France’s data protection authority, the Commission nationale de l’informatique et des libertés, published a “data protection management maturity model.” The CNIL said the model “transposes the maturity levels defined in international standards to data protection management” and “allows organizations to assess their own level of maturity and determine how to improve their management of data protection.” Organizations can develop an action plan using the model to evaluate their current practices and goals.