[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fD-0dl1BUlc6shSikNxEQr4gYHvVJWdSGyPV1iUhXHP4":3},{"assets":4,"aiSystems":5,"attachments":6,"tags":7,"dataRetentionRules":20,"creatorUser":204,"creatorUserId":25,"updatedBy":205,"updatedById":25,"publishedBy":27,"publishedById":27,"areaOwnerId":27,"owners":206,"customFields":207,"area":208,"entity":212,"mergedFrom":27,"workflowStep":213,"accountables":219,"responsibles":220,"informedOwners":221,"securityMeasures":222,"personCategories":461,"id":36,"source":54,"label":37,"state":218,"versionDescription":27,"processingType":43,"parentId":27,"areaId":42,"mergeType":27,"readonly":28,"editable":217,"workflowStepId":214,"dateDeployment":27,"dateCreation":41,"dateArchived":27,"datePublication":27,"archived":28,"dateUpdate":40,"reviewDate":27,"nextReviewDate":27,"ref":27,"processingState":27,"description":38,"descriptionHtml":489,"subjectRightProcessDescription":27,"rightOfInformation":490,"rightOfAccess":491,"rightOfRectification":491,"rightOfErasure":491,"rightOfRestriction":491,"rightOfOpposition":492,"rightOfDataPortability":491,"advanceDirectives":491,"advanceDirectivesDescription":27,"rightOfInformationDescription":493,"rightOfAccessDescription":27,"rightOfRectificationDescription":27,"rightOfErasureDescription":27,"rightOfRestrictionDescription":27,"rightOfOppositionDescription":494,"rightOfDataPortabilityDescription":27,"stakeHolders":495,"assessmentScoring":28,"automaticDecision":28,"systematicMonitoring":28,"specialCategoryData":28,"largeScaleCollection":28,"crossReferencing":28,"vulnerablePeople":217,"isDPIARequired":28,"dpiaDate":27,"dpiaExemption":28,"dpiaExemptionJustification":27,"innovativeUse":28,"exclusionBenefitRightContract":28,"recipients":496,"dataControllers":559,"purposes":560,"progression":587,"quality":588,"sensitivity":589,"visible":217,"workspaceId":39,"nbReferences":30,"referenceId":27},[],[],[],[8,13,16],{"id":9,"label":10,"type":11,"color":12},"99e6f156-5bd7-4bc1-94c7-7f416665cf20","Organisme : Privé","DataProcessing","#64748B",{"id":14,"label":15,"type":11,"color":12},"5494cd34-13e6-4954-81cd-000195723eb0","Organisme : Public",{"id":17,"label":18,"type":11,"color":19},"a680bc18-6adc-4655-ba78-cbc42b58e390","Fonction : Ressources humaines","#B45309",[21,86,128,171],{"customFields":22,"tags":23,"creator":24,"readonly":28,"purposes":31,"dataProcessings":34,"dataFields":44,"asset":27,"subjectCategories":76,"id":77,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":78,"description":27,"dateCreation":79,"dateUpdate":80,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":81,"baseActiveLegalBasis":82,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":82,"intermediateArchivingRetentionDuration":27,"intermediateArchivingMinMax":27,"destructionDescription":83,"destructionLegalBasis":27,"dataSetSource":84,"sourceDescription":85,"assetId":27,"source":54},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},1602,"bc4946f8-1de1-4b70-bb67-62a0ce536160",null,false,"#4DE034",0,[32,33],"3720c1e7-d893-456b-9132-5079911a313e","c8371c61-4041-46fb-8573-fbc541de4583",[35],{"id":36,"label":37,"ref":27,"description":38,"workspaceId":39,"archived":28,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},"bbd58c41-cb5a-439d-36d2-08df38010b74","Mobilité internationale et expatriation des salariés","Ce modèle de traitement est relatif à la gestion des salariés envoyés à l'étranger (détachement, expatriation, mission longue) : organisation de la mobilité, formalités de visa et de titre de séjour, protection sociale, fiscalité, accompagnement de la famille et transferts de données vers l'entité ou le pays d'accueil.",68,"2026-11-03T07:48:30.3127823","2026-11-03T07:48:29.2708094",354,"Default",[45,55,62,69],{"id":46,"customFields":47,"ref":27,"archivingPolicy":27,"required":28,"label":48,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":50,"dataType":27,"dateCreation":51,"dateUpdate":27,"creator":52,"workflowStepId":53,"workflowStep":27,"source":54},"97f74137-8232-41a5-02ee-08df38010ba5",{},"Identité, nationalité et coordonnées du salarié","Current","CivilStatus","2026-11-03T07:48:24.2477547",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},83450,"Api",{"id":56,"customFields":57,"ref":27,"archivingPolicy":27,"required":28,"label":58,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":59,"dataType":27,"dateCreation":60,"dateUpdate":27,"creator":61,"workflowStepId":53,"workflowStep":27,"source":54},"12062521-1af2-4eb1-02ef-08df38010ba5",{},"Poste, pays et entité d'accueil, dates de début et de fin de mission","ProfessionalLife","2026-11-03T07:48:24.4307166",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":63,"customFields":64,"ref":27,"archivingPolicy":27,"required":28,"label":65,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":66,"dataType":27,"dateCreation":67,"dateUpdate":27,"creator":68,"workflowStepId":53,"workflowStep":27,"source":54},"c173d339-98d5-4919-02f0-08df38010ba5",{},"Conditions de rémunération et avantages de mobilité","EconomicFinancialData","2026-11-03T07:48:24.5968303",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":70,"customFields":71,"ref":27,"archivingPolicy":27,"required":28,"label":72,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":73,"dataType":27,"dateCreation":74,"dateUpdate":27,"creator":75,"workflowStepId":53,"workflowStep":27,"source":54},"c3fb011e-aed7-41d3-02f1-08df38010ba5",{},"Situation familiale et enfants à charge","PersonalLife","2026-11-03T07:48:24.7807718",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"32444acc-5dbf-44a8-df34-08df38010b98","Dossier de mobilité du salarié","2026-11-03T07:48:27.0631158","2026-11-03T07:48:27.4903103","Durée de la mission et de la relation de travail","","À l'issue