[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPP7plmHL3SqGx0-ZpwG1r_wjhwJuiFXt0pUEevNrWl0":3},{"assets":4,"aiSystems":5,"attachments":6,"tags":7,"dataRetentionRules":21,"creatorUser":175,"creatorUserId":26,"updatedBy":176,"updatedById":26,"publishedBy":28,"publishedById":28,"areaOwnerId":28,"owners":177,"customFields":178,"area":179,"entity":183,"mergedFrom":28,"workflowStep":184,"accountables":190,"responsibles":191,"informedOwners":192,"securityMeasures":193,"personCategories":381,"id":36,"source":54,"label":37,"state":189,"versionDescription":28,"processingType":43,"parentId":28,"areaId":42,"mergeType":28,"readonly":29,"editable":188,"workflowStepId":185,"dateDeployment":28,"dateCreation":41,"dateArchived":28,"datePublication":28,"archived":29,"dateUpdate":40,"reviewDate":28,"nextReviewDate":28,"ref":28,"processingState":28,"description":38,"descriptionHtml":418,"subjectRightProcessDescription":28,"rightOfInformation":419,"rightOfAccess":420,"rightOfRectification":420,"rightOfErasure":421,"rightOfRestriction":420,"rightOfOpposition":421,"rightOfDataPortability":421,"advanceDirectives":420,"advanceDirectivesDescription":28,"rightOfInformationDescription":422,"rightOfAccessDescription":28,"rightOfRectificationDescription":28,"rightOfErasureDescription":423,"rightOfRestrictionDescription":28,"rightOfOppositionDescription":424,"rightOfDataPortabilityDescription":425,"stakeHolders":426,"assessmentScoring":188,"automaticDecision":29,"systematicMonitoring":188,"specialCategoryData":29,"largeScaleCollection":28,"crossReferencing":188,"vulnerablePeople":29,"isDPIARequired":188,"dpiaDate":28,"dpiaExemption":29,"dpiaExemptionJustification":28,"innovativeUse":29,"exclusionBenefitRightContract":188,"recipients":427,"dataControllers":483,"purposes":484,"progression":503,"quality":504,"sensitivity":505,"visible":188,"workspaceId":39,"nbReferences":31,"referenceId":28},[],[],[],[8,13,17],{"id":9,"label":10,"type":11,"color":12},"99e6f156-5bd7-4bc1-94c7-7f416665cf20","Organisme : Privé","DataProcessing","#64748B",{"id":14,"label":15,"type":11,"color":16},"1faae3f4-af1f-4cdc-bce5-585066fb3c8c","Secteur : Banque et finance","#0E7490",{"id":18,"label":19,"type":11,"color":20},"e6a6b24e-23ca-4c9b-8ff7-a97dff1ee966","Fonction : Juridique et conformité","#B45309",[22,89,133],{"customFields":23,"tags":24,"creator":25,"readonly":29,"purposes":32,"dataProcessings":34,"dataFields":44,"asset":28,"subjectCategories":77,"id":78,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":79,"description":28,"dateCreation":80,"dateUpdate":81,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":82,"baseActiveLegalBasis":83,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":84,"intermediateArchivingRetentionDuration":85,"intermediateArchivingMinMax":28,"destructionDescription":86,"destructionLegalBasis":28,"dataSetSource":87,"sourceDescription":88,"assetId":28,"source":54},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},1602,"bc4946f8-1de1-4b70-bb67-62a0ce536160",null,false,"#4DE034",0,[33],"edd5de9e-60b4-4e1c-8a78-23bfb25f3337",[35],{"id":36,"label":37,"ref":28,"description":38,"workspaceId":39,"archived":29,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},"ae535bf7-43a8-4c23-36d0-08df38010b74","Connaissance client (KYC) et lutte contre le blanchiment et le financement du terrorisme","Ce modèle de traitement est relatif à l'identification et à la vérification de l'identité des clients et de leurs bénéficiaires effectifs, à l'évaluation de leur profil de risque, à la vigilance sur leurs opérations et aux déclarations de soupçon à Tracfin, ainsi qu'à la conservation des pièces exigée par le Code monétaire et financier.",68,"2026-11-03T07:47:57.5277864","2026-11-03T07:47:55.9647066",354,"Default",[45,55,64,70],{"id":46,"customFields":47,"ref":28,"archivingPolicy":28,"required":29,"label":48,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":51,"dateUpdate":28,"creator":52,"workflowStepId":53,"workflowStep":28,"source":54},"7908113d-f7cc-4a47-02dc-08df38010ba5",{},"Nom, prénoms, date et lieu de naissance, nationalité","Current","CivilStatus","2026-11-03T07:47:52.1754096",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},83450,"Api",{"id":56,"customFields":57,"ref":28,"archivingPolicy":28,"required":29,"label":58,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":59,"dataType":28,"dateCreation":60,"dateUpdate":61,"creator":28,"workflowStepId":62,"workflowStep":28,"source":63},"b05d36ab-7b23-42c5-a659-b806b3b26050",{},"Adresse postale","PersonalLife","2021-09-27T22:25:11.201927","2023-09-25T09:25:21.3319653",83451,"Intern",{"id":65,"customFields":66,"ref":28,"archivingPolicy":28,"required":29,"label":67,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":68,"dateUpdate":28,"creator":69,"workflowStepId":53,"workflowStep":28,"source":54},"1cc572c9-e8db-453f-02dd-08df38010ba5",{},"Copie de la