France: Data Protection Authority adopted guidance on political communication tools

On 21 October 2025, the French Data Protection Authority (CNIL) issued guidance on political communication tools under the Political Advertising Transparency Regulation (PAR). The rules apply to online targeting and dissemination of political messages using personal data. The guidance provides that political actors must collect data directly and obtain explicit consent. Profiling using sensitive data is restricted. It also provides that targeting children under 17 is prohibited. A register documenting targeting tools, including Artificial Intelligence use, must be maintained. Non-targeted outreach, including newsletters or postal mail, may rely on consent or legitimate interest under the General Data Protection Regulation.