From 1 September 2026, the new electronic invoicing mandate for B2B transactions has been in force, imposing fresh obligations on companies handling invoice data. The regulation requires firms to adopt secure electronic formats, guarantee the integrity and confidentiality of personal information embedded in invoices, and retain records in compliance with French data‑protection rules.
The CNIL is providing guidance to help organisations interpret these requirements, implement appropriate technical and organisational safeguards, and conduct impact assessments where necessary. By aligning invoicing processes with privacy standards, businesses can mitigate risks of data breaches and ensure that personal data processed through electronic bills is protected throughout its lifecycle.
Source: RSS – Actualités CNIL