This template is offered by
As an employee of Name of your company, the Employee has access to personal data, and declares that he/she recognizes the confidentiality of said data.
The Employee therefore undertakes, in accordance with Articles 121 and 122 of the amended Act of January 6, 1978 on Data Processing, Data Files and Individual Liberties and Articles 32 to 35 of the General Data Protection Regulation of April 27, 2016, to take all precautions in accordance with custom and the state of the art within the scope of his duties to protect the confidentiality of the information to which he has access, and in particular to prevent it from being communicated to persons not expressly authorized to receive such information.
In particular, the Employee undertakes to:
- not to use the data to which it has access for purposes other than those for which it is responsible;
- to disclose such data only to persons duly authorized, by virtue of their functions, to receive such data, whether private, public, natural or legal persons;
- not to make any copy of such data except as necessary for the performance of its duties;
- take all measures in accordance with customary practice and the state of the art within the scope of its responsibilities to prevent the misuse or fraudulent use of such data;
- take all precautions consistent with custom and the state of the art to preserve the physical and logical security of such data;
- ensure, within the limits of its responsibilities, that only secure means of communication are used to transfer data;
- in the event of termination of its functions, to return all data, computer files and any information media relating to such data.
This confidentiality undertaking, in force for the duration of the Employee's term of office, will remain in force, without time limit, after the termination of his or her term of office, whatever the cause, insofar as this undertaking concerns the use and communication of personal data.
The Employee is hereby informed that any breach of the present undertaking shall render him/her liable to disciplinary and criminal sanctions in accordance with the regulations in force, in particular with regard to articles 226-16 to 226-24 of the French Penal Code.