{
  "node_id": "mf-gdpr-2018",
  "title": "Saint Martin (French Collectivity) - EU General Data Protection Regulation (GDPR) and CNIL Supervisory Framework",
  "domain": "Data Protection & Privacy",
  "version": "1.0.0",
  "last_updated": "2026-04-27",
  "bluf": "Saint Martin (French collectivity) is a French overseas collectivity located in the northeastern Caribbean Sea, occupying the northern portion of the island of Saint Martin, which it shares with the Kingdom of the Netherlands (Sint Maarten). Saint Martin became a separate French collectivity in 2007 and has been designated as an EU outermost region, making it fully subject to EU law including the General Data Protection Regulation (GDPR), which applies directly and in full force in Saint Martin in the same manner as in metropolitan France and all other EU outermost regions. The Commission Nationale de l'Informatique et des Libertés (CNIL) is the competent data protection supervisory authority for Saint Martin. The French national adaptation law - Law No. 2018-493 of 20 June 2018 on the Protection of Personal Data - implements GDPR-compatible national provisions applicable in Saint Martin. All organisations established in Saint Martin or processing personal data of individuals located in Saint Martin must comply with the GDPR, including requirements for lawful basis, data subject rights, data protection by design and by default, data protection impact assessments, mandatory breach notification to CNIL within 72 hours, and appointment of a Data Protection Officer where required. Note that Saint Barthélemy, the neighbouring French collectivity, is classified as an EU Overseas Country and Territory (OCT) rather than an outermost region, and the GDPR does not apply there - a key compliance distinction for organisations operating across both territories.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/mf-gdpr-2018.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "gdpr-article-5-data-principles",
    "coe-convention-108-plus",
    "iso-27001-2022"
  ],
  "primary_citations_count": 7
}