France Data Removal Guide (2026)
French residents have GDPR rights plus an absolute, free right to object to direct marketing. The CNIL supervises the GDPR and France's national data-protection rules; use its current guidance for the route and remedy that fit a specific request.
Research status: sources last checked 2026-09-07.
This page is educational orientation, not legal advice. The legal fields below are a research snapshot; eligibility, exemptions, deadlines, penalty rules and broker routes can change. Verify the current statute and regulator guidance before relying on a right or filing a complaint.
At a glance
- Governing law
- GDPR + CNIL
- Response deadline
- 1 month (extendable by 2 months for complex requests)
- Regulator
- Commission Nationale de l'Informatique et des Libertés (CNIL)
- Private right of action
- Yes: compensation claim under GDPR Article 82; a group action for personal-data breaches may be available under Law No. 2025-391, Article 16, subject to statutory standing and procedure
GDPR + Loi Informatique et Libertés (1978)
France protects personal data through the GDPR plus its national Loi Informatique et Libertés (an early national data-protection law, first adopted in 1978). You have rights to access, erase, rectify, restrict, port, and object to processing, with an absolute and cost-free right to object to marketing. Controllers generally respond within one month, subject to extensions and exceptions. The CNIL enforces both laws and publishes current guidance on complaints and sanctions.
Read the full GDPR + CNILexplainer →Scope, penalties, private right of action, enforcement history.
What rights do France residents have?
- →Right of access (Article 15)
- →Right to erasure / right to be forgotten (Article 17)
- →Right to object: absolute and free for prospecting (Article 21)
- →Right to rectification and restriction (Articles 16, 18)
- →Right to give post-mortem directives on your data (French-specific)
- →Right to lodge a complaint with the CNIL (Article 77)
Who holds your data in France?
France has a list-broking market ("courtiers de données"), plus the PagesBlanches/PagesJaunes (Solocal) directories and the universal phone directory. A provider acting as a controller must apply the GDPR rules relevant to direct marketing, objections, and suppression records; the exact duty depends on the provider and processing. Electoral-list access is restricted and is not a general commercial people-search source.
Public-record sources brokers scrape
- Listes électorales: restricted; not freely sold for marketing
- Annuaire téléphonique universel: phone directory (opt out via "liste rouge")
- Infogreffe / RNE: company register (directors, registered office)
- Cadastre: property records (limited public access)
How to remove your data in France
- 1Since 11 August 2026, the former Bloctel opposition system has ended under the new telemarketing rules. Commercial prospecting calls generally require prior explicit, clear, specific, and revocable consent; check current DGCCRF guidance for exceptions and complaint routes.
- 2Ask your telecom operator for the "liste rouge" to remove your number from the universal directory.
- 3Send GDPR objection (Art. 21) + erasure (Art. 17) requests to brokers; marketing objection is absolute under French law.
- 4Opt out of PagesJaunes / Solocal listings.
- 5File a CNIL complaint if the controller does not handle the request as required. Keep the request and response records, and follow the CNIL's current complaint guidance.
Generate requests in under 60 seconds
Generate requests for 1,034 US/global broker workflows for $9
What if a company ignores your request?
Consider the Commission Nationale de l'Informatique et des Libertés (CNIL) information or complaint route above if the controller does not respond or the response is unsatisfactory. This guide records the following penalty orientation: €20M or 4% of global annual turnover. The private-action note is: Yes: compensation claim under GDPR Article 82; a group action for personal-data breaches may be available under Law No. 2025-391, Article 16, subject to statutory standing and procedure. Neither field is an individual award or a promise of enforcement.
Open the Commission Nationale de l'Informatique et des Libertés (CNIL) information or complaint route ↗FAQ: France data removal
Who enforces data privacy in France?+
The CNIL enforces the GDPR and France's Loi Informatique et Libertés. For a complaint, follow the CNIL's current filing guidance and preserve the request, response, and supporting records.
How do I stop telemarketing calls in France?+
Bloctel ended on 11 August 2026. Under the new framework, covered commercial prospecting calls generally require prior explicit, clear, specific, and revocable consent; use the current consumer complaint route for calls that do not meet the rule and check the official guidance for exceptions.
Can data brokers sell my data in France?+
A broker needs a lawful basis for its processing, and you have an absolute, free right to object to direct marketing. The provider should stop its own direct-marketing use when the objection applies; any downstream communication or erasure duty depends on the GDPR facts and applicable exceptions.
How do I remove my listing from PagesJaunes or the phone directory?+
Request the "liste rouge" through your telecom operator to remove your number from the universal directory, or use the directory's own opt-out.