On 13 March 2026, the French Data Protection Authority
(hereinafter "the CNIL") published its recommendation on
the deployment of a web filtering proxy server 1,
adopted by deliberation no. 2026-022 of January 29,
2026 2, following a public consultation conducted
in 2025 that received fourteen contributions.
A web filtering proxy server is a device interposed between the
user's workstation and the remote web server, whose main
function is to block access to certain websites or categories of
content, detect malicious payloads (in particular through HTTPS
traffic decryption) and log browsing activity. While these
functions usefully contribute to the security obligation set out in
Article 32 of the GDPR 3, they also involve the
processing of personal data, the compliance of which must be
ensured.