pièce d'identité et justificatif de domicile","2026-11-03T07:47:52.3626851",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":71,"customFields":72,"ref":28,"archivingPolicy":28,"required":29,"label":73,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":74,"dataType":28,"dateCreation":75,"dateUpdate":28,"creator":76,"workflowStepId":53,"workflowStep":28,"source":54},"d2ea23a2-73e4-4b2a-02de-08df38010ba5",{},"Raison sociale, SIREN et part du capital détenue par le bénéficiaire effectif","ProfessionalLife","2026-11-03T07:47:52.5369024",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"5c028f10-6850-43c5-df2e-08df38010b98","Identification du client et du bénéficiaire effectif","2026-11-03T07:47:54.2677449","2026-11-03T07:47:54.6578586","Pendant la relation d'affaires.","Art. L. 561-12 du Code monétaire et financier","Cinq ans après la cessation de la relation d'affaires, accès restreint aux équipes conformité.",2628000,"À l'issue de la durée de conservation, les données sont supprimées de manière sécurisée ou anonymisées de façon irréversible.","Direct","Obligation légale : cinq ans après la fin de la relation d'affaires (art. L. 561-12 du CMF, confirmé par les lignes directrices ACPR et Tracfin de 2025). Texte de l'article non lu directement.",{"customFields":90,"tags":91,"creator":92,"readonly":29,"purposes":93,"dataProcessings":95,"dataFields":97,"asset":28,"subjectCategories":124,"id":125,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":126,"description":28,"dateCreation":127,"dateUpdate":128,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":129,"baseActiveLegalBasis":130,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":131,"intermediateArchivingRetentionDuration":85,"intermediateArchivingMinMax":28,"destructionDescription":86,"destructionLegalBasis":28,"dataSetSource":87,"sourceDescription":132,"assetId":28,"source":54},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[94],"3025e3ef-5f25-4e87-8d07-fa5acb667ca6",[96],{"id":36,"label":37,"ref":28,"description":38,"workspaceId":39,"archived":29,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[98,105,111,117],{"id":99,"customFields":100,"ref":28,"archivingPolicy":28,"required":29,"label":101,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":102,"dataType":28,"dateCreation":103,"dateUpdate":28,"creator":104,"workflowStepId":53,"workflowStep":28,"source":54},"33bf04a4-8f70-4035-02df-08df38010ba5",{},"Objet et nature de la relation d'affaires","EconomicFinancialData","2026-11-03T07:47:52.7121725",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":106,"customFields":107,"ref":28,"archivingPolicy":28,"required":29,"label":108,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":102,"dataType":28,"dateCreation":109,"dateUpdate":28,"creator":110,"workflowStepId":53,"workflowStep":28,"source":54},"824f5572-3e3b-401b-02e0-08df38010ba5",{},"Profession, revenus ou chiffre d'affaires, origine du patrimoine et des fonds","2026-11-03T07:47:52.9162334",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":112,"customFields":113,"ref":28,"archivingPolicy":28,"required":29,"label":114,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":59,"dataType":28,"dateCreation":115,"dateUpdate":28,"creator":116,"workflowStepId":53,"workflowStep":28,"source":54},"6cbc234f-97b4-4c62-02e1-08df38010ba5",{},"Qualité de personne politiquement exposée","2026-11-03T07:47:53.1279528",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":118,"customFields":119,"ref":28,"archivingPolicy":28,"required":29,"label":120,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":121,"dataType":28,"dateCreation":122,"dateUpdate":28,"creator":123,"workflowStepId":53,"workflowStep":28,"source":54},"5a816d6d-bec5-47f6-02e2-08df38010ba5",{},"Niveau de risque attribué et date de dernière mise à jour","Other","2026-11-03T07:47:53.2993492",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"6d72872d-8744-4d74-df2f-08df38010b98","Profil de risque et connaissance de la relation","2026-11-03T07:47:54.8480148","2026-11-03T07:47:55.2415828","Pendant la relation d'affaires, mise à jour selon le niveau de risque.","Art. L. 561-5-1 et L. 561-12 du Code monétaire et financier","Cinq ans après la fin de la relation d'affaires.","Obligation légale : cinq ans après la fin de la relation d'affaires (art. L. 561-12 du CMF, via les lignes directrices ACPR et Tracfin). Texte non lu