CNIL to attend Salon des maires 2026 and release updated data‑protection guide for local authorities

What happened

The French data‑protection authority CNIL will be present at the Salon des maires et des collectivités locales from 24‑26 November 2026 to answer questions from elected officials and territorial agents. At the event CNIL will also promote a new 2026 edition of its guide for local authorities covering GDPR compliance, transparency, data‑subject rights and AI use. The guide includes practical steps such as defining objectives, ensuring cybersecurity and conducting data‑protection impact assessments.

Why it matters for trust and compliance

• Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
• The guidance helps French local governments meet privacy and AI‑governance obligations, strengthening trust and legal compliance.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Confirm access, correction, deletion and opt-out requests are handled within the required time.
3. Revisit retention schedules and data minimisation for the data involved.
4. Map the security requirements to existing controls and close gaps.
5. Inventory AI or automated decision systems in scope and their assessments.
6. Schedule or refresh the risk or impact assessments this calls for.