France introduced the CV anonyme in 2006 to reduce discrimination in hiring by removing personal details from job applications. The obligation never came into force, and since 2015 the Labour Code treats anonymous applications as an option, not a requirement. What does bind a French recruitment agency is the ban on discrimination in hiring and GDPR, and many clients still ask for anonymised CVs at the first screening.
The CV anonyme: an obligation that never took effect
Article 24 of the law of 31 March 2006 on equal opportunities inserted article L1221-7 into the Labour Code. It required employers with 50 or more staff to examine written applications in a way that preserves the candidate's anonymity, with the detail to be set by a decree of the Conseil d'État.
That decree was never published, even after the Conseil d'État itself ordered the government to issue it in July 2014. The obligation therefore never applied in practice. The law of 17 August 2015 then changed the wording from "must" to "may": article L1221-7 now says that application information "may be examined in conditions preserving [the candidate's] anonymity". Anonymising is permitted and encouraged, not required.
Be wary of sources, including older versions of this guide, that describe the CV anonyme as mandatory.
What does apply: the anti-discrimination rules
- Prohibited grounds. Article L1132-1 of the Labour Code bars excluding anyone from a recruitment procedure because of, among other things, their origin, sex, age, family situation, physical appearance, surname, place of residence, health or disability, religious beliefs, political opinions or union activities.
- Information requested from candidates. Article L1221-6 says the information asked of a candidate may only serve to assess their ability to do the job or their professional skills, and must have a direct and necessary link with the job.
In practice, passing a client a date of birth, a family status or a photo that has no bearing on the role is a risk for the client and for the agency that did the screening. That is the practical case for anonymising at the first stage, even though no law requires it.
Why the practice persists
- No sanction for not anonymising. Because the obligation never took effect, there is nothing to enforce. The risk sits in the discrimination rules, not in the CV format.
- Practical challenges. Anonymising manually or automatically is cumbersome with unstructured or free-format CVs.
- Employer resistance. Some employers prefer to see full candidate details early to make quick judgements.
GDPR obligations for French agencies
GDPR has been the dominant regulation affecting recruitment data handling in France since 2018. It sits on top of the anti-discrimination rules:
- Lawful basis: Agencies must have a lawful basis to process personal data, usually consent or legitimate interest.
- Data minimisation: Only collect and process data necessary for recruitment purposes.
- Transparency: Candidates must be informed about what data is collected and how it will be used.
- Security: Agencies must protect candidate data from unauthorised access.
- Rights of candidates: Including access, rectification, and erasure of their data.
- Retention: The CNIL's HR retention schedule (updated January 2026) lets an agency keep a talent-pool profile in its active database for up to two years from the last contact with a candidate who was not placed, unless the candidate consents to longer. Separately, a non-placed candidate's file can be archived with restricted access for five years from the date the vacancy was filled, as evidence in a possible discrimination claim (article L1134-5 of the Labour Code).
In the context of blind hiring, GDPR's data minimisation and transparency principles support removing unnecessary personal data early in the recruitment process.
Recruitment agencies in France typically need documented processes showing how they comply with both GDPR and anti-discrimination laws.
For more on GDPR and CV compliance, see our guide on GDPR CV compliance for recruiters.
Practical compliance steps
Meeting the anti-discrimination rules and GDPR can be tricky but manageable with clear steps:
- Define anonymisation scope, client by client: Decide which personal details to remove at CV screening. Names, photos, contact details, birth dates, and locations are commonly stripped.
- Automate where possible: Manual anonymisation is error-prone and slow. Tools that automatically remove personal identifiers reduce risk and save time.
- Train recruiters: Ensure your team understands the legal context and the importance of blind hiring practices.
- Document procedures: Keep records of how CVs are anonymised and processed to demonstrate compliance.
- Inform candidates: Update privacy notices to explain blind hiring processes and data handling.
- Balance compliance with practicality: Some details, like qualifications or location for legal right to work checks, may be necessary later in the process. Anonymisation usually applies only to the initial CV review.
These steps help reduce discrimination risk and meet GDPR's data minimisation principle. Note that a CV with the name removed is usually still personal data under GDPR, because a detailed career history can identify the person. Anonymising reduces bias; it does not take the CV outside GDPR.
FAQ
Is the CV anonyme mandatory in France?
No. The 2006 obligation never came into force, and article L1221-7 of the Labour Code now describes anonymous examination of applications as an option. The anti-discrimination rules still apply at every stage.
Are photos banned on French CVs?
Not explicitly banned, but a photo has no direct link with professional skills and reveals appearance, age and supposed origin. Many agencies remove photos automatically at the first screening.
What penalties exist for non-compliance?
Not anonymising carries no penalty in itself, because anonymisation is optional. Discrimination in hiring can lead to civil and criminal liability under broader labour and criminal law, and GDPR violations carry separate penalties.
How does GDPR affect blind hiring in France?
GDPR's data minimisation and transparency rules support blind hiring by encouraging agencies to process only relevant personal data and inform candidates about data use.
Can automated CV screening tools comply with blind hiring laws?
They can, but agencies must ensure algorithms don't introduce bias and comply with GDPR's rules on automated decision-making. See our guide on EU GDPR Article 22 and automated CV screening for more detail.
Is anonymisation required for international recruitment?
French law applies within its jurisdiction, and anonymisation is optional there. For international candidates or clients, agencies should consider local laws and best practices. Our overview of blind hiring laws by country can help.
If you regularly send CVs to French clients or operate recruitment in France, automating anonymisation reduces discrimination risk and workload. Distill strips the name, email, phone, photo, and graduation year from the CV before you submit it. Try Distill free to see how it helps you stay compliant.