The CNIL explains the data‑protection implications of the French electronic invoicing reform that entered into force on 1 Sept 2026. It details which personal data may be processed, the roles of issuers, receivers and certified platforms, and the security and retention requirements that apply. The guidance also outlines the upcoming compliance deadline of 1 Sept 2027 for all companies to both emit and receive e‑invoices.
Why it matters: Practitioners must align invoicing processes with GDPR, ISO‑27001, and eIDAS‑level authentication to avoid breaches and ensure lawful handling of personal data.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
