In brief. Religious and philosophical beliefs fall within the special categories of data protected by Article 9 of the GDPR: processing them is, in principle, prohibited, save for strictly defined exceptions. In practice, however, a spiritual life leaves dozens of readable traces: donation tax receipts, parishioner lists, catechism registrations, prayer apps, event calendars, phone geolocation on a Friday or a Sunday morning. This guide takes inventory, sets out what you are entitled to refuse, and offers concrete steps.
References verified on 10 October 2026 on Légifrance, the CNIL website and that of the Direction générale des finances publiques. This article provides general information and does not replace legal advice.
Introduction: the data nobody talks about
When people list sensitive data, they mention health, sexual orientation, political opinions. Religion comes last, like a leftover from another century. That is a misjudgement.
Your beliefs — or the absence of them — are among the most discriminating pieces of information in existence. They can weigh on a tenancy application, a hiring decision, a child custody arrangement during a separation, a conversation with neighbours, an administrative check, or simply on the way colleagues look at you. And unlike a medical diagnosis, they are shielded by no professional confidentiality: there is no equivalent of doctor–patient privilege for faith.
Yet an entire ecosystem records them: religious associations, donation platforms, tax authorities, app developers, social networks, local authorities managing school meals. Rarely out of malice. Almost always out of administrative convenience.
Part 1 — What the law says (and it is more protective than you might think)
Article 9 of the GDPR: prohibited as a matter of principle
The General Data Protection Regulation classes data revealing "religious or philosophical beliefs" among the "special categories of data". Processing them is prohibited, unless an exception applies: explicit consent from the individual, necessity for legal proceedings, substantial public interest provided for by law, or — the key exception here — processing "carried out by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim", provided the processing relates solely to members and that the data are not disclosed outside the body without consent.
In practical terms: a parish, a mosque, a synagogue, a Buddhist community or a freethinkers' association are perfectly entitled to keep a record of their members. They are not entitled to share it, rent it out, pass it on to a third-party fundraising organisation or host it anywhere at all without telling you.
The French Data Protection Act and the principle of minimisation
Article 6 of the amended Act of 6 January 1978, echoed by the GDPR, requires that the data collected be adequate, relevant and limited to what is necessary. A religious association has no need whatsoever for your occupation, your detailed marital status or the first names of children not enrolled in any activity in order to send you a quarterly newsletter.
What no public authority may ask of you
In France, the principle of secularism establishes a clear separation. There is no official religious census: French public statistics include no question about religion, and the Act of 6 January 1978 prohibits, as a matter of principle, processing based on such data. An employer, a landlord, a town hall or a state school cannot require you to state your faith.
Key point. If a form asks for your religion and has not been issued by the community you belong to, the default correct answer is: do not answer. A field left blank is almost always lawful; data handed over is permanent.
Part 2 — An inventory of the real traces
Donations: the most solid trace, and the most underestimated
This is the most common entry point. The Catholic Church's annual contribution, zakat collected by an association, an annual membership payment to a community: as soon as you request a tax receipt in order to claim the tax reduction provided for by Article 200 of the French General Tax Code, a chain of traces falls into place.
| Stage | What is recorded | Who sees it |
|---|---|---|
| Online card donation | Name, address, amount, date, truncated bank identifier, IP address | Association + payment provider |
| Tax receipt | Name, address, amount, name of the recipient organisation | Association + tax authorities |
| Income tax return | Total amount, and the details in the event of an audit | DGFiP |
| Bank statement | Payee description, often explicit | Bank, and anyone with access to the account |
The bank transaction description is the weak link: it circulates in your online banking area, appears on a printed statement that a spouse might read, and feeds the automatic categorisation tools of banking apps. As we explained in our guide to what your bank statement reveals about you, an explicitly named transfer amounts to a declaration.
Where you have room for manoeuvre:
- A cash donation during a collection remains anonymous, but it generates no tax receipt. It is a deliberate trade-off between discretion and tax relief.
