Introduction: when love turns into a camera
It always starts with good intentions. A fall in the bathroom, an unanswered call, an oven left switched on. Within a few weeks, the family gets organised: a personal alarm unit in the living room, a watch with location tracking "just for peace of mind", access to the bank account "to check there's no scam going on", the email password "just in case". Taken one at a time, each decision seems reasonable. Put end to end, they build something nobody has ever named: a permanent surveillance system installed around a legally competent adult, capable of giving consent, who has never formally been consulted.
We write a great deal about the traces we leave behind voluntarily. There is another, more delicate category: the traces we impose on someone else, often out of affection, sometimes out of anxiety, and almost always without any procedure. The paradox is a cruel one: the person whose privacy is most exposed in France today is not the hyperconnected teenager, it is often their 84-year-old grandmother.
This guide is aimed at family carers — there are between 9 and 11 million of them in France according to the Direction de la recherche, des études, de l'évaluation et des statistiques (DREES) — who want to protect without dispossessing. It sets out what the law allows, what the technology really does, and where to draw the line between watching over someone and putting them under a glass dome.
The starting principle: old age is not incapacity
An adult remains an adult
This is the legal point everyone forgets. An 87-year-old who has not been placed under any court-ordered protective measure has exactly the same rights as a 30-year-old: privacy of correspondence (article 226-15 of the French Criminal Code), the right to respect for private life (article 9 of the Civil Code), free disposal of their property, and the ability to refuse any technical device whatsoever.
Installing a camera in the living room of a lucid parent without their agreement is not a gesture of tenderness: it is potentially an infringement of the intimacy of private life, punishable under article 226-1 of the Criminal Code. Reading their emails with a password obtained "to help out" falls under the same logic. Being their son, their daughter, or even their registered carer creates no exception.
Frailty does not cancel consent, it complicates it
Early-stage cognitive impairment blurs the landmarks. A person may consent on Monday, have forgotten by Tuesday, and refuse on Wednesday. That does not mean you should decide in their place — it means you must document consent while it is clear, and anticipate what will happen afterwards.
That is precisely the point of the mandat de protection future (lasting power of attorney), a contract signed before a notary or privately, by which a person designates in advance who will represent them if they can no longer decide, and above all within what limits. You can write it down in black and white: "I accept a fall detector, I refuse any camera in the living areas", or "My personal emails must not be read". Few families do this. Yet it is the most powerful tool for avoiding decisions taken ten years later in a rush and out of guilt.
Mapping the devices: what protects, what spies
Not all objects sold under the "senior independence" label are equal. The right question is never "does this reassure the family?" but "how much information does it generate, about whom, and who has access to it?".
| Device | What it actually produces | Level of intrusion |
|---|---|---|
| Personal alarm pendant | An alert triggered by the person | Low — the initiative stays with the user |
| Standalone fall detector | An alert in the event of an impact | Low to medium |
| Door-opening / motion sensors | A time-stamped log of movements around the home | Medium to high |
| GPS watch | A continuous location trail | High |
| Indoor camera | The image, and sometimes the sound, of daily life | Very high |
| Connected pill dispenser | Medication times — health data | High (sensitive data) |
The typical drift goes like this: the family installs a pendant alarm (barely intrusive, deliberately triggered), then adds motion sensors because the pendant "is never worn", and ends up consulting a dashboard showing what time Mum got up, how many times she went to the toilet and whether she went out yesterday. Nobody ever decided to end up there.
The "trigger" test
A simple and useful rule: favour devices that the person triggers themselves, or that only speak up in the event of a serious anomaly. A personal alarm unit with a call button respects the user's initiative. A dashboard displaying daily activity continuously takes it away.
In practice, a simple connected smoke detector and a motion-activated night light in the hallway resolve a large share of the real risk (fire, night-time falls) without generating the slightest behavioural profile. We hugely underestimate what dumb, unconnected equipment can fix: grab rails, non-slip mats, automatic lighting.
The phone: the most sensitive point
Family location sharing, that false friend
The location-sharing features built into phones (Find My, Google Family Link and equivalents) are designed for underage children. Applying them to an adult parent raises two problems: they are permanent — they do not activate when something goes wrong, they broadcast continuously — and they are asymmetrical: one person sees, the other is seen.
If location tracking is justified (wandering linked to a diagnosed neurodegenerative disease, for example), three minimum safeguards apply:
- Reciprocity. If you can see your mother's location, she can see yours. This radically changes how the arrangement feels.
- A single named recipient. Not the eleven-person family WhatsApp group where everyone comments on the comings and goings.
- A dated review. "We'll revisit this in January" — otherwise the temporary arrangement becomes permanent through sheer inertia.
Passwords: never "borrow" them
The most widespread and most problematic practice consists of knowing a parent's password and using it freely. It mixes everything up: occasional help, curiosity, and sometimes family pressure.
Good practice is the opposite: the person keeps their credentials, and you put them somewhere safe rather than sharing them. A paper password notebook kept in a locked drawer — yes, paper — remains a perfectly suitable solution for many older people: it does not update itself, it does not ask for biometrics and it does not get wiped. For families comfortable with technology, a password manager with an emergency access feature lets you designate a contact who will only obtain access after a waiting period, which is infinitely healthier than a shared sticky note.
For what comes afterwards, France's 2016 Digital Republic Act created directives on the fate of personal data after death: everyone can decide during their lifetime who will be able to access what. It is the digital equivalent of a will, and it spares heirs from having to rummage.