directement.",{"customFields":134,"tags":135,"creator":136,"readonly":29,"purposes":137,"dataProcessings":140,"dataFields":142,"asset":28,"subjectCategories":167,"id":168,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":169,"description":28,"dateCreation":170,"dateUpdate":171,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":172,"baseActiveLegalBasis":83,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":173,"intermediateArchivingRetentionDuration":85,"intermediateArchivingMinMax":28,"destructionDescription":86,"destructionLegalBasis":28,"dataSetSource":87,"sourceDescription":174,"assetId":28,"source":54},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[138,139],"f6e00b23-dcf9-4358-9b2b-d83a8c3539b5","4987d972-3295-4199-aa0b-6405b4cbe009",[141],{"id":36,"label":37,"ref":28,"description":38,"workspaceId":39,"archived":29,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[143,149,155,161],{"id":144,"customFields":145,"ref":28,"archivingPolicy":28,"required":29,"label":146,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":102,"dataType":28,"dateCreation":147,"dateUpdate":28,"creator":148,"workflowStepId":53,"workflowStep":28,"source":54},"b62e2c60-610b-45f8-02e3-08df38010ba5",{},"Alerte sur opération atypique (montant, nature, origine et destination des fonds)","2026-11-03T07:47:53.4872885",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":150,"customFields":151,"ref":28,"archivingPolicy":28,"required":29,"label":152,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":102,"dataType":28,"dateCreation":153,"dateUpdate":28,"creator":154,"workflowStepId":53,"workflowStep":28,"source":54},"24908dbb-1d42-42fd-02e4-08df38010ba5",{},"Analyse et justification économique de l'opération","2026-11-03T07:47:53.67086",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":156,"customFields":157,"ref":28,"archivingPolicy":28,"required":29,"label":158,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":121,"dataType":28,"dateCreation":159,"dateUpdate":28,"creator":160,"workflowStepId":53,"workflowStep":28,"source":54},"a368f146-b01a-4cf4-02e5-08df38010ba5",{},"Copie de la déclaration de soupçon et accusé de réception Tracfin","2026-11-03T07:47:53.8657812",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":162,"customFields":163,"ref":28,"archivingPolicy":28,"required":29,"label":164,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":74,"dataType":28,"dateCreation":165,"dateUpdate":28,"creator":166,"workflowStepId":53,"workflowStep":28,"source":54},"0ce6e8f4-6d06-48ab-02e6-08df38010ba5",{},"Identité des déclarants et correspondants Tracfin","2026-11-03T07:47:54.0929962",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"3fecc703-cf1b-4b50-df30-08df38010b98","Alertes, examens renforcés et déclarations de soupçon","2026-11-03T07:47:55.3864931","2026-11-03T07:47:55.7812015","Pendant l'instruction de l'alerte.","Cinq ans après la fin de la relation d'affaires pour les pièces relatives aux déclarations (point 168 des lignes directrices).","Obligation légale : conservation de la copie de la déclaration et de l'accusé de réception cinq ans après la fin de la relation d'affaires (lignes directrices ACPR et Tracfin, point 168).",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],{},{"dpo":28,"referent":28,"owner":28,"representative":28,"dataProtectionAuthority":28,"id":42,"type":180,"parentId":28,"ref":28,"label":181,"description":28,"logoUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"countryCode":182,"immatriculationNumber":28,"phoneNumber":28,"mailAddress":28,"dpoId":28,"referentId":28,"ownerId":28,"representativeId":28,"dataProtectionAuthorityId":28},"Entity","Entité","FR",{"dpo":28,"referent":28,"owner":28,"representative":28,"dataProtectionAuthority":28,"id":42,"type":180,"parentId":28,"ref":28,"label":181,"description":28,"logoUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"countryCode":182,"immatriculationNumber":28,"phoneNumber":28,"mailAddress":28,"dpoId":28,"referentId":28,"ownerId":28,"representativeId":28,"dataProtectionAuthorityId":28},{"id":185,"label":186,"color":187,"order":31,"itemLimit":28,"type":11,"finalStep":29,"initialStep":188,"authorizedRole":28,"authorizedRoleId":28,"descriptionHtml":28,"mappedState":189},9439,"A compléter","#CCCCCC",true,"Draft",[],[],[],[194,208,220,231,244,255,266,276,286,297,308,318,328,339,350,361,371],{"date":195,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":197,"id":198,"ref":28,"label":199,"type":200,"description":201,"relatedRisk":28,"moreDetailsUrl":202,"dateCreation":203,"dateUpdate":28,"tags":204,"attachments":205,"creatorUser":206,"workflowStepId":207,"workflowStep":28},"2026-11-03T11:39:36.9245532Z","Done",{},"beba9da4-69b2-451b-69b0-08df38010b92","Pilotage de la sécurité des données","Organizational","L’intégration de la protection des données personnelles dans les processus de décision de l’organisme permet d’en assurer la prise en compte dans la durée et aux moments clés d’arbitrages des budgets et des projets. Les précautions élémentaires Impliquer la direction et formaliser des objectifs généraux en matière de sécurité et de protection des données personnelles, validés par la direction de