2. Current regulatory framework

Since 1978, the prior formalities introduced by the French Data Protection Act (Loi Informatique et Libertés), and in particular the ubiquitous compulsory notices, have helped to establish a certain culture of personal data protection, both within organizations and among the general public. Nevertheless, this knowledge of the legal framework was sometimes limited to surface aspects and procedures, and was not always shared by the operational staff who actually implemented the processing.

The anticipation of the RGPD's entry into force in 2018 has had two notable effects on this situation. On the one hand, the principles already installed in the legal landscape, as well as the new aspects introduced by the regulation, have become the object of increased and renewed interest from companies and administrations, required to ensure their compliance quickly. On the other...