Citizens in France can now take class action when their data protection has been violated. The new Act allows for class actions for discriminations, health, environment and data protection. The Act has a limited list of organizations that will be able to take actions on behalf of individuals, provided that individuals suffer damage as a consequence of a data protection breach. Under the Act, businesses will now be scrutinized on their data protection activities and then sued before courts, especially by consumer associations and trade unions. Overall, the new Act will include entail a significant increase in reputational risk for companies.
