Loi Informatique et Libertés (Act No. 78-17, as amended) + CNIL
Loi Informatique et Libertés (Act No. 78-17, as amended) + CNIL — 75% of in-scope requirements covered.
4 requirements · 4 in scope (2 enforced · 2 designed). The 75% is weighted over the in-scope base.
Loi Informatique et Libertés (Act No. 78-17, as amended) + CNIL: requirement → the KYE™ artefact that enforces it
Demo dataYou learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.
-
gdpr-transposition · enforced
Loi Informatique et Libertés (Act No. 78-17, as amended) + CNIL transposes / supplements the GDPR (Reg. (EU)…
Audit events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1 · Constitution: 12 purpose permission, 21 delegated auditability
-
supervisory-authority · enforced
Cooperation with the national supervisory authority (the CNIL) — records of processing and the…
Audit events: kye.evidence.pack.v1, kye.compliance.attestation.v1 · Constitution: 21 delegated auditability, 31 data governance pack
-
breach-notification · designed
Personal-data breach notification to the CNIL (and affected individuals) within the GDPR Art. 33/34 window…
Audit events: kye.signal.incident.opened.v1, kye.compliance.attestation.v1 · Constitution: 13 resilience loop
-
health-data-hds · designed
Health-data hosting must use an HDS-certified (Hébergeur de Données de Santé) host; CNIL reference…
Audit events: kye.purpose.admissibility.v1, kye.evidence.tool_call.v1 · Constitution: 12 purpose permission, 30 audit worm retention
How this widget is built
- Demonstrates
- KYE™ Compliance Mapping Rail™
- Components
- Framework requirement (clause)
- Coverage status
- KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
- Flow
- Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
- Used on
- /compliance/fr-lil/: On every framework page, after its opening.
Source: Loi Informatique et Libertés (Act No. 78-17, as amended) + CNIL. National statute implementing/supplementing Regulation (EU) 2016/679 (GDPR) in France. Substantive obligations resolve to the deep GDPR per-article registry (internal) reused via the framework__jurisdiction edge; this registry maps only the France-specific national deltas.
By category
| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
|---|---|---|---|---|---|---|
| GDPR transposition (national basis) | 1 | 1 | 0 | 0 | 0 | 100% |
| Supervisory authority + accountability | 1 | 1 | 0 | 0 | 0 | 100% |
| Breach notification (national channel) | 1 | 0 | 1 | 0 | 0 | 50% |
| Health-data hosting (national delta) | 1 | 0 | 1 | 0 | 0 | 50% |
Every requirement → the KYE™ artefact that enforces it
| ID | Title | Status | KYE™ enforcement |
|---|---|---|---|
fr-lil.gdpr-transposition | Loi Informatique et Libertés (Act No. 78-17, as amended) + CNIL transposes / supplements the GDPR (Reg. (EU) 2016/679) into France national law — the substantive data-protection obligations resolve to the GDPR per-article bijection | enforced | audit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1engines: internal, internalconstitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/21-DELEGATED-AUDITABILITY.md |
fr-lil.supervisory-authority | Cooperation with the national supervisory authority (the CNIL) — records of processing and the demonstrable-accountability account an AI agent's data processing must produce on request | enforced | audit_events: kye.evidence.pack.v1, kye.compliance.attestation.v1engines: internal, internalconstitution_refs: constitution/21-DELEGATED-AUDITABILITY.md, constitution/31-DATA-GOVERNANCE-PACK.md |
fr-lil.breach-notification | Personal-data breach notification to the CNIL (and affected individuals) within the GDPR Art. 33/34 window, on the national reporting channel | designed | audit_events: kye.signal.incident.opened.v1, kye.compliance.attestation.v1engines: internal, internalconstitution_refs: constitution/13-RESILIENCE-LOOP.md |
fr-lil.health-data-hds | Health-data hosting must use an HDS-certified (Hébergeur de Données de Santé) host; CNIL reference methodologies (MR) govern health-research processing | designed | audit_events: kye.purpose.admissibility.v1, kye.evidence.tool_call.v1engines: internal, internalconstitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/30-AUDIT-WORM-RETENTION.md |
Canonical KYE™ surfaces referenced on this page: KYE Protocol™.