de la durée de conservation, les données sont supprimées de manière sécurisée ou anonymisées de façon irréversible.","Direct","Durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD). Aucune source officielle retrouvée. Les durées du dossier professionnel du référentiel CNIL de 2026 (registre unique du personnel : 5 ans après le départ, art. R1221-26 du code du travail) s'appliquent seulement aux mentions du registre.",{"customFields":87,"tags":88,"creator":89,"readonly":28,"purposes":90,"dataProcessings":92,"dataFields":94,"asset":27,"subjectCategories":120,"id":121,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":122,"description":27,"dateCreation":123,"dateUpdate":124,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":125,"baseActiveLegalBasis":126,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":82,"intermediateArchivingRetentionDuration":27,"intermediateArchivingMinMax":27,"destructionDescription":83,"destructionLegalBasis":27,"dataSetSource":84,"sourceDescription":127,"assetId":27,"source":54},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[91],"d8dba542-f3d1-40ce-9b75-0415e616d7aa",[93],{"id":36,"label":37,"ref":27,"description":38,"workspaceId":39,"archived":28,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[95,101,107,113],{"id":96,"customFields":97,"ref":27,"archivingPolicy":27,"required":28,"label":98,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":50,"dataType":27,"dateCreation":99,"dateUpdate":27,"creator":100,"workflowStepId":53,"workflowStep":27,"source":54},"9bb69c87-ceb1-4312-02f2-08df38010ba5",{},"Références et copie du passeport","2026-11-03T07:48:24.9631748",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":102,"customFields":103,"ref":27,"archivingPolicy":27,"required":28,"label":104,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":50,"dataType":27,"dateCreation":105,"dateUpdate":27,"creator":106,"workflowStepId":53,"workflowStep":27,"source":54},"8752d90f-8602-47a5-02f3-08df38010ba5",{},"Type, numéro et dates de validité du visa ou du titre de séjour","2026-11-03T07:48:25.1548478",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":108,"customFields":109,"ref":27,"archivingPolicy":27,"required":28,"label":110,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":59,"dataType":27,"dateCreation":111,"dateUpdate":27,"creator":112,"workflowStepId":53,"workflowStep":27,"source":54},"323fed9f-99b2-407e-02f4-08df38010ba5",{},"Autorisation de travail du pays d'accueil","2026-11-03T07:48:25.3583716",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":114,"customFields":115,"ref":27,"archivingPolicy":27,"required":28,"label":116,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":117,"dataType":27,"dateCreation":118,"dateUpdate":27,"creator":119,"workflowStepId":53,"workflowStep":27,"source":54},"211f4a9f-2a2d-4c3c-02f5-08df38010ba5",{},"Justificatifs demandés par le consulat (diplômes, casier, certificat médical)","Other","2026-11-03T07:48:25.5201943",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"5cf338d1-eb8e-4059-df35-08df38010b98","Dossier de visa, titre de séjour et autorisation de travail","2026-11-03T07:48:27.6408998","2026-11-03T07:48:28.0149726","Durée de validité du visa ou du titre","Règles de l'État d'accueil, variables selon le pays.","Durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD). Aucune source officielle retrouvée. Le référentiel CNIL RH de 2023 prévoit la collecte du titre valant autorisation de travail pour les employés étrangers, sans durée.",{"customFields":129,"tags":130,"creator":131,"readonly":28,"purposes":132,"dataProcessings":134,"dataFields":136,"asset":27,"subjectCategories":163,"id":164,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":165,"description":27,"dateCreation":166,"dateUpdate":167,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":168,"baseActiveLegalBasis":169,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":82,"intermediateArchivingRetentionDuration":27,"intermediateArchivingMinMax":27,"destructionDescription":83,"destructionLegalBasis":27,"dataSetSource":84,"sourceDescription":170,"assetId":27,"source":54},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[133,33],"af98c726-e70f-4b1d-abcf-686b94cfb07d",[135],{"id":36,"label":37,"ref":27,"description":38,"workspaceId":39,"archived":28,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[137,143,150,156],{"id":138,"customFields":139,"ref":27,"archivingPolicy":27,"required":28,"label":140,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":59,"dataType":27,"dateCreation":141,"dateUpdate":27,"creator":142,"workflowStepId":53,"workflowStep":27,"source":54},"31e2c4b1-f9c5-491a-02f6-08df38010ba5",{},"Formulaire A1 ou certificat de détachement et période couverte","2026-11-03T07:48:25.7464037",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":144,"customFields":145,"ref":27,"archivingPolicy":27,"required":28,"label":146,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":147,"dataType":27,"dateCreation":148,"dateUpdate":27,"creator":149,"workflowStepId":53,"workflowStep":27,"source":54},"c7acfc90-9417-4fbf-02f7-08df38010ba5",{},"Numéro de sécurité sociale et numéros d'affiliation étrangers","NIR","2026-11-03T07:48:25.9274241",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":151,"customFields":152,"ref":27,"archivingPolicy":27,"required":28,"label":153,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":66,"dataType":27,"dateCreation":154,"dateUpdate":27,"creator":155,"workflowStepId":53,"workflowStep":27,"source":54},"0c9a7cda-5f9e-4348-02f8-08df38010ba5",{},"Résidence fiscale et identifiant