PaymentsCompliance takes a look at the regulatory framework for data protection in France, modified in particular by Digital Law No. 2016-1321 of October 7, 2016 to give the French data protection authority the power to impose fines of up to €3m for breaches, until the entry into force of the General Data Protection Regulation (GDPR) on May 25, 2018.