l’organisme.","https://www.cnil.fr/fr/securite-piloter-la-securite-des-donnees","2026-11-02T20:57:37.2709862",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},90384,{"date":209,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":210,"id":211,"ref":28,"label":212,"type":200,"description":213,"relatedRisk":28,"moreDetailsUrl":214,"dateCreation":215,"dateUpdate":216,"tags":217,"attachments":218,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.924557Z",{},"cde1cad2-4195-4ffe-9406-08dd823909d1","Cadre d'usage des utilisateurs","La charte doit rappeler les règles de protection des données et les sanctions possibles, définir son champ d’application (interventions informatiques, moyens d’authentification) et énoncer les règles de sécurité : signaler toute tentative d’intrusion, garder ses identifiants secrets, ne pas installer ni modifier de logiciels sans autorisation, verrouiller son poste en cas d’absence, n’accéder qu’aux informations utiles et respecter la procédure pour copier des données sur supports amovibles. Elle précise aussi les conditions d’usage des équipements informatiques et télécoms (poste de travail, matériels nomades, stockage, réseaux, appareils personnels, Internet, messagerie, téléphonie), les modalités d’administration du système (filtrage, traçabilité, gestion des postes) ainsi que les responsabilités et sanctions en cas de manquement.","https://www.cnil.fr/fr/securite-definir-un-cadre-pour-les-utilisateurs","2025-04-25T07:14:13.031896","2026-11-02T20:57:14.658541",[],[],90385,{"date":221,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":222,"id":223,"ref":28,"label":224,"type":200,"description":225,"relatedRisk":28,"moreDetailsUrl":226,"dateCreation":227,"dateUpdate":228,"tags":229,"attachments":230,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.9245578Z",{},"d77a94b8-cd42-409c-a02e-323ffad3924a","Sensibilisation et formation des utilisateurs","Les erreurs humaines et les attaques par ingénierie sociale sont à l’origine d’un nombre important d’incidents de sécurité. Les solutions techniques ne sont pas suffisantes pour assurer la protection des données personnelles détenues par un organisme.","https://www.cnil.fr/fr/securite-impliquer-et-former-les-utilisateurs","2019-01-01T00:00:00","2026-11-02T20:57:16.1776695",[],[],{"date":232,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":233,"id":234,"ref":28,"label":235,"type":236,"description":237,"relatedRisk":238,"moreDetailsUrl":239,"dateCreation":240,"dateUpdate":241,"tags":242,"attachments":243,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.9245598Z",{},"6c2ddc74-6750-4e76-bdad-317c6c0305ce","Authentification des utilisateurs","Technical","Avant toute utilisation des moyens informatiques, un utilisateur doit être doté d’un identifiant qui lui est propre et doit s’authentifier afin de permettre de contrôler son identité et ses accès aux données dont il a besoin. Les mécanismes permettant de réaliser l’authentification des personnes sont catégorisés selon qu’ils font intervenir :","Accès non autorisé, mots de passe partagés.","https://www.cnil.fr/fr/securite-authentifier-les-utilisateurs","2021-10-19T15:35:32.3166158","2026-11-02T20:57:18.0371731",[],[],{"date":245,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":246,"id":247,"ref":28,"label":248,"type":200,"description":249,"relatedRisk":28,"moreDetailsUrl":250,"dateCreation":251,"dateUpdate":252,"tags":253,"attachments":254,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.9245605Z",{},"f54ac346-ee7b-45de-9cc0-39506032df7e","Gestion des habilitations","Respecter le principe de moindre privilège, à travers la gestion des profils d’habilitation, permet de limiter les conséquences d’une usurpation de comptes ou d’une erreur de manipulation.","https://www.cnil.fr/fr/securite-gerer-les-habilitations","2021-10-19T15:35:32.1054015","2026-11-02T20:57:19.3398542",[],[],{"date":256,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":257,"id":258,"ref":28,"label":259,"type":236,"description":260,"relatedRisk":28,"moreDetailsUrl":261,"dateCreation":262,"dateUpdate":263,"tags":264,"attachments":265,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.9245616Z",{},"f748340f-fe32-47c4-983c-135130915929","Sécurité des postes de travail","Les risques d’intrusion dans les systèmes informatiques sont multiples et les postes de travail constituent un des principaux points d’entrée.","https://www.cnil.fr/fr/securite-securiser-les-postes-de-travail","2021-12-15T14:06:35.2861825","2026-11-02T20:57:20.9746731",[],[],{"date":267,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":268,"id":269,"ref":28,"label":270,"type":236,"description":271,"relatedRisk":28,"moreDetailsUrl":272,"dateCreation":227,"dateUpdate":273,"tags":274,"attachments":275,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.9245621Z",{},"ac192187-f8f9-42aa-9111-814f4a321407","Protection du réseau informatique","Le réseau interne interconnecte l’ensemble des composants des systèmes d’information d’un organisme et dispose souvent de points de connexion avec