fiscal","2026-11-03T07:48:26.0972379",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":157,"customFields":158,"ref":27,"archivingPolicy":27,"required":28,"label":159,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":160,"dataType":27,"dateCreation":161,"dateUpdate":27,"creator":162,"workflowStepId":53,"workflowStep":27,"source":54},"ac5e8c32-d8d4-424d-02f9-08df38010ba5",{},"Contrat de prévoyance et de santé internationale","HealthData","2026-11-03T07:48:26.3018113",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"d818cff1-2605-4e56-df36-08df38010b98","Protection sociale et fiscalité","2026-11-03T07:48:28.1977499","2026-11-03T07:48:28.5221766","Durée de la mission","Le formulaire A1 doit être tenu à disposition des contrôleurs sur le lieu de travail pendant le détachement (Cleiss).","Durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD). Aucune source officielle retrouvée sur la durée d'archivage. Les obligations fiscales et sociales de conservation n'ont pas été vérifiées.",{"customFields":172,"tags":173,"creator":174,"readonly":28,"purposes":175,"dataProcessings":177,"dataFields":179,"asset":27,"subjectCategories":198,"id":199,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":200,"description":27,"dateCreation":201,"dateUpdate":202,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":168,"baseActiveLegalBasis":82,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":82,"intermediateArchivingRetentionDuration":27,"intermediateArchivingMinMax":27,"destructionDescription":83,"destructionLegalBasis":27,"dataSetSource":84,"sourceDescription":203,"assetId":27,"source":54},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[176],"d8e7734e-62ff-4233-b9fe-9d497307e8d5",[178],{"id":36,"label":37,"ref":27,"description":38,"workspaceId":39,"archived":28,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[180,186,192],{"id":181,"customFields":182,"ref":27,"archivingPolicy":27,"required":28,"label":183,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":73,"dataType":27,"dateCreation":184,"dateUpdate":27,"creator":185,"workflowStepId":53,"workflowStep":27,"source":54},"72316f9a-fc8d-4ca9-02fa-08df38010ba5",{},"Identité, âge et lien de parenté des proches accompagnant le salarié","2026-11-03T07:48:26.5138167",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":187,"customFields":188,"ref":27,"archivingPolicy":27,"required":28,"label":189,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":73,"dataType":27,"dateCreation":190,"dateUpdate":27,"creator":191,"workflowStepId":53,"workflowStep":27,"source":54},"d93b2126-44cd-4cc0-02fb-08df38010ba5",{},"Souhaits de logement et de scolarité","2026-11-03T07:48:26.6687564",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":193,"customFields":194,"ref":27,"archivingPolicy":27,"required":28,"label":195,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":49,"personalDataCategory":73,"dataType":27,"dateCreation":196,"dateUpdate":27,"creator":197,"workflowStepId":53,"workflowStep":27,"source":54},"2d0d5199-3e23-43fe-02fc-08df38010ba5",{},"Dates et détails des voyages","2026-11-03T07:48:26.8915539",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"f3a369a9-4e13-4731-df37-08df38010b98","Accompagnement de la famille et installation","2026-11-03T07:48:28.712156","2026-11-03T07:48:29.0894156","Durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD). Aucune source officielle retrouvée.",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],{},{"dpo":27,"referent":27,"owner":27,"representative":27,"dataProtectionAuthority":27,"id":42,"type":209,"parentId":27,"ref":27,"label":210,"description":27,"logoUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"countryCode":211,"immatriculationNumber":27,"phoneNumber":27,"mailAddress":27,"dpoId":27,"referentId":27,"ownerId":27,"representativeId":27,"dataProtectionAuthorityId":27},"Entity","Entité","FR",{"dpo":27,"referent":27,"owner":27,"representative":27,"dataProtectionAuthority":27,"id":42,"type":209,"parentId":27,"ref":27,"label":210,"description":27,"logoUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"countryCode":211,"immatriculationNumber":27,"phoneNumber":27,"mailAddress":27,"dpoId":27,"referentId":27,"ownerId":27,"representativeId":27,"dataProtectionAuthorityId":27},{"id":214,"label":215,"color":216,"order":30,"itemLimit":27,"type":11,"finalStep":28,"initialStep":217,"authorizedRole":27,"authorizedRoleId":27,"descriptionHtml":27,"mappedState":218},9439,"A compléter","#CCCCCC",true,"Draft",[],[],[],[223,237,249,260,273,284,295,305,315,326,337,347,357,368,379,390,400,410,420,430,440,450],{"date":224,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":226,"id":227,"ref":27,"label":228,"type":229,"description":230,"relatedRisk":27,"moreDetailsUrl":231,"dateCreation":232,"dateUpdate":27,"tags":233,"attachments":234,"creatorUser":235,"workflowStepId":236,"workflowStep":27},"2026-11-03T11:37:04.5699148Z","Done",{},"beba9da4-69b2-451b-69b0-08df38010b92","Pilotage de la sécurité des données","Organizational","L’intégration de la protection des données personnelles dans les processus de décision de l’organisme permet d’en assurer la prise en compte dans la durée et aux moments clés d’arbitrages des budgets et des projets. Les précautions élémentaires Impliquer la direction et formaliser des objectifs généraux en matière de sécurité et de protection des données personnelles, validés par la direction de l’organisme.","https://www.cnil.fr/fr/securite-piloter-la-securite-des-donnees","2026-11-02T20:57:37.2709862",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},90384,{"date":238,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":239,"id":240,"ref":27,"label":241,"type":229,"description":242,"relatedRisk":27,"moreDetailsUrl":243,"dateCreation":244,"dateUpdate":245,"tags":246,"attachments":247,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699178Z",{},"cde1cad2-4195-4ffe-9406-08dd823909d1","Cadre