France's data protection authority, the Commission nationale de l'informatique et des libertés, published best practices for sharing personal data through application program interfaces. The CNIL identified cases when API use is recommended, listed risk factors to help organizations conduct a risk analysis, and offered recommended measures to help them achieve "the desired level of security" and "facilitate compliance with data protection principles."