Money: protecting without dispossessing
Power of attorney, family authorisation, guardianship: don't confuse them
- Banking power of attorney: the person remains the account holder and fully capable; they authorise a relative to carry out transactions. Revocable at any time. This is the lightest-touch solution.
- Family authorisation (habilitation familiale): granted by the protection court judge, it allows a relative to act on behalf of someone who can no longer express their wishes, without the ongoing supervision that guardianship entails.
- Guardianship and curatorship (tutelle and curatelle): heavy court-ordered measures, with an inventory, annual reports and judicial oversight.
The common mistake is to set up informal financial monitoring — checking statements every week, commenting on spending — with no framework at all. It is humiliating for the person concerned, and it provides no legal protection whatsoever should a dispute arise between heirs.
The real risk: scams, not spending
Reports collected by the official Cybermalveillance.gouv.fr platform and alerts from the DGCCRF show that older people are primarily targeted by fake bank adviser fraud, fake tech support and SMS-based identity theft. The effective response is not to monitor accounts, it is to equip the person:
- Lowered payment limits and SMS alerts activated with the bank.
- A family code phrase, known only to you, to be asked of any "relative in difficulty" who calls.
- The absolute rule: no bank, no public service ever asks for a code received by text message. Ever.
A good illuminated magnifier sitting next to the post often does more against paper scams than any software: many frauds thrive simply because the small print is unreadable.
The home and outside helpers
Care assistants, meal delivery, self-employed nurses, home helps: the home of a dependent person can see five to ten different professionals come through in a single week. Each one sees, hears and takes notes.
A few principles that are rarely applied:
- The communication logbook is not a diary. It should contain what is useful for continuity of care, not opinions about the family, visits or moods.
- Cameras in rooms where a professional works raise an additional problem: filming an employee at their workplace without prior notice is illegal. The employee must be informed, and the CNIL has repeatedly pointed out that permanent monitoring of a workstation is disproportionate.
- Administrative documents left lying around — tax notices, bank details, health insurance cards, prescriptions — are the real goldmine for identity theft. A cross-cut shredder placed near the desk settles this question better than any lecture.
A useful rule for deciding: if the device you are considering would be unacceptable installed in your own home, at your age, by your own children, it probably is at your parent's home too.
Health data: the most sensitive zone
Mon espace santé, the pharmaceutical record, laboratory results, blood glucose or blood pressure tracking apps: this data benefits from reinforced protection under the GDPR (article 9) and from medical confidentiality.
A carer has no automatic right of access. What French law provides for is the designation of a trusted support person (personne de confiance, article L1111-6 of the Public Health Code): the individual chooses for themselves who will be consulted if they can no longer express their wishes. It is a written, countersigned, revocable document. It should accompany every admission file to a care facility and every start of home care.
In practice, rather than sharing Mon espace santé credentials:
- Have the trusted support person formally designated.
- Ask the GP to draw up an up-to-date summary letter — useful in an emergency, without granting access to the full history.
- Keep current prescriptions in a dedicated folder, next to the phone. A ring binder with clear pockets is enough and saves the paramedics ten minutes of searching.
Talking about it without making it unbearable
The hardest part is not technical. It is telling a parent "I'm afraid for you" without it being heard as "you're no longer capable". A few phrasings that work better than others:
- Propose a dated trial rather than a permanent installation: "Let's try it for two months, then talk again."
- Grant an explicit right to withdraw: "If it annoys you, we unplug it, no argument."
- Make the arrangement reciprocal where possible.
- Clearly separate what reassures the family from what protects the person — these are not always the same thing, and saying so out loud defuses a great deal of tension.
The right to silence
You also have to accept that an older person may have areas of their life they do not wish to share: a romantic relationship, a disagreement with another child, a worry, a discreet purchase. The need to communicate without the whole family knowing about it does not disappear with age. It is precisely for these situations — flagging something, asking for advice, reaching someone without the trace ending up in a history that a relative reads — that a discreet channel of communication retains its usefulness, even at 85.
A small tablet or a personal phone of her own, whose passcode nobody else has, is not a whim: it is the condition for a private life that survives. An adjustable tablet stand placed next to the armchair is often enough to make the device comfortable to use, and therefore actually used.
The respectful carer's checklist
To reread once a year, or with every new installation:
- Have I asked? Explicitly, calmly, outside any crisis.
- Is the device triggered by the person, or continuous? Favour the former.
- Who has access to the data? One named recipient, not a family group chat.
- Where is it stored, and by whom? Check the hosting arrangements and retention period in the personal alarm provider's terms.
- Is the arrangement reversible? Can she say stop without conflict?
- Have I separated help from curiosity? Checking a statement to spot fraud is not the same as commenting on purchases.
- Do the legal documents exist? Trusted support person, lasting power of attorney, post-mortem data directives, banking power of attorney.
- Have I set a review date? Nothing temporary should become permanent through forgetfulness.
Conclusion: dignity as a technical criterion
You can fit a home with twenty sensors and make a person perfectly traceable, without having reduced the real risk of falling or isolation by one iota. You can also install three grab rails, automatic lighting and a pendant alarm, designate a trusted support person, set up a banking power of attorney, and achieve far greater protection — without ever having generated a single behavioural profile.
Privacy is not a luxury you give up as you age. It is what remains when physical autonomy fades: the right to keep part of yourself away from the gaze of your own family. This is no small matter. For many older people, it is precisely what makes the difference between being helped and being managed.
The documents to be signed while everything is still fine cost a few hours. Failing to draw them up costs, ten years later, decisions taken in an emergency by exhausted children who argue among themselves — with one person in the middle, whose opinion nobody asks any more.
