The French data protection authority, known as CNIL, is launching inspections of two government agencies—the Direction générale des finances publiques (DGFiP) and the National Agency for Secure Titles (ANTS)—after recent data breaches affected nearly 700,000 individuals and 12 million individuals and professionals. These breaches have raised concerns about the security of personal information handled by state institutions. CNIL President Marie-Laure Denis announced that teams will be sent to inspect the DGFiP, which experienced multiple cyberattacks this summer. The DGFiP is also undergoing a separate security audit by the National Agency for Information System Security (Anssi), as requested by Prime Minister Sébastien Lecornu in August following the breach. The CNIL inspections aim to determine how the breaches occurred and to evaluate the security measures currently in place at the DGFiP. While the findings could result in a formal notice or corrective actions, the CNIL cannot impose fines on the state. The ANTS, which was hit by a cyberattack in April, will also be inspected. Marie-Laure Denis stressed that the government has a responsibility to protect citizens' personal data, as it is a key part of the trust between the state and its people. A recent report from the president and rapporteur of the Senate’s Finance Committee highlighted long-standing vulnerabilities in the DGFiP’s information systems and noted that there were gaps in oversight after the incidents. These findings underscore the need for stronger security protocols and more thorough checks to prevent future breaches. The inspections by CNIL are part of a broader effort to ensure that government agencies comply with data protection laws and maintain public confidence in their ability to safeguard sensitive information.