https://parole-de-rh.fr/en/tags/cnil/Recent content in CNIL on Parole de RHHugoen-USWed, 07 Oct 2026 12:00:00 +0200https://parole-de-rh.fr/en/blog/hr-software-personal-data-gdpr/Sun, 04 Oct 2026 11:30:00 +0200https://parole-de-rh.fr/en/blog/hr-software-personal-data-gdpr/<blockquote> <p><strong>In short:</strong></p> <ol> <li><strong>HR software</strong> must only contain the personal data needed for personnel management.</li> <li>Access is reserved for the people in charge of personnel management, with managers only accessing the data useful for their duties.</li> <li>Employees must be informed of the processing and can access their file without justification.</li> <li>The personnel management file must appear in the record of processing activities.</li> </ol> </blockquote> <h2 id="hr-software-regulated-data-processing">HR software: regulated data processing</h2> <p>Any <strong>HR software</strong>, whether a full HRIS, payroll software or a leave management tool, processes personal data. On 17 August 2023, the CNIL (the French data protection authority) published a reference page on the rules that apply to personnel management.</p>