l’extérieur. Il s’agit tout autant d’un point d’entrée que d’un support de propagation des attaques. Il est donc primordial de sécuriser le réseau interne.","https://www.cnil.fr/fr/securite-proteger-le-reseau-informatique","2026-11-02T20:57:22.9977424",[],[],{"date":277,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":278,"id":279,"ref":28,"label":280,"type":236,"description":281,"relatedRisk":28,"moreDetailsUrl":282,"dateCreation":227,"dateUpdate":283,"tags":284,"attachments":285,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.9245628Z",{},"ed9bf5c2-97d3-4505-9b42-adabf6e7bd1d","Sécurité des serveurs","La sécurité des serveurs doit être une priorité car ils centralisent un grand nombre de données et hébergent les services permettant d’y accéder et de les manipuler. Les précautions élémentaires Désinstaller ou désactiver les services et interfaces inutiles. Limiter l’accès aux outils et interfaces d’administration aux seules personnes habilitées. Utiliser des comptes de moindres privilèges pour les opérations courantes.","https://www.cnil.fr/fr/securite-securiser-les-serveurs","2026-11-02T20:57:24.1598199",[],[],{"date":287,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":288,"id":289,"ref":28,"label":290,"type":291,"description":292,"relatedRisk":28,"moreDetailsUrl":293,"dateCreation":227,"dateUpdate":294,"tags":295,"attachments":296,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.9245634Z",{},"56e975ff-1611-4612-b85c-c7efcdd47c2c","Protection des locaux","Physical","L’accès aux locaux doit être contrôlé pour éviter ou ralentir un accès direct, non autorisé, que ce soit aux fichiers papier ou aux matériels informatiques, notamment aux serveurs. Les locaux doivent également être protégés contre les autres types de menaces (ex. : incendie, inondation). Les précautions élémentaires Restreindre les accès aux locaux au moyen de portes verrouillées. Installer des alarmes anti-intrusion et les vérifier périodiquement leur bon fonctionnement périodiquement.","https://www.cnil.fr/fr/securite-proteger-les-locaux","2026-11-02T20:57:28.139351",[],[],{"date":298,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":299,"id":300,"ref":28,"label":301,"type":200,"description":302,"relatedRisk":28,"moreDetailsUrl":303,"dateCreation":304,"dateUpdate":28,"tags":305,"attachments":306,"creatorUser":307,"workflowStepId":207,"workflowStep":28},"2026-11-03T11:39:36.9245642Z",{},"637227f2-e809-4991-69b1-08df38010b92","Encadrement de la maintenance et de la fin de vie des matériels et logiciels","Les opérations de support doivent être encadrées pour maitriser l’accès aux données par les prestataires. Les données doivent être préalablement effacées des matériels destinés à être mis au rebut.","https://www.cnil.fr/fr/securite-encadrer-la-maintenance-et-la-fin-de-vie-des-materiels-et-logiciels","2026-11-02T20:57:38.8686714",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":309,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":310,"id":311,"ref":28,"label":312,"type":236,"description":313,"relatedRisk":28,"moreDetailsUrl":314,"dateCreation":227,"dateUpdate":315,"tags":316,"attachments":317,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.9245652Z",{},"c8b527e2-07bc-4677-8c00-d222be26d357","Traçabilité des opérations","Afin de pouvoir identifier un accès frauduleux ou une utilisation abusive de données personnelles, ou de déterminer l’origine d’un incident, il convient d’enregistrer certaines des actions effectuées sur les systèmes informatiques. Les traces alors collectées sont également des éléments de preuve utiles pour la démonstration de la conformité.","https://www.cnil.fr/fr/securite-tracer-les-operations","2026-11-02T20:57:33.4681365",[],[],{"date":319,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":320,"id":321,"ref":28,"label":322,"type":236,"description":323,"relatedRisk":28,"moreDetailsUrl":324,"dateCreation":227,"dateUpdate":325,"tags":326,"attachments":327,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.9245659Z",{},"cae348c2-e9f2-4e49-8d60-ab56e438d5a4","Sauvegarde","Des copies de sauvegarde doivent être réalisées et testées régulièrement pour être disponibles en cas de besoin. Les précautions élémentaires S’agissant de la sauvegarde des données","https://www.cnil.fr/fr/securite-sauvegarder","2026-11-02T20:57:34.7827534",[],[],{"date":329,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":330,"id":331,"ref":28,"label":332,"type":236,"description":333,"relatedRisk":28,"moreDetailsUrl":334,"dateCreation":335,"dateUpdate":28,"tags":336,"attachments":337,"creatorUser":338,"workflowStepId":207,"workflowStep":28},"2026-11-03T11:39:36.9245666Z",{},"6eddff0a-1378-4160-69b2-08df38010b92","Continuité et reprise d'activité","Pour limiter le temps d’indisponibilité du système, il faut anticiper les incidents les plus courants. Assurer la continuité d’activité consiste