France: Data Protection Authority adopted guidelines on inactive user account data retention in digital content sectors

On 18 September 2025, the Data Protection Authority issued guidance on inactive accounts for digital content users. It applies to the audio-visual and video game sectors. Organisations must set a retention period and not keep inactive accounts indefinitely. Accounts inactive for two years should generally be deleted, with prior user notification. Data needed to access purchased content, like email, name, pseudonym, or game saves, may be kept longer. Other commercial or statistical data must be limited in retention. Organisations must communicate retention clearly and protect stored data. After two years of inactivity, accounts should be deactivated but remain reactivatable.