Data privacy in France: new laws

New European rules on data privacy are coming in to give people more control over personal data and mean businesses must get clear consent in asking for and storing information – and erase it if asked.

Called GDPR (or RGPD in France), the rules come in to force on May 25 and are aimed at large businesses that store and process customer information, eg for new marketing campaigns.

Small businesses using client databases for marketing should get client consents to continue and should encrypt data to stay safe in security breaches. Staff data should also be protected.