French Finance Ministry Breach Sparks EU-Wide Data Security Alarm

Privacy campaigner Filippo Noseda, a partner at Mishcon de Reya, has formally petitioned European Union officials to suspend the transfer of financial data between member states. In a letter addressed to EU leadership, including Commissioner Michael McGrath and European Data Protection Supervisor Wojciech Wiewioroski, Noseda accused the French tax authority of systemic negligence, claiming officials only acknowledged the breach after media pressure forced their hand. He is now calling for a temporary halt to all bulk data collection programs until a comprehensive security audit can guarantee the safety of individual and business financial records.

The breach, which the French Finance Ministry confirmed on August 13, exposed sensitive details including reference taxable income, withholding tax rates, and property registry data. While the ministry maintained that login credentials and passwords remained secure, the incident follows a similar attack on Liechtenstein’s beneficial ownership register just two weeks prior. These events have intensified scrutiny of the Common Reporting Standard and other international treaties that mandate the cross-border exchange of personal financial data, raising fundamental questions about whether the push for tax transparency has created an unacceptable risk to personal privacy.