Criminal framework

Code pénal article 226-2-1 (atteinte à l'intimité de la vie privée à caractère sexuel). The statute was enacted Loi n° 2016-1321 du 7 octobre 2016 (Loi pour une République numérique). Up to 2 years imprisonment and €60,000 fine.

Civil and data protection framework

GDPR Article 17 (right to erasure) plus Loi Informatique et Libertés provides the parallel civil route. Commission nationale de l'informatique et des libertés (CNIL) is the national supervisory authority and accepts complaints against any controller processing intimate imagery without lawful basis. The official site is https://www.cnil.fr.

Direct takedown authority

ARCOM and the Pharos platform receive reports and can refer to hosts for removal. Loi Avia provisions on illegal content removal also apply.

Official victim support

Plateforme PHAROS / 3018 is the recognised support service. Available at https://www.internet-signalement.gouv.fr.

Five step removal process for France victims

  1. 1

    Preserve evidence before any contact with the perpetrator

    Capture full page screenshots with URLs visible. Save the original files. Note timestamps. This evidence supports both the Article 226-2-1 Code pénal complaint and any GDPR Article 17 (right to erasure) plus Loi Informatique et Libertés request.

  2. 2

    File a criminal complaint under Article 226-2-1 Code pénal

    Report to local police or the national cybercrime unit. Plateforme PHAROS / 3018 can assist with the report.

  3. 3

    Submit an erasure request under GDPR Article 17 (right to erasure) plus Loi Informatique et Libertés

    Send a written request to each platform's designated data protection contact citing the legal basis. CNIL can be petitioned if the platform fails to comply within 30 days.

  4. 4

    Send a US TAKE IT DOWN Act notice in parallel for covered platforms

    When the platform is subject to US jurisdiction, the 48 hour federal removal obligation applies in parallel with your domestic rights. ScanErase files these notices automatically.

  5. 5

    Track and escalate non compliant platforms

    Document every notice and every response. Use the regulator's takedown authority for non compliant platforms.

Frequently asked questions

What is the criminal NCII statute in France?

Code pénal article 226-2-1 (atteinte à l'intimité de la vie privée à caractère sexuel). Enacted Loi n° 2016-1321 du 7 octobre 2016 (Loi pour une République numérique). Up to 2 years imprisonment and €60,000 fine.

Who enforces data protection rights in France?

Commission nationale de l'informatique et des libertés (CNIL) is the national authority. Official site: https://www.cnil.fr.

Is there an official victim support service in France?

Yes. Plateforme PHAROS / 3018 provides direct help to victims. Site: https://www.internet-signalement.gouv.fr.

Does any regulator in France have direct takedown power?

ARCOM and the Pharos platform receive reports and can refer to hosts for removal. Loi Avia provisions on illegal content removal also apply.

Can a France resident also use the US TAKE IT DOWN Act?

Yes when the hosting platform is subject to US jurisdiction. The TAKE IT DOWN Act applies to covered platforms regardless of where the victim resides. ScanErase's scan finds every US covered platform hosting your images, so you can file notices there in parallel with GDPR Article 17 (right to erasure) plus Loi Informatique et Libertés requests.

Related guides