Data protection authority to audit French tax administration after summer hacks

In the recent summer months, the French tax administration experienced a series of unauthorized accesses that resulted in the loss of personal data. Marie-Laure Denis, president of the data-protection authority, confirmed that inspectors will be dispatched to the Directorate General of Public Finances to assess the breach and determine any necessary sanctions. She added that the agency responsible for secure identity documents will also be examined, following a large-scale intrusion earlier in the year.

The state’s chief minister, Sébastien Lecornu, has tasked the national cybersecurity agency with a thorough audit of the tax authority’s IT infrastructure. Officials highlighted structural weaknesses and gaps in post-incident controls revealed by the investigations. Depending on the findings, the regulator may issue a formal notice or pursue further penalties, though its powers over the state are limited.