France

Overview

Stage of legislative progress 
Eg. pre-consultation, in consultation

GDPR implementation report approved by French National Assembly.

Approach to implementation 
Eg. amendments to existing law, total repeal of old laws

This proposal will abrogate the current Personal Data Act. 

Timescale for implementation 
Eg. pre-consultation, in consultation

French Parliament to review draft legislation by December 2017. Implementing decrees to be issued by May 2018.


Areas where Member States must have local laws:

Personal data and freedom of expression 

n/a

Penalties

Legislation expected on collective redress for GDPR breaches.


Areas where Member States may have local laws:

Professional secrecy 

n/a

Scientific, historical or statistical purposes 

The Working Group proposal includes provisions on processing for scientific, historical or statistical purposes. The proposal provides derogations and safeguards in accordance with the art 89 GDPR. Not as such new rules in Finland but mostly already applicable law under Personal Data Act. This means that processing for scientific, historical or statistical purposes is permissible as long as safeguards in art. 89 (1)GDPR and under (new) Finnish Data Protection Act are met.

Employment

n/a

Personal data of deceased persons 

n/a

Children online

n/a

Special rules for special categories of data
n/a

Genetic, biometric or health data

Report expresses need to legislate on health data and related processing activities.

Designation of a Data Protection Officer

Obligation of secrecy for DPOs to be included in new legislation.

National identification numbers/any other identifier of general application

n/a


Other:

Any other areas under discussion

Report expresses need for clarification of data portability right provided by GDPR compared with data portability right in French Digital Republic law.