REGULATORY WATCH BRIEF Moderate 49 📋 Proposed Regulation proposed

CNIL examines draft decree creating SI-Mandoline personal data system for protection of adults

The agenda signals upcoming regulatory actions affecting personal data processing for adult legal protection and related professional obligations in France.

ADTP Regulatory Watch · September 24, 2026 · Commission nationale de l'informatique et des libertés (CNIL)

ImpactModerate 49

Type📋 Proposed Regulation

Statusproposed not law

JurisdictionEU-FR

What happened

The CNIL plenary session on 24 September 2026 will examine a draft decree establishing the personal data processing system "Système d’information de la protection juridique des majeurs" (SI-Mandoline). It will also consider a draft decree amending article R.128-6 of the French Commercial Code and the renewal of BYCYB’s accreditation as a control body for the CISPE European code of conduct. A communication on health data is also on the agenda.

Why it matters for trust and compliance

Its status is proposed. It is not law yet. Track it, but do not treat it as an obligation.
The agenda signals upcoming regulatory actions affecting personal data processing for adult legal protection and related professional obligations in France.

Who is affected

government controller processor BYCYB CISPE

Recommended actions

Check that privacy notices describe the practices this addresses.
Confirm handling of sensitive data categories meets the stricter rules.