CNIL

the Commission nationale de l'informatique et des libertés, known as CNIL, is France's Independent data-protection authority. Created in 1978, it explains people's information rights and advises organisations about their duties. It also checks whether the handling of personal data complies with the law.

CNIL can investigate alleged breaches and impose administrative sanctions. Its independence separates regulatory decisions from direct government control, while its national jurisdiction gives it a central role in enforcing French data-protection rules. The authority's work therefore spans public guidance, advice to organisations, compliance checks and enforcement. It also operates its own public digital services, which makes information security an operational concern as well as a subject it regulates.