d'usage des utilisateurs","La charte doit rappeler les règles de protection des données et les sanctions possibles, définir son champ d’application (interventions informatiques, moyens d’authentification) et énoncer les règles de sécurité : signaler toute tentative d’intrusion, garder ses identifiants secrets, ne pas installer ni modifier de logiciels sans autorisation, verrouiller son poste en cas d’absence, n’accéder qu’aux informations utiles et respecter la procédure pour copier des données sur supports amovibles. Elle précise aussi les conditions d’usage des équipements informatiques et télécoms (poste de travail, matériels nomades, stockage, réseaux, appareils personnels, Internet, messagerie, téléphonie), les modalités d’administration du système (filtrage, traçabilité, gestion des postes) ainsi que les responsabilités et sanctions en cas de manquement.","https://www.cnil.fr/fr/securite-definir-un-cadre-pour-les-utilisateurs","2025-04-25T07:14:13.031896","2026-11-02T20:57:14.658541",[],[],90385,{"date":250,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":251,"id":252,"ref":27,"label":253,"type":229,"description":254,"relatedRisk":27,"moreDetailsUrl":255,"dateCreation":256,"dateUpdate":257,"tags":258,"attachments":259,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699185Z",{},"d77a94b8-cd42-409c-a02e-323ffad3924a","Sensibilisation et formation des utilisateurs","Les erreurs humaines et les attaques par ingénierie sociale sont à l’origine d’un nombre important d’incidents de sécurité. Les solutions techniques ne sont pas suffisantes pour assurer la protection des données personnelles détenues par un organisme.","https://www.cnil.fr/fr/securite-impliquer-et-former-les-utilisateurs","2019-01-01T00:00:00","2026-11-02T20:57:16.1776695",[],[],{"date":261,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":262,"id":263,"ref":27,"label":264,"type":265,"description":266,"relatedRisk":267,"moreDetailsUrl":268,"dateCreation":269,"dateUpdate":270,"tags":271,"attachments":272,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699192Z",{},"6c2ddc74-6750-4e76-bdad-317c6c0305ce","Authentification des utilisateurs","Technical","Avant toute utilisation des moyens informatiques, un utilisateur doit être doté d’un identifiant qui lui est propre et doit s’authentifier afin de permettre de contrôler son identité et ses accès aux données dont il a besoin. Les mécanismes permettant de réaliser l’authentification des personnes sont catégorisés selon qu’ils font intervenir :","Accès non autorisé, mots de passe partagés.","https://www.cnil.fr/fr/securite-authentifier-les-utilisateurs","2021-10-19T15:35:32.3166158","2026-11-02T20:57:18.0371731",[],[],{"date":274,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":275,"id":276,"ref":27,"label":277,"type":229,"description":278,"relatedRisk":27,"moreDetailsUrl":279,"dateCreation":280,"dateUpdate":281,"tags":282,"attachments":283,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699197Z",{},"f54ac346-ee7b-45de-9cc0-39506032df7e","Gestion des habilitations","Respecter le principe de moindre privilège, à travers la gestion des profils d’habilitation, permet de limiter les conséquences d’une usurpation de comptes ou d’une erreur de manipulation.","https://www.cnil.fr/fr/securite-gerer-les-habilitations","2021-10-19T15:35:32.1054015","2026-11-02T20:57:19.3398542",[],[],{"date":285,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":286,"id":287,"ref":27,"label":288,"type":265,"description":289,"relatedRisk":27,"moreDetailsUrl":290,"dateCreation":291,"dateUpdate":292,"tags":293,"attachments":294,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699203Z",{},"f748340f-fe32-47c4-983c-135130915929","Sécurité des postes de travail","Les risques d’intrusion dans les systèmes informatiques sont multiples et les postes de travail constituent un des principaux points d’entrée.","https://www.cnil.fr/fr/securite-securiser-les-postes-de-travail","2021-12-15T14:06:35.2861825","2026-11-02T20:57:20.9746731",[],[],{"date":296,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":297,"id":298,"ref":27,"label":299,"type":265,"description":300,"relatedRisk":27,"moreDetailsUrl":301,"dateCreation":256,"dateUpdate":302,"tags":303,"attachments":304,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699208Z",{},"ac192187-f8f9-42aa-9111-814f4a321407","Protection du réseau informatique","Le réseau interne interconnecte l’ensemble des composants des systèmes d’information d’un organisme et dispose souvent de points de connexion avec l’extérieur. Il s’agit tout autant d’un point d’entrée que d’un support de propagation des attaques. Il est donc primordial de sécuriser le réseau interne.","https://www.cnil.fr/fr/securite-proteger-le-reseau-informatique","2026-11-02T20:57:22.9977424",[],[],{"date":306,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":307,"id":308,"ref":27,"label":309,"type":265,"description":310,"relatedRisk":27,"moreDetailsUrl":311,"dateCreation":256,"dateUpdate":312,"tags":313,"attachments":314,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699213Z",{},"ed9bf5c2-97d3-4505-9b42-adabf6e7bd1d","Sécurité des serveurs","La sécurité des serveurs doit être une priorité car ils centralisent un grand nombre de données et hébergent les services permettant d’y accéder et de les manipuler. Les précautions élémentaires Désinstaller ou désactiver les services et interfaces inutiles. Limiter l’accès aux outils et interfaces d’administration aux seules personnes habilitées. Utiliser des comptes de moindres privilèges pour les opérations