What Is Law no. 1.565 of 3 December 2024 on the Protection of Personal Data?
Monaco's Law no. 1.565 of 3 December 2024, published in the Journal de Monaco on 13 December 2024, repeals Law no. 1.165 of 23 December 1993 and creates the independent Personal Data Protection Authority (APDP), replacing the former CCIN. Sovereign Ordinance no. 11.327 of 10 July 2025 is the implementing ordinance. The APDP identifies eight rights: information, access, rectification, erasure, restriction, objection, portability, and protection from decisions based solely on automated processing with legal or similarly significant effect. Objection to commercial prospecting requires no reason; other objections may require grounds tied to the person's situation. The controller must respond in writing within one month (extendable by two months for complex or multiple requests, with reasoned notice within the first month); a specific erasure-complaint provision requires the APDP to decide within three weeks of receipt. This is a source-backed evidence profile. The primary statute and implementing ordinance are in French; no official English translation was located, though the APDP publishes English explanatory pages. No Monaco-specific data-broker removal route was located.
At a glance
- Full name
- Law no. 1.565 of 3 December 2024 on the Protection of Personal Data
- Short code
- Monaco Law 1.565
- Jurisdiction
- Monaco
- Enacted
- 2024
- Last major update
- Implemented by Sovereign Ordinance no. 11.327 of 10 July 2025 (published 18 July 2025); APDP members appointed by Sovereign Ordinance no. 11.407 of 21 July 2025. APDP issued a 2026 opinion on the proposed adequate-protection country list; no statutory replacement was located
- Regulator
- Autorité de Protection des Données Personnelles (APDP)
- Private right of action
- Limited
- Statutory citation
- Law no. 1.565 of 3 December 2024
Scope, who Monaco Law 1.565 covers
Protected data
Data subject rights
Right to information about processing
Right of access
Right to rectification
Right to erasure in the specific cases stated by the law (e.g., withdrawn consent with no other legal basis, certain objections, data no longer necessary, unlawful processing), subject to statutory exceptions
Right to restriction of processing
Right to object, including a no-reason-required objection to commercial prospecting
Right to portability
Right not to be subject to a decision based solely on automated processing with legal or similarly significant effect
Notable features
The law replaces Monaco’s prior CCIN-administered framework with an independent APDP modeled closer to the GDPR eight-rights structure, while keeping Monaco-specific timelines (e.g., the three-week erasure-complaint decision period).
Enforcement & penalties
Regulator: Autorité de Protection des Données Personnelles (APDP)
Penalties: The reviewed APDP materials for this research pass focused on rights, request timelines, and the complaint route rather than a consolidated administrative-fine schedule; check the current Law no. 1.565 sanctions provisions before publishing a penalty figure.
Private right of action: If a controller does not act or does not respond within the statutory period, the person may complain to the APDP or bring a full-jurisdiction action before Monaco’s Court of First Instance; the erasure-specific complaint is decided by the APDP within three weeks of receipt.
Relevance to data brokers
No Monaco-specific data-broker removal registry, people-search suppression route, or general public-record deletion route was located. The APDP materials support a direct controller rights request and an APDP complaint route; they do not establish that a data broker must remove every public-record entry.
Generate requests in under 60 seconds
Explore 1,034 US/global data brokers
FAQ
What replaced Monaco’s old CCIN data-protection framework?+
Law no. 1.565 of 3 December 2024 repealed Law no. 1.165 of 1993 and created the independent Autorité de Protection des Données Personnelles (APDP), implemented by Sovereign Ordinance no. 11.327 of 10 July 2025.
Do I need a reason to object to marketing use of my data in Monaco?+
No. The APDP’s guidance says objection to commercial prospecting may be made without giving a reason; objections on other grounds may need to relate to your particular situation.
Official sources & citations
Other international privacy regimes
Monaco Law 1.565 sits in a global ecosystem of data-protection laws. Start with these comparative frameworks, or visit the privacy research hub for the complete jurisdiction index: