Describes regulations introduced in France for managing hotspots.
Country
France
Need to notify Network Regulation Authority
Yes, CNIL
Authentication required
Yes, logs must include identification information
Logs policy (duration, location & how)
Duration: 12 months, then delete or anonymize
Location: in European Union
How: Identification of user (Any user ID, name or phone number), type of communication (internet usage), connection time and duration, IP address and port number allocated to the user or device connected to the Internet, location of the hotspot, amount of data (can be over a session, or over a period of time).
Do not keep the user's internet browsing history
Copyright infringement
Yes. Hadopi law
Logs available on government request
Actions to take if requested by authorities:
Measures to allow the real-time collection of data on an identified person
Automated processing to detect connections that might reveal a terrorist threat
Data to be collected
Data allowing to locate a device
Data related to the access of the device to the Internet
Data associated with the identification of a user, a connection, a network, and online communication
Privacy
Data is to be encrypted and secured against unauthorized access.