Monaco DPL

Law No. 1.565 on Personal Data Protection

Flag of MC
MonacoOpt-inNational

Key Facts

Effective Date
January 1, 2024
Enacted
January 1, 2024
Enforcing Authority
CCIN (Commission de Contrôle des Informations Nominatives)
Consent Model
Opt-in
Applies To
Organizations processing personal data in Monaco

Overview

Monaco updated its data protection framework in 2024 with Law No. 1.565, replacing the 2011 legislation. The CCIN (Commission de Contrôle des Informations Nominatives) serves as the independent enforcement authority, providing GDPR-similar data protection for this independent microstate.

What This Means for Your Website

  • Consent-based processing is required for personal data of Monaco residents
  • Standard data subject rights apply
  • Monaco has its own independent DPA (CCIN), not subject to EU or EEA frameworks
  • The 2024 law modernizes the previous 2011 framework

Key Requirements

The CCIN enforces data protection in Monaco with administrative and criminal penalties. Cross-border transfer controls apply. While Monaco is not an EU member, its updated framework provides strong protection comparable to the GDPR.

How ConsentStack Handles This

ConsentStack applies GDPR-compatible consent standards for Monaco visitors, ensuring compliance with the CCIN's requirements under the updated 2024 law.

Penalties

Administrative and criminal penalties (specific amounts not widely documented).

Key Requirements

  • Consent-based processing framework
  • Data subject rights
  • DPA oversight
  • Cross-border transfer controls

Notable Provisions

  • Updated 2024 — replaces 2011 law
  • Not EU member
  • Independent CCIN regulator
  • Strong GDPR-similar protection

Other Europe Regulations

GDPREuropean Union + EEA
The GDPR sets the global standard for data protection, requiring explicit opt-in consent before processing personal data of EU/EEA residents. For websites, non-essential cookies must be blocked until visitors actively consent. Pre-ticked boxes and implied consent are invalid.
PECRUnited Kingdom
PECR is the UK's cookie-specific law, requiring consent before storing or accessing cookies. The DUAA 2025 significantly increased penalties from GBP 500,000 to GBP 17.5 million and introduced analytics exceptions on an opt-out basis. Only strictly necessary cookies are exempt.
ePrivacy DirectiveEuropean Union + EEA
Article 5(3) of the ePrivacy Directive is the primary EU legal basis requiring cookie consent. It mandates prior informed consent before storing or accessing any information on a user's device, with narrow exceptions only for transmission necessity and explicitly requested services.
FDPAFrance
France has the most actively enforced cookie regime in Europe. CNIL issued 259 corrective decisions in 2025, with cookie-specific fines totaling EUR 486.8 million including EUR 325M against Google. A Refuse all button or Continue without accepting must appear on the first layer.
UK GDPRUnited Kingdom
The UK GDPR is the retained EU GDPR post-Brexit, with consent standards identical to the EU version. The UK adequacy decision was renewed December 2025, valid until December 2031. Combined with PECR, it forms the legal framework for cookie consent in the UK.
TDDDGGermany
Germany implements the ePrivacy Directive through Section 25 of TDDDG (renamed from TTDSG in May 2024). A Consent Management Ordinance (EinwV) became effective April 2025, establishing a voluntary framework for recognized consent management services. Cookie banners must not obscure website content.

Frequently Asked Questions

Does Monaco have data protection laws?

Yes. Monaco's Law No. 1.565 (2024) provides comprehensive data protection similar to the GDPR, enforced by the independent CCIN.

Is Monaco subject to GDPR?

No. Monaco is not an EU or EEA member. It has its own independent data protection framework enforced by the CCIN.

When was Monaco's data protection law updated?

2024. Law No. 1.565 replaced the previous 2011 legislation with a modernized framework.

Stay compliant with Monaco DPL

ConsentStack helps you implement Opt-in consent for Monaco automatically.