France’s data protection authority, the Commission nationale de l'informatique et des libertés, published guidance and best practices for use of authentication by digital token. The CNIL warned access tokens made from hyperlinks can pose security risks because they can act as a “gateway” to allow for “continuous access to personal data on the internet." Without two-factor authentication, individual remote connection tokens create “increased risk in terms of security.” The CNIL’s recommendations include establishing a defined period for how long a token can be valid and use authentication links that do not contain personal data.