird.fr 368
education.gouv.fr 367
unilim.fr 366
hotlmail.fr 365
mondadori.fr 364
etu.univ-poitiers.fr 363
unicaen.fr 360
onf.fr 360
univ-montp2.fr 359
fnac.tm.fr 357
em-normandie.fr 354
univ-savoie.fr 352
gfi.fr 352
srf.fr 351
u-picardie.fr 350
ifremer.fr 350
hotmaiil.fr 350
etu.univ-savoie.fr 350
devinci.fr 350
etu.unilim.fr 347
etudiant.univ-nancy2.fr 347
afd.fr 347
dbmail.fr 346
univ-nancy2.fr 344
credit-agricole-sa.fr 344
ornge.fr 342
m6net.fr 342
legrand.fr 341
sita.fr 340
ac-strasbourg.fr 338
mnhn.fr 337
ac-besancon.fr 337
ayhoo.fr 336
univ-tlse2.fr 334
univ-pau.fr 334
altavista.fr 334
epsi.fr 333
ohtmail.fr 332
esli.fr 330
hotmaail.fr 329
guideo.fr 329
enim.fr 329
univ-cezanne.fr 328
univ-orleans.fr 327
m6mail.fr 327
livre.fr 326
utc.fr 325
u-paris10.fr 325
eleves.ec-nantes.fr 324
lave.fr 323
labanquepostale.fr 322
curie.fr 322
enstimac.fr 321
parisdescartes.fr 317
mfr.asso.fr 317
perso.altitudetelecom.fr 316
lie.fr 316
ina.fr 316
espci.fr 316
groupe-mma.fr 313
aviva.fr 313
univ-lr.fr 312
univ-lemans.fr 312
supagro.inra.fr 312
ars.sante.fr 311
hachette-livre.fr 307
univ-bpclermont.fr 306
univ-angers.fr 306
mairie-lyon.fr 305
yah.fr 304
unilog.fr 303
lefigaro.fr 301
ehess.fr 301
cict.fr 301
ac-caen.fr 301
wnadoo.fr 300
univ-lille2.fr 300
cg92.fr 300
ac-reims.fr 300
ac-clermont.fr 300
institutoptique.fr 299
etu.univ-orleans.fr 299
lcl.fr 297
hotmel.fr 297
respublica.fr 296
lol.fr 296
nexity.fr 295
lne.fr 295
ipag.fr 295
eutelsat.fr 295
wanaddo.fr 294
jeunesse-sports.gouv.fr 293
toto.fr 291
gefco.fr 291
erenis.fr 291
etud.insa-toulouse.fr 290
ensmp.fr 290
hotlive.fr 289
univ-metz.fr 288
france2.fr 288
stratecollege.fr 286
gemail.fr 286
cesi.fr 286
agents.agf.fr 286
cnp.fr 284
cofinoga.fr 283
imelavi.fr 282
icade.fr 282
cnce.caisse-epargne.fr 282
mines.inpl-nancy.fr 281
fft.fr 279
cg13.fr 278
univ-montp1.fr 277
cg06.fr 277
tele.fr 276
hotmail.fr.fr 276
eleveefb.fr 276
cegid.fr 275
bnf.fr 275
erdf-grdf.fr 274
bvra.etu.grenoble-inp.fr 274
snef.fr 273
rexel.fr 273
creditmutuel.fr 273
univ-st-etienne.fr 272
foncia.fr 272
chu-grenoble.fr 272
cg94.fr 272
hfp.fr 271
uahoo.fr 270
sciences-po.fr 267
hoitmail.fr 267
wanandoo.fr 266
ag2rlamondiale.fr 266
univ-valenciennes.fr 264
euf.fr 264
ac-dijon.fr 264