à prévoir des moyens de continuer de fonctionner, en général de manière dégradée, malgré des dysfonctionnements. La reprise d’activité, quant à elle, englobe toutes les actions nécessaires pour relancer un système arrêté.","https://www.cnil.fr/fr/securite-prevoir-la-continuite-et-la-reprise-dactivite","2026-11-02T20:57:39.8112993",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":340,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":341,"id":342,"ref":28,"label":343,"type":200,"description":344,"relatedRisk":28,"moreDetailsUrl":345,"dateCreation":346,"dateUpdate":28,"tags":347,"attachments":348,"creatorUser":349,"workflowStepId":207,"workflowStep":28},"2026-11-03T11:39:36.9245674Z",{},"10c6151c-c44c-46df-69b3-08df38010b92","Gestion des incidents et des violations","Il convient d’être préparé à l’éventualité d’un incident pour intervenir à temps et de manière appropriée, en intégrant l’objectif de limiter les effets pour les personnes dont les données sont concernées. Le responsable de traitement peut être amené à notifier la CNIL ou informer les personnes concernées de l’incident en fonction du risque pour celles-ci.","https://www.cnil.fr/fr/securite-gerer-les-incidents-et-les-violations","2026-11-02T20:57:40.7676498",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":351,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":352,"id":353,"ref":28,"label":354,"type":200,"description":355,"relatedRisk":28,"moreDetailsUrl":356,"dateCreation":357,"dateUpdate":28,"tags":358,"attachments":359,"creatorUser":360,"workflowStepId":207,"workflowStep":28},"2026-11-03T11:39:36.924568Z",{},"e064565b-514e-4755-69b4-08df38010b92","Analyse de risques","En parallèle de la mise en conformité aux précautions élémentaires présentées dans ce guide, il est pertinent, voire obligatoire selon la criticité des traitements, de réaliser des analyses de risques relative à la protection des données. Ces analyses permettent de décider des mesures de sécurité complémentaires, adaptées au contexte, permettant de limiter l’impact sur les personnes concernées par le traitement.","https://www.cnil.fr/fr/securite-analyse-de-risques","2026-11-02T20:57:42.2940193",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":362,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":363,"id":364,"ref":28,"label":365,"type":200,"description":366,"relatedRisk":28,"moreDetailsUrl":367,"dateCreation":227,"dateUpdate":368,"tags":369,"attachments":370,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.9245687Z",{},"47c52bcb-a6e9-487b-a958-f027b20dbd87","Encadrement de la sous-traitance","Les traitements de données réalisés par un sous-traitant pour le compte du responsable de traitement doivent bénéficier de garanties suffisantes, notamment en matière de sécurité.","https://www.cnil.fr/fr/securite-gerer-la-sous-traitance","2026-11-02T20:57:31.4211019",[],[],{"date":372,"state":196,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":373,"id":374,"ref":28,"label":375,"type":200,"description":376,"relatedRisk":28,"moreDetailsUrl":377,"dateCreation":227,"dateUpdate":378,"tags":379,"attachments":380,"creatorUser":28,"workflowStepId":219,"workflowStep":28},"2026-11-03T11:39:36.9245693Z",{},"49230bff-1cd3-46bd-85f5-e43809136dc9","Sécurité des échanges avec l'extérieur","Sans mesure complémentaire, les canaux de transmission de données grand public (ex. : messagerie électronique, messagerie instantanée, plateforme de dépôt de fichiers) constituent rarement un moyen de communication sûr pour transmettre des données personnelles. Une simple erreur d’inattention peut conduire des personnes non habilitées à prendre connaissance de données personnelles, ce qui porte atteinte au droit à la vie privée des personnes concernées.","https://www.cnil.fr/fr/securite-securiser-les-echanges-avec-lexterieur","2026-11-02T20:57:29.3610605",[],[],[382,391,399,409],{"subjectCategory":383,"displayName":385,"id":389,"subjectCategoryId":384,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":390},{"id":384,"label":385,"ref":28,"dateCreation":386,"dateUpdate":28,"creatorUserId":28,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":387,"workflowStep":28,"dataRetentionRules":388},"983407ad-24f5-48b6-268b-08dac757bbf1","Clients","2022-11-15T22:21:36.912217",97319,[],"1d644e9c-9ee5-429a-e6fa-08df38010be0",[],{"subjectCategory":392,"displayName":394,"id":397,"subjectCategoryId":393,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":398},{"id":393,"label":394,"ref":28,"dateCreation":395,"dateUpdate":28,"creatorUserId":28,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":387,"workflowStep":28,"dataRetentionRules":396},"3449d5e1-429a-41f0-268a-08dac757bbf1","Prospects","2022-11-15T22:21:36.3632622",[],"23f0cce3-b03f-4b62-e6fb-08df38010be0",[],{"subjectCategory":400,"displayName":402,"id":407,"subjectCategoryId":401,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":408},{"id":401,"label":402,"ref":28,"dateCreation":403,"dateUpdate":28,"creatorUserId":26,"creatorUser":404,"description":28,"minorConcerned":29,"workflowStepId":405,"workflowStep":28,"dataRetentionRules":406},"536da615-430a-4251-373b-08df38010be4","Bénéficiaires