What Changed
- Review of a draft opinion on real-time sound capture and transmission experimentation by public bus and coach transport operators.
- Presentation on practical compliance arrangements for multi-property user consent mechanisms.
- Examination of a draft opinion modifying Decree No. 2022-377 of March 17, 2022 regarding the dematerialized apprenticeship service in the private and public sectors.
On October 15, 2026, the French Data Protection Authority (Commission nationale de l'informatique et des libertés, CNIL) convened a plenary session to examine several regulatory items and compliance updates affecting transport operators, financial institutions, and employers in France.
The meeting agenda addressed four principal matters:
1. Real-time Audio Capture in Public Transport: The commission examined a draft deliberation issuing an opinion on a draft decree concerning the experimentation of real-time sound capture and transmission systems by public bus and coach transport operators. This initiative reviews the data protection framework surrounding sound recording technologies in public transit.
2. Multi-Property Consent Compliance: CNIL delivered a communication detailing practical arrangements for bringing 'multi-property' (multi-propriétés) consent mechanisms into compliance with legal standards, addressing requirements for entities managing user consent across multiple digital domains or assets.
3. Data Protection and Value Creation in Finance: The authority presented a joint study titled 'From data protection to value creation in finance, joint study' (De la protection des données à la création de valeur en finance, étude conjointe), analyzing the relationship between personal data regulatory adherence and economic value in financial services.
4. Apprenticeship Data System Amendments: Pursuant to the procedure under Article 17 of CNIL's internal rules, the commission considered a draft deliberation issuing an opinion on a draft decree modifying Decree No. 2022-377 of March 17, 2022. That decree created the automated personal data processing system known as the 'Dematerialized apprenticeship service in the private sector and industrial and commercial public sector' (Service dématérialisé de l'apprentissage dans le secteur privé et le secteur public industriel et commercial).
Who is Affected:
Entities affected include public bus and coach operators experimenting with real-time sound transmission, digital service providers operating multi-property consent models, financial institutions balancing compliance with value generation, and private and public sector employers using France's national apprenticeship data platform.
Status and Dates:
The agenda was published by CNIL on October 15, 2026, for its meeting held on the same day at 9:30 AM. Specific entry-into-force and application dates for the draft decrees evaluated during the session were not provided in the source content.
Who May Be Affected
Public bus and coach operators, digital service providers using multi-property consent models, financial services entities, and private or public employers utilizing the dematerialized apprenticeship platform in France.
Cross-Border Context
Relevant to Swiss, EU, and foreign businesses operating multi-domain digital platforms in France or delivering transport and financial services subject to CNIL oversight.
What to check next
- Monitor future CNIL publications for the formal text of the adopted deliberations and opinions.
- Check Légifrance for the eventual publication of the modified decree amending Decree No. 2022-377 of March 17, 2022.
This article provides general information and does not constitute legal advice. Consult the official text and obtain advice appropriate to your circumstances where needed.