courantes.","https://www.cnil.fr/fr/securite-securiser-les-serveurs","2026-11-02T20:57:24.1598199",[],[],{"date":316,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":317,"id":318,"ref":27,"label":319,"type":320,"description":321,"relatedRisk":27,"moreDetailsUrl":322,"dateCreation":256,"dateUpdate":323,"tags":324,"attachments":325,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699219Z",{},"56e975ff-1611-4612-b85c-c7efcdd47c2c","Protection des locaux","Physical","L’accès aux locaux doit être contrôlé pour éviter ou ralentir un accès direct, non autorisé, que ce soit aux fichiers papier ou aux matériels informatiques, notamment aux serveurs. Les locaux doivent également être protégés contre les autres types de menaces (ex. : incendie, inondation). Les précautions élémentaires Restreindre les accès aux locaux au moyen de portes verrouillées. Installer des alarmes anti-intrusion et les vérifier périodiquement leur bon fonctionnement périodiquement.","https://www.cnil.fr/fr/securite-proteger-les-locaux","2026-11-02T20:57:28.139351",[],[],{"date":327,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":328,"id":329,"ref":27,"label":330,"type":229,"description":331,"relatedRisk":27,"moreDetailsUrl":332,"dateCreation":333,"dateUpdate":27,"tags":334,"attachments":335,"creatorUser":336,"workflowStepId":236,"workflowStep":27},"2026-11-03T11:37:04.5699225Z",{},"637227f2-e809-4991-69b1-08df38010b92","Encadrement de la maintenance et de la fin de vie des matériels et logiciels","Les opérations de support doivent être encadrées pour maitriser l’accès aux données par les prestataires. Les données doivent être préalablement effacées des matériels destinés à être mis au rebut.","https://www.cnil.fr/fr/securite-encadrer-la-maintenance-et-la-fin-de-vie-des-materiels-et-logiciels","2026-11-02T20:57:38.8686714",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":338,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":339,"id":340,"ref":27,"label":341,"type":265,"description":342,"relatedRisk":27,"moreDetailsUrl":343,"dateCreation":256,"dateUpdate":344,"tags":345,"attachments":346,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.569923Z",{},"c8b527e2-07bc-4677-8c00-d222be26d357","Traçabilité des opérations","Afin de pouvoir identifier un accès frauduleux ou une utilisation abusive de données personnelles, ou de déterminer l’origine d’un incident, il convient d’enregistrer certaines des actions effectuées sur les systèmes informatiques. Les traces alors collectées sont également des éléments de preuve utiles pour la démonstration de la conformité.","https://www.cnil.fr/fr/securite-tracer-les-operations","2026-11-02T20:57:33.4681365",[],[],{"date":348,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":349,"id":350,"ref":27,"label":351,"type":265,"description":352,"relatedRisk":27,"moreDetailsUrl":353,"dateCreation":256,"dateUpdate":354,"tags":355,"attachments":356,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699235Z",{},"cae348c2-e9f2-4e49-8d60-ab56e438d5a4","Sauvegarde","Des copies de sauvegarde doivent être réalisées et testées régulièrement pour être disponibles en cas de besoin. Les précautions élémentaires S’agissant de la sauvegarde des données","https://www.cnil.fr/fr/securite-sauvegarder","2026-11-02T20:57:34.7827534",[],[],{"date":358,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":359,"id":360,"ref":27,"label":361,"type":265,"description":362,"relatedRisk":27,"moreDetailsUrl":363,"dateCreation":364,"dateUpdate":27,"tags":365,"attachments":366,"creatorUser":367,"workflowStepId":236,"workflowStep":27},"2026-11-03T11:37:04.569924Z",{},"6eddff0a-1378-4160-69b2-08df38010b92","Continuité et reprise d'activité","Pour limiter le temps d’indisponibilité du système, il faut anticiper les incidents les plus courants. Assurer la continuité d’activité consiste à prévoir des moyens de continuer de fonctionner, en général de manière dégradée, malgré des dysfonctionnements. La reprise d’activité, quant à elle, englobe toutes les actions nécessaires pour relancer un système arrêté.","https://www.cnil.fr/fr/securite-prevoir-la-continuite-et-la-reprise-dactivite","2026-11-02T20:57:39.8112993",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":369,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":370,"id":371,"ref":27,"label":372,"type":229,"description":373,"relatedRisk":27,"moreDetailsUrl":374,"dateCreation":375,"dateUpdate":27,"tags":376,"attachments":377,"creatorUser":378,"workflowStepId":236,"workflowStep":27},"2026-11-03T11:37:04.5699246Z",{},"10c6151c-c44c-46df-69b3-08df38010b92","Gestion des incidents et des violations","Il convient d’être préparé à l’éventualité d’un incident pour intervenir à temps et de manière appropriée, en intégrant l’objectif de limiter les effets pour les personnes dont les données sont concernées. Le responsable de traitement peut être amené à notifier la CNIL ou informer les personnes concernées de l’incident en fonction du risque pour celles-ci.","https://www.cnil.fr/fr/securite-gerer-les-incidents-et-les-violations","2026-11-02T20:57:40.7676498",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":380,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":381,"id":382,"ref":27,"label":383,"type":229,"description":384,"relatedRisk":27,"moreDetailsUrl":385,"dateCreation":386,"dateUpdate":27,"tags":387,"attachments":388,"creatorUser":389,"workflowStepId":236,"workflowStep":27},"2026-11-03T11:37:04.5699251Z",{},"e064565b-514e-4755-69b4-08df38010b92","Analyse de risques","En parallèle de la mise en conformité aux précautions élémentaires présentées dans ce guide, il est pertinent, voire obligatoire selon la criticité des traitements, de réaliser des analyses de risques relative à la protection des données. Ces analyses permettent de décider des mesures de sécurité complémentaires, adaptées