effectifs","2026-11-03T07:44:56.090927",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},97318,[],"b6ef84a2-044d-4ccd-e6fc-08df38010be0",[],{"subjectCategory":410,"displayName":412,"id":416,"subjectCategoryId":411,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":417},{"id":411,"label":412,"ref":28,"dateCreation":413,"dateUpdate":28,"creatorUserId":26,"creatorUser":414,"description":28,"minorConcerned":29,"workflowStepId":405,"workflowStep":28,"dataRetentionRules":415},"901943be-dafd-4d8b-373c-08df38010be4","Mandataires et représentants légaux","2026-11-03T07:44:56.3739173",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"092e2e06-cf91-4e24-e6fd-08df38010be0",[],"\u003Cblockquote>\u003Cp>\u003Cstrong>Modèle à adapter\u003C/strong>\u003C/p>\u003Cp>Modèle de traitement fourni à titre indicatif, à adapter à votre organisation. Les finalités, les données, les durées de conservation, les destinataires, les mesures de sécurité et l'analyse d'impact y sont des valeurs de départ, établies à partir des textes et référentiels cités ci-dessous. \u003Cstrong>Ce modèle ne constitue pas un avis juridique\u003C/strong> : faites-le valider par votre DPO ou votre conseil.\u003C/p>\u003C/blockquote>\u003Cblockquote>\u003Cp>\u003Cstrong>Point d'attention\u003C/strong> : Le texte de l'article L. 561-12 du Code monétaire et financier n'a pas pu être lu sur Légifrance (accès bloqué) : la durée de cinq ans est confirmée par les lignes directrices ACPR et Tracfin, pas par le texte lui-même. Ce modèle ajoute au modèle existant le détail de la phase KYC (identification, bénéficiaires effectifs, profil de risque, personnes politiquement exposées) et du circuit de déclaration.\u003C/p>\u003C/blockquote>\u003Ch3>Sources\u003C/h3>\u003Cp>\u003Cem>Classement selon le guide pratique CNIL « Les durées de conservation ».\u003C/em>\u003C/p>\u003Cul>\u003Cli>\u003Cstrong>Doctrine CNIL (durée obligatoire)\u003C/strong> : \u003Ca href=\"https://acpr.banque-france.fr/system/files/2025-04/20250423_Lignes_directrices_obligations_Tracfin.pdf\">Lignes directrices conjointes ACPR et Tracfin sur les obligations de déclaration et d'examen renforcé (version d'avril 2025)\u003C/a>. Document lu (PDF de 70 pages). Établit, pour les organismes financiers : identification et vérification du client et du bénéficiaire effectif avant l'entrée en relation, profil de risque mis à jour (art. L. 561-5-1, R. 561-12), vigilance renforcée (L. 561-10-1, L. 561-10-2), déclaration de soupçon, confidentialité de la déclaration (L. 561-19), articulation avec le gel des avoirs, conservation des pièces cinq ans après la fin de la relation d'affaires (L. 561-12, point 168).\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/cnil-direct/question/le-droit-dacces-indirect-comment-ca-marche\">CNIL, le droit d'accès indirect, comment ça marche\u003C/a>. Page lue. Procédure d'accès indirect (demande à la CNIL, magistrat, communication sous réserve de l'accord du gestionnaire), cite FICOBA. Ne mentionne ni Tracfin ni la lutte contre le blanchiment.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (antérieure au RGPD)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/declaration/au-024-credit-mutuel-lutte-contre-le-blanchiment\">CNIL, autorisation unique AU-024 (Crédit Mutuel, lutte contre le blanchiment)\u003C/a>. Page lue. Exemple de catégories de données (identification, situation professionnelle et financière, opérations, motifs de déclaration), de destinataires (services LCB, Tracfin, ministre de l'économie, autorité de contrôle) ; renvoie à L. 561-12 pour la durée et à L. 561-45 pour l'exercice des droits. Sans valeur juridique depuis le 25 mai 2018 : citée à titre d'illustration.\u003C/li>\u003C/ul>","Automatic","ManualOrOnDemand","NonApplicable","Les personnes sont informées au moment de la collecte (art. 13 du RGPD) ou, en cas de collecte indirecte, au plus tard dans un délai d'un mois (art. 14).","Droit à l'effacement non applicable : le traitement est nécessaire au respect d'une obligation légale (art. 17.3.b du RGPD).","Droit d'opposition non applicable : il ne vise que les traitements fondés sur l'intérêt légitime ou une mission d'intérêt public (art. 21.1 du RGPD) ou la prospection (art. 21.2). Ici le traitement repose sur une obligation légale, un contrat ou le consentement. Le consentement se retire à tout moment (art. 7.3).","Droit à la portabilité non applicable : il ne vise que les traitements automatisés fondés sur le consentement ou un contrat (art. 20 du