France’s data protection authority, the Commission nationale de l’informatique et des libertés, published recommendations on how to use multifactor authentication for better data protection. The agency noted any authenticators must also comply with the EU General Data Protection Regulation, specifically with requirements around legal basis, data minimization and retention periods.
Full story