au contexte, permettant de limiter l’impact sur les personnes concernées par le traitement.","https://www.cnil.fr/fr/securite-analyse-de-risques","2026-11-02T20:57:42.2940193",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":391,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":392,"id":393,"ref":27,"label":394,"type":265,"description":395,"relatedRisk":27,"moreDetailsUrl":396,"dateCreation":256,"dateUpdate":397,"tags":398,"attachments":399,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699256Z",{},"eaf489b5-7441-4bb3-8aee-0b894f6ade51","Chiffrement, hachage et signature","Moyens mis en œuvre pour assurer la confidentialité des données conservées (en base de données, dans des fichiers plats, dans les sauvegardes, etc.) ainsi que les modalités de gestion des clés de chiffrement (création, conservation, modification en cas de suspections de compromission, etc.).\n\nDétaillez les moyens de chiffrement employés pour les flux de données (VPN, TLS, etc.) intégrés dans le traitement.","https://www.cnil.fr/fr/securite-chiffrement-hachage-signature","2026-11-02T20:57:36.4902402",[],[],{"date":401,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":402,"id":403,"ref":27,"label":404,"type":265,"description":405,"relatedRisk":27,"moreDetailsUrl":406,"dateCreation":256,"dateUpdate":407,"tags":408,"attachments":409,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699271Z",{},"43ba60c3-6739-4e15-bc7b-bc80cad63155","Sécurité des sites web","Tout site web doit garantir son identité aux terminaux s’y connectant et la confidentialité des informations transmises. Les précautions élémentaires Sécuriser les flux d’échange de données par l’utilisation de TLS :","https://www.cnil.fr/fr/securite-securiser-les-sites-web","2026-11-02T20:57:25.0515414",[],[],{"date":411,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":412,"id":413,"ref":27,"label":414,"type":229,"description":415,"relatedRisk":27,"moreDetailsUrl":416,"dateCreation":256,"dateUpdate":417,"tags":418,"attachments":419,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699277Z",{},"5c75cb90-f2b8-43c2-8bcf-808d92f00aa6","Encadrement des développements informatiques","La protection des données à caractère personnel doit être intégrée dans le cycle de développement informatique dès les phases de conception et pour les configurations par défaut afin d’offrir aux personnes concernées une meilleure maîtrise de leurs données et de limiter les erreurs, pertes, modifications non autorisée, ou mauvais usages de celles-ci dans les applications.","https://www.cnil.fr/fr/securite-encadrer-les-developpements-informatiques","2026-11-02T20:57:27.2009232",[],[],{"date":421,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":422,"id":423,"ref":27,"label":424,"type":229,"description":425,"relatedRisk":27,"moreDetailsUrl":426,"dateCreation":256,"dateUpdate":427,"tags":428,"attachments":429,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699281Z",{},"47c52bcb-a6e9-487b-a958-f027b20dbd87","Encadrement de la sous-traitance","Les traitements de données réalisés par un sous-traitant pour le compte du responsable de traitement doivent bénéficier de garanties suffisantes, notamment en matière de sécurité.","https://www.cnil.fr/fr/securite-gerer-la-sous-traitance","2026-11-02T20:57:31.4211019",[],[],{"date":431,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":432,"id":433,"ref":27,"label":434,"type":229,"description":435,"relatedRisk":27,"moreDetailsUrl":436,"dateCreation":256,"dateUpdate":437,"tags":438,"attachments":439,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.5699286Z",{},"49230bff-1cd3-46bd-85f5-e43809136dc9","Sécurité des échanges avec l'extérieur","Sans mesure complémentaire, les canaux de transmission de données grand public (ex. : messagerie électronique, messagerie instantanée, plateforme de dépôt de fichiers) constituent rarement un moyen de communication sûr pour transmettre des données personnelles. Une simple erreur d’inattention peut conduire des personnes non habilitées à prendre connaissance de données personnelles, ce qui porte atteinte au droit à la vie privée des personnes concernées.","https://www.cnil.fr/fr/securite-securiser-les-echanges-avec-lexterieur","2026-11-02T20:57:29.3610605",[],[],{"date":441,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":442,"id":443,"ref":27,"label":444,"type":265,"description":445,"relatedRisk":446,"moreDetailsUrl":82,"dateCreation":447,"dateUpdate":27,"tags":448,"attachments":449,"creatorUser":27,"workflowStepId":248,"workflowStep":27},"2026-11-03T11:37:04.569929Z",{},"e71c1bfd-bbe5-4443-aa6b-e45b07a6f1c4","Hébergeur de données de santé agréé au sens de l’art L.1111-8 du code de la santé publique","Utiliser des hébergeurs de données de santé certifiés pour stocker les informations médicales.","Compromission des données de santé, non-conformité réglementaire.","2022-03-31T08:26:29.0136244",[],[],{"date":451,"state":225,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":452,"id":453,"ref":27,"label":454,"type":229,"description":455,"relatedRisk":27,"moreDetailsUrl":456,"dateCreation":457,"dateUpdate":27,"tags":458,"attachments":459,"creatorUser":460,"workflowStepId":236,"workflowStep":27},"2026-11-03T11:37:04.5699294Z",{},"eba73701-684c-4de3-69ba-08df38010b92","RGS : référentiel général de sécurité des autorités administratives","Appliquer le référentiel général de sécurité (RGS) de l'ANSSI : homologation de sécurité des systèmes d'information des autorités administratives (ordonnance n° 