RGPD).",[],[428,436,442,449,455,461,476],{"purposes":429,"dataRetentionRules":28,"parentId":28,"children":430,"displayName":431,"label":431,"transfers":432,"recipientType":433,"type":434,"jobTitle":28,"id":435,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Service conformité et lutte contre le blanchiment",[],"InternalService","Recipient","4b7f30f2-e696-47f1-a125-08df38010bcb",{"purposes":437,"dataRetentionRules":28,"parentId":28,"children":438,"displayName":439,"label":439,"transfers":440,"recipientType":433,"type":434,"jobTitle":28,"id":441,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Déclarants et correspondants Tracfin",[],"ebd7da2f-a017-464c-a126-08df38010bcb",{"purposes":443,"dataRetentionRules":28,"parentId":28,"children":444,"displayName":445,"label":445,"transfers":446,"recipientType":447,"type":434,"jobTitle":28,"id":448,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Tracfin (cellule de renseignement financier)",[],"AuthorizedThirdParty","b82c34c1-520a-4fd7-a127-08df38010bcb",{"purposes":450,"dataRetentionRules":28,"parentId":28,"children":451,"displayName":452,"label":452,"transfers":453,"recipientType":447,"type":434,"jobTitle":28,"id":454,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Autorité de contrôle (ACPR ou AMF selon l'activité)",[],"9f67e38f-5d14-4501-a128-08df38010bcb",{"purposes":456,"dataRetentionRules":28,"parentId":28,"children":457,"displayName":458,"label":458,"transfers":459,"recipientType":447,"type":434,"jobTitle":28,"id":460,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Autorité judiciaire (sur réquisition)",[],"f2f7cab4-826c-4a96-a129-08df38010bcb",{"purposes":462,"dataRetentionRules":28,"parentId":28,"children":463,"displayName":464,"label":465,"transfers":466,"recipientType":467,"type":434,"jobTitle":28,"id":468,"actorId":469,"actor":470,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Sous-traitant à préciser","Prestataire de vérification d'identité et de filtrage des listes de sanctions",[],"Vendor","51667b7e-32ec-44cc-a12a-08df38010bcb","1af96d46-eb9e-45f3-64bc-08df38010bd1",{"label":464,"id":469,"ref":28,"dateCreation":471,"dateUpdate":28,"reviewDate":28,"nextReviewDate":28,"logoUrl":28,"state":472,"actorType":473,"description":474,"countryCode":28,"readonly":29,"email":28,"phoneNumber":28,"contactName":28,"contactPosition":28,"immatriculationNumber":28,"websiteUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"workflowStepId":475,"areaId":28,"source":54},"2026-11-02T20:57:51.2801474","New","Morale","Acteur générique des modèles de traitement : à remplacer par le prestataire retenu (sous-traitant au sens de l'article 28 du RGPD).",76516,{"purposes":477,"dataRetentionRules":28,"parentId":28,"children":478,"displayName":479,"label":479,"transfers":480,"recipientType":481,"type":434,"jobTitle":28,"id":482,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Entités du même groupe (dans les limites fixées par le CMF)",[],"JointController","bb634b24-09d5-4fa5-a12b-08df38010bcb",[],[485,491,495,499],{"id":486,"key":33,"label":487,"description":488,"legalBasis":489,"legalBasisText":490,"legalBasisDescription":28,"readonly":29},"f57892ed-5bb2-46cd-10cd-08df38010b80","Identification et vérification de l'identité du client et du bénéficiaire effectif","Avant l'entrée en relation d'affaires, identifier et vérifier l'identité du client et, le cas échéant, de son bénéficiaire effectif (art. L. 561-5 du CMF, tel que décrit dans les lignes directrices ACPR et Tracfin).","LegalCommitment","Obligation légale",{"id":492,"key":94,"label":493,"description":494,"legalBasis":489,"legalBasisText":490,"legalBasisDescription":28,"readonly":29},"99f1865f-79c9-4e15-10ce-08df38010b80","Connaissance de la relation d'affaires et évaluation du profil de risque","Recueillir les informations sur l'objet et la nature de la relation, évaluer et mettre à jour le profil de risque du client selon une approche par les risques (art. L. 561-5-1 et R. 561-12 du CMF).",{"id":496,"key":138,"label":497,"description":498,"legalBasis":489,"legalBasisText":490,"legalBasisDescription":28,"readonly":29},"2b3fe289-fcf7-4658-10cf-08df38010b80","Vigilance constante, examen renforcé et déclaration de soupçon à Tracfin","Surveiller les opérations, mener un examen renforcé sur les opérations atypiques ou à risque élevé et déclarer à Tracfin les opérations soupçonnées (art. L. 561-10-1, L. 561-10-2 et L. 561-15 du CMF). La déclaration ne doit pas être révélée au client (art. L. 561-19 du CMF).",{"id":500,"key":139,"label":501,"description":502,"legalBasis":489,"legalBasisText":490,"legalBasisDescription":28,"readonly":29},"e64ca462-d0bf-442f-10d0-08df38010b80","Conservation des pièces et traçabilité des contrôles","Conserver les pièces d'identification, les opérations, les examens renforcés et les déclarations pendant cinq ans après la fin de la relation d'affaires (art. L. 561-12 du CMF), afin de répondre aux contrôles de l'autorité de supervision.",100,56,23]