Digital Code, Book I: sensitive categories of personal data and the minor's consent
Code Numérique, Livre Premier, Arts. 59 et 62 (consentement du mineur et données sensibles)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 18 September 2025.
A sensitive categories rule binding public and private bodies.
As of 19 September 2026.
What it requires
- Do not process sensitive personal data (racial or ethnic origin, political or philosophical opinions, religious opinions or beliefs, trade-union membership, genetic data, biometric data used to uniquely identify a person, or health data) without the data subject's express consent or another statutory ground.
- Let a minor consent alone to an information-society service's processing of their personal data only from age 16, obtain the consent of the person holding parental authority below that age, and make reasonable efforts to verify it given the technology available.
What it reaches
Obligation class
Prohibition, Consent, Biometric, Age verification
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 59 lets a minor consent alone to an information-society service's processing of their personal data only from age 16, requires the consent of the person holding parental authority below that age, and requires the controller to make reasonable efforts to verify that consent given the technology available.
Article 62 prohibits processing personal data revealing, directly or indirectly, racial or ethnic origin, political or philosophical opinions, religious opinions or beliefs, or trade-union membership, and prohibits processing genetic data, biometric data processed to uniquely identify a natural person, or data concerning health, subject to exceptions including the data subject's express and explicit consent to one or more specific purposes, data the data subject has manifestly made public, and vital-interest or public-health grounds.
The Code's own definition of biometric data names facial images, fingerprint data, voiceprints, DNA and iris data as qualifying examples of a characteristic that allows or confirms unique identification, so a voiceprint or a faceprint derived from an ordinary recording is not carved out of the Article 62 prohibition. The Digital Code, including Book I, was adopted by the National Assembly on 30 June 2025 and signed by the President of the Republic on 6 July 2025. It was published in the Journal Officiel on 18 September 2025, the date these provisions took effect.
When LexLint raises it
crawls_webtrains_modelsprocesses_biometricsprocesses_voiceserves_minorshandles_health_records
Read the law
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.