On November 10  a bill was filed before the Senate to modify the French Data Protection Act.
The bill highlights are :
- the obligation to appoint a  mandatory data protection officer for organizations above 50 employees
- the mandatory notification of  data security breaches to the CNIL
- obligation to modify organizations' websites to enable  individuals to exercise their data protection rights on line
- changes in the content of privacy notices (obligation to specify the data retention limit)