2005-1516).","https://cyber.gouv.fr/le-referentiel-general-de-securite-rgs","2026-11-02T20:57:48.3845718",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[462,471,479],{"subjectCategory":463,"displayName":465,"id":469,"subjectCategoryId":464,"comment":27,"dataSubjectVolumeMax":27,"readonly":28,"purposes":470},{"id":464,"label":465,"ref":27,"dateCreation":466,"dateUpdate":27,"creatorUserId":27,"creatorUser":27,"description":27,"minorConcerned":28,"workflowStepId":467,"workflowStep":27,"dataRetentionRules":468},"8b9dd7e2-2eb8-4ef5-2689-08dac757bbf1","Employés","2022-11-15T22:21:35.8123871",97319,[],"1bed7a3d-cc0d-41e6-e701-08df38010be0",[],{"subjectCategory":472,"displayName":474,"id":477,"subjectCategoryId":473,"comment":27,"dataSubjectVolumeMax":27,"readonly":28,"purposes":478},{"id":473,"label":474,"ref":27,"dateCreation":475,"dateUpdate":27,"creatorUserId":27,"creatorUser":27,"description":27,"minorConcerned":28,"workflowStepId":467,"workflowStep":27,"dataRetentionRules":476},"ff2c96d4-9d2f-48ed-269b-08dac757bbf1","Anciens employés","2022-11-15T22:22:12.9429016",[],"b7a6305a-33c1-4c2d-e702-08df38010be0",[],{"subjectCategory":480,"displayName":482,"id":487,"subjectCategoryId":481,"comment":27,"dataSubjectVolumeMax":27,"readonly":28,"purposes":488},{"id":481,"label":482,"ref":27,"dateCreation":483,"dateUpdate":27,"creatorUserId":25,"creatorUser":484,"description":27,"minorConcerned":28,"workflowStepId":485,"workflowStep":27,"dataRetentionRules":486},"2997303b-d204-4470-3742-08df38010be4","Membres de la famille du salarié","2026-11-03T07:48:24.0787284",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},97318,[],"97d4a4a6-17c3-428a-e703-08df38010be0",[],"\u003Cblockquote>\u003Cp>\u003Cstrong>Modèle à adapter\u003C/strong>\u003C/p>\u003Cp>Modèle de traitement fourni à titre indicatif, à adapter à votre organisation. Les finalités, les données, les durées de conservation, les destinataires, les mesures de sécurité et l'analyse d'impact y sont des valeurs de départ, établies à partir des textes et référentiels cités ci-dessous. \u003Cstrong>Ce modèle ne constitue pas un avis juridique\u003C/strong> : faites-le valider par votre DPO ou votre conseil.\u003C/p>\u003C/blockquote>\u003Cblockquote>\u003Cp>\u003Cstrong>Point d'attention\u003C/strong> : Aucune durée de conservation spécifique à la mobilité internationale n'existe dans les référentiels CNIL lus : les durées sont indicatives. Les textes sur le détachement (code du travail, règlements européens) n'ont pas été lus directement : seule la FAQ du Cleiss a été ouverte.\u003C/p>\u003C/blockquote>\u003Ch3>Sources\u003C/h3>\u003Cp>\u003Cem>Classement selon le guide pratique CNIL « Les durées de conservation ».\u003C/em>\u003C/p>\u003Cul>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/sites/cnil/files/2023-09/referentiel_gestion_des_ressources_humaines.pdf\">CNIL, Référentiel relatif aux traitements de données personnelles mis en œuvre aux fins de gestion du personnel (2023)\u003C/a>. Gestion de la mobilité professionnelle ; références du passeport pour les personnels amenés à se déplacer à l'étranger ; titre valant autorisation de travail pour les employés étrangers ; données de situation familiale. Rappelle que tout transfert hors UE doit reposer sur une décision d'adéquation, des BCR, des clauses types, un code de conduite ou une certification.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/sites/default/files/2026-04/referentiel_durees_de_conservation_gestion_des_ressources_humaines.pdf\">CNIL, Les durées de conservation des données personnelles : gestion des ressources humaines (2 avril 2026, mise à jour du 20 mai 2026)\u003C/a>. Aucune ligne dédiée à la mobilité internationale, aux visas ou aux titres de séjour : confirme l'absence de durée de référence. Seules les durées générales du dossier professionnel (registre unique du personnel, 5 ans après le départ) sont citées.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/transferer-des-donnees-hors-de-lue\">CNIL, Transférer des données hors de l'UE\u003C/a>. Outils de transfert : décisions d'adéquation (États-Unis, Royaume-Uni, Brésil cités), clauses contractuelles types, règles d'entreprise contraignantes (BCR), dérogations de l'article 49 pour des situations particulières, et guide d'analyse d'impact des transferts.\u003C/li>\u003Cli>\u003Cstrong>Référence sectorielle\u003C/strong> : \u003Ca href=\"https://www.cleiss.fr/faq/detachement.html\">Cleiss, FAQ Détachement\u003C/a>. Distinction détachement (maintien au régime français, 24 mois maximum dans l'UE, l'EEE et la Suisse, 1 à 5 ans avec les pays liés par convention) et expatriation (affiliation au régime du pays d'activité) ; formulaire A1 délivré par l'Urssaf, la MSA ou l'Enim et tenu à disposition des contrôleurs.\u003C/li>\u003C/ul>","Automatic","ManualOrOnDemand","NonApplicable","Les personnes sont informées au moment de la collecte (art. 13 du RGPD) ou, en cas de collecte indirecte, au plus tard dans un délai d'un mois (art. 14).","Droit d'opposition non applicable : il ne vise que les traitements fondés sur l'intérêt légitime ou une mission d'intérêt public (art. 21.1 du RGPD) ou la prospection (art. 21.2). Ici le traitement repose sur une obligation légale, un contrat ou le consentement. Le consentement se retire à tout moment (art. 7.3).",[],[497,505,511,518,533,540,547,553],{"purposes":498,"dataRetentionRules":27,"parentId":27,"children":499,"displayName":500,"label":500,"transfers":501,"recipientType":502,"type":503,"jobTitle":27,"id":504,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Service des ressources humaines et de la mobilité",[],"InternalService","Recipient","f2c0ac9e-cbfb-49e7-a130-08df38010bcb",{"purposes":506,"dataRetentionRules":27,"parentId":27,"children":507,"displayName":508,"label":508,"transfers":509,"recipientType":502,"type":503,"jobTitle":27,"id":510,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Service paie et direction