On October 12, the French National Assembly (Assemblée Nationale) adopted legislation enabling victims of personal data breaches to initiate group actions under certain conditions. To exercise these actions, victims need to be represented by an organization meeting the criteria provided by the bill. However, the bill allows for injunctive relief only and does not entitle group action participants to damages.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.