# CNIL practice guide for the security of personal data (2024)

- Type: Tools
- Source: CNIL
- Date: 2026-11-11
- Original: https://www.cnil.fr/en/node/165213
- Canonical: https://overview.legal/posts/623980
- Topics: Security, Controllers, Processors, Personal Data, Supervision, Supervisory Authorities

## Summary

The French DPA’s security guide, 2024 edition: 25 factsheets in five parts (users, IT and equipment, control of data, preparing for an incident, focus pages on cloud, mobile apps, AI and APIs), each with the measures the CNIL considers the baseline for Article 32 and a change log against the earlier edition.

## Full text

The French DPA’s security guide, 2024 edition: 25 factsheets in five parts (users, IT and equipment, control of data, preparing for an incident, focus pages on cloud, mobile apps, AI and APIs), each with the measures the CNIL considers the baseline for Article 32 and a change log against the earlier edition.

When to use it: You need a concrete list of baseline security measures to test a system or a supplier against.
Provisions: GDPR Art. 32.
Published by CNIL (supervisory authority), for France.
For: controllers, processors, developers.
Free; available in French, English.

De beveiligingsgids van de Franse toezichthouder, editie 2024: 25 factsheets in vijf delen (gebruikers, IT en apparatuur, grip op gegevens, voorbereiding op een incident, verdieping over cloud, apps, AI en API’s), elk met de maatregelen die de CNIL als ondergrens voor artikel 32 ziet, en een wijzigingsoverzicht ten opzichte van de vorige editie.

Wanneer gebruiken: Je zoekt een concrete lijst basismaatregelen om een systeem of leverancier aan te toetsen.

---
Generated by overview.legal · https://overview.legal/posts/623980 · 2026-11-14