fiscale",[],"5a1245b2-77f2-42dc-a131-08df38010bcb",{"purposes":512,"dataRetentionRules":27,"parentId":27,"children":513,"displayName":514,"label":514,"transfers":515,"recipientType":516,"type":503,"jobTitle":27,"id":517,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Entité ou filiale du pays d'accueil",[],"JointController","157eb428-1999-408e-a132-08df38010bcb",{"purposes":519,"dataRetentionRules":27,"parentId":27,"children":520,"displayName":521,"label":522,"transfers":523,"recipientType":524,"type":503,"jobTitle":27,"id":525,"actorId":526,"actor":527,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Sous-traitant à préciser","Prestataire de mobilité internationale (relocation, visas)",[],"Vendor","23b64cda-6431-4ab1-a133-08df38010bcb","1af96d46-eb9e-45f3-64bc-08df38010bd1",{"label":521,"id":526,"ref":27,"dateCreation":528,"dateUpdate":27,"reviewDate":27,"nextReviewDate":27,"logoUrl":27,"state":529,"actorType":530,"description":531,"countryCode":27,"readonly":28,"email":27,"phoneNumber":27,"contactName":27,"contactPosition":27,"immatriculationNumber":27,"websiteUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"workflowStepId":532,"areaId":27,"source":54},"2026-11-02T20:57:51.2801474","New","Morale","Acteur générique des modèles de traitement : à remplacer par le prestataire retenu (sous-traitant au sens de l'article 28 du RGPD).",76516,{"purposes":534,"dataRetentionRules":27,"parentId":27,"children":535,"displayName":521,"label":536,"transfers":537,"recipientType":524,"type":503,"jobTitle":27,"id":538,"actorId":526,"actor":539,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Cabinet de conseil fiscal et social",[],"b7bf70ec-1df0-4774-a134-08df38010bcb",{"label":521,"id":526,"ref":27,"dateCreation":528,"dateUpdate":27,"reviewDate":27,"nextReviewDate":27,"logoUrl":27,"state":529,"actorType":530,"description":531,"countryCode":27,"readonly":28,"email":27,"phoneNumber":27,"contactName":27,"contactPosition":27,"immatriculationNumber":27,"websiteUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"workflowStepId":532,"areaId":27,"source":54},{"purposes":541,"dataRetentionRules":27,"parentId":27,"children":542,"displayName":543,"label":543,"transfers":544,"recipientType":545,"type":503,"jobTitle":27,"id":546,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Organismes de sécurité sociale (Urssaf, MSA, Cleiss, caisses étrangères)",[],"AuthorizedThirdParty","cc59d5c9-3584-4dbd-a135-08df38010bcb",{"purposes":548,"dataRetentionRules":27,"parentId":27,"children":549,"displayName":550,"label":550,"transfers":551,"recipientType":545,"type":503,"jobTitle":27,"id":552,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Consulats et autorités d'immigration du pays d'accueil",[],"a375c995-fd00-47dc-a136-08df38010bcb",{"purposes":554,"dataRetentionRules":27,"parentId":27,"children":555,"displayName":556,"label":556,"transfers":557,"recipientType":545,"type":503,"jobTitle":27,"id":558,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Administrations fiscales (France et pays d'accueil)",[],"a8e07536-db54-4f9c-a137-08df38010bcb",[],[561,567,573,577,581],{"id":562,"key":32,"label":563,"description":564,"legalBasis":565,"legalBasisText":566,"legalBasisDescription":27,"readonly":28},"25b0af0b-1e45-40ae-10d4-08df38010b80","Organisation et suivi de la mission à l'étranger","Préparer, formaliser et suivre le détachement ou l'expatriation : avenant ou contrat local, dates, poste, conditions de rémunération, retour. Le référentiel CNIL RH de 2023 prévoit la gestion de la mobilité professionnelle et la collecte des références de passeport pour les personnels amenés à se déplacer à l'étranger. Base retenue : exécution du contrat de travail.","Contract","Contrat ou mesures précontractuelles",{"id":568,"key":91,"label":569,"description":570,"legalBasis":571,"legalBasisText":572,"legalBasisDescription":27,"readonly":28},"9c5b722a-09f6-427b-10d5-08df38010b80","Formalités de visa, de titre de séjour et d'autorisation de travail","Constituer et suivre les dossiers d'immigration du salarié et de sa famille auprès des autorités du pays d'accueil. Base retenue : obligation légale de respecter les règles d'entrée et de travail du pays d'accueil.","LegalCommitment","Obligation légale",{"id":574,"key":133,"label":575,"description":576,"legalBasis":571,"legalBasisText":572,"legalBasisDescription":27,"readonly":28},"d98746d8-810f-4011-10d6-08df38010b80","Protection sociale et affiliation (détachement, expatriation)","Demander le formulaire A1 pour un détachement dans l'UE, l'EEE ou la Suisse (maintien au régime français, 24 mois maximum selon le Cleiss) ou organiser l'affiliation au régime du pays d'accueil en cas d'expatriation, ainsi que les couvertures complémentaires. Base retenue : obligation légale.",{"id":578,"key":33,"label":579,"description":580,"legalBasis":571,"legalBasisText":572,"legalBasisDescription":27,"readonly":28},"6e1362ed-20a0-461f-10d7-08df38010b80","Gestion fiscale et paie du salarié mobile","Déterminer la résidence fiscale, les retenues et les déclarations applicables dans chaque pays, et alimenter la paie internationale (primes d'expatriation, indemnités de logement, scolarité). Base retenue : obligation légale pour les déclarations, exécution du contrat pour les éléments de rémunération.",{"id":582,"key":176,"label":583,"description":584,"legalBasis":585,"legalBasisText":586,"legalBasisDescription":27,"readonly":28},"5f735403-babb-4b04-10d8-08df38010b80","Accompagnement de la famille et logistique de l'installation","Organiser le déménagement, le logement, la scolarité et les voyages du salarié et de sa famille avec l'aide de prestataires. Base retenue : consentement du salarié pour les données de ses proches.","Consent","Consentement",100,67,5]