The Commission nationale de l'informatique et des libertés (CNIL), the regulatory body for personal data protection of France, has opened a public consultation on a set of draft recommendations on basic security measures concerning the use of passwo…