On 29 April 2025, the proposed Bill to amend the data protection law (1948-D-2025) was introduced in the Chamber of Deputies. The Bill outlines data protection provisions, including the rights of individuals and the obligations of data controllers and processors. It sets out principles such as Informational self-determination, conditions for processing, such as the need for explicit consent, and specific safeguards for sensitive data. The Bill elaborates on lawful processing standards, emphasising legality, fairness, transparency, purpose limitation, data minimisation, accuracy, precedence, proactive accountability, and data security. It lists the legal bases for processing across both the public and private sectors, with specific rules for handling sensitive data and protecting minors. Several provisions are revised to address coercion, fraud, and deception. The Bill also expands individual rights, clarifying entitlements such as access, rectification, objection, and erasure, while introducing new rights to restriction of processing and to contest automated decisions, including profiling. Finally, the Bill introduces the concept of “inferred data,” which refers to information deduced about an individual rather than directly observed or collected.
Original source