France Prepares New Certification Framework for Data Processors Under GDPR

France’s data protection authority, CNIL, has closed its consultation on a certification framework for GDPR-compliant data processors. The scheme introduces 90 control points, confirming that businesses implement strong security, transparency, and accountability measures when handling personal data.

France Prepares New Certification Framework for Data Processors Under GDPR

France introduces GDPR certification framework to improve trust in data processors across Europe

The National Commission on Informatics and Liberty (CNIL) has finalised its consultation on a draft evaluation framework for certifying data processors.

Scheduled to close on 28 February 2025, this framework aims to help data controllers identify trusted processors who comply with General Data Protection Regulation (GDPR) requirements.

The certification, once established, will be available to any organisation across Europe that processes personal data on behalf of a data controller.

Read the full story

Sign up now to read the full story and get access to all posts for subscribers only.

Subscribe
Already have an account? Sign in

Great! You’ve successfully signed up.

Welcome back! You've successfully signed in.

You've successfully subscribed to Technology Law.

Success! Check your email for magic link to sign-in.

Success! Your billing info has been updated.

Your billing was not updated.