The French supervisory authority CNIL issued guidelines on data retention in July 2020; Guide pratique – Les durées de conservation). The guidelines update the previous recommendations of the CNIL of October 11, 2005 on the archiving of personal data. They aim to provide practical assistance in defining the rules for data retention and the applicable retention period; they express – similar to the DIN-66398/Guideline Extinguishing Concept – but not to the retention period applicable to different category of data in each case.
However, the CNIL specifies retention periods in a separate documentation; “Référentiel”). So far, two such référentiels have been published in the health sector: