France

Status

The Data Act will not be implemented through a single legislative vehicle. Currently there is no draft implementation concerning rules on data access and sharing or access by governmental authorities (Chapters II, III, IV and V).

Chapters VI, VII and VIII concerning regulation of data processing services has been partially implemented by the “Securing and Regulating the Digital Area” Law (hereafter ‘SREN Law’).

Name of Competent Authority/Data Coordinator

Data Protection Authority

Electronic Communications Authority

What is the maximum penalty?

Up to 3% of worldwide turnover (or 5% in case of repeated breaches)

Have any deviating/additional rules or laws been adopted that utilize the room for policy within the Data Act?

Yes, with respect to art. 32 Data Act (rules concerning access to data by third country government).