- A donation by cheque or bank transfer remains traceable to your name, but you can ask that your details not appear on any published list of donors (plaque, parish bulletin, annual report). This right flows from the principle of consent: publication is a purpose distinct from managing the donation.
- Under Article 21 of the GDPR, you can ask in writing to receive no solicitations and not to be included in any file-sharing between associations.
Membership records: the reality of small organisations
Most places of worship are run by volunteers. The membership list therefore often lives in a spreadsheet on a personal computer, sometimes synced to a consumer cloud storage service, sometimes emailed as an attachment to five members of the governing committee. This is not an accusation, it is an observation from the field that the CNIL regularly highlights in its guidance notes for associations.
The consequences: a lost USB stick, a computer resold without being wiped, a hacked mailbox — and a community's membership list is out in the open. For organisations that want to do things properly, two pieces of equipment change everything: an encrypted external hard drive for offline backups, and a shared password manager to avoid the single password jotted on a sticky note in the vestry.
What you can demand as a member, under Articles 15 to 17 of the GDPR:
- access: a copy of all the data held about you;
- rectification: correction of inaccurate information;
- erasure: deletion when you leave the community;
- information: knowing who has access to the file and where it is hosted.
Prayer, meditation and spiritual reading apps
This is the most recent and the most talkative trace of all. An app that reminds you of prayer times needs your precise location, sometimes continuously. A meditation app records your sessions, and therefore your sleep patterns, your self-reported stress levels, sometimes your daily mood. An app for reading sacred texts knows which passages you return to.
Technically, these apps combine three formidable elements:
- the nature of the app itself, which reveals the faith;
- geolocation, which reveals the home and the workplace;
- advertising identifiers, which make it possible to cross-reference that profile with the rest of your digital activity.
Press investigations in recent years have shown that location data from religious apps had been resold on the data broker market. The CNIL has also sanctioned app publishers on several occasions for collecting location data without valid consent.
Concrete steps:
- refuse "always" location access and choose "while using the app", or better still, enter a city manually;
- reset your device's advertising identifier and disable it in the privacy settings;
- where possible, favour offline content: a printed collection of texts transmits nothing to anyone;
- check the privacy policy: an app with no identifiable data controller in Europe is a warning sign.
Children: catechism, chaplaincy, school canteen
Your children's data are the easiest to collect, because school and after-school forms get filled in without being read. Three recurring leaks:
- Registration for catechism or a religious education class: a paper form containing name, address, telephone number, sometimes the parents' occupations and a photo of the child. Check what the photo is used for and how long it is kept. Authorisation to publish it on a public website is never compulsory.
- Dietary requirements at the canteen: asking for a pork-free or meat-free meal is a right, but the reason need not be stated. The CNIL points out that a local authority should record only the type of menu, never a presumed religion. If a form offers a "religious meal" tick box, report it.
- Absences for religious holidays: a request for authorised absence may cite "family" reasons. The details cannot be demanded.
Passive traces: the ones you don't fill in
Even without a single form, your phone documents your practice:
- a regular weekly presence at the same place at the same time, identifiable via mobile masts and the Wi-Fi networks of the places you pass through;
- time-stamped, geotagged photos taken during a ceremony;
- a plane ticket to a pilgrimage site, recorded in reservation systems and travel data;
- a work calendar shared with colleagues containing an explicitly named weekly appointment;
- online purchases: a candlestick, a prayer mat, a book, a liturgical garment are all recommendation engines need.
On that last point, one simple tip: sensitive purchases are best sent to a parcel pickup point rather than delivered to your home, and paid for with a single-use virtual bank card where your bank offers one.
Part 3 — Method: practising without building a file on yourself
1. Separate your channels
Compartmentalisation applies here as everywhere else. A dedicated email address for your community's communications, separate from your work address and your main address, resolves a good part of the problem on its own: no more automatic cross-referencing, no more knock-on exposure if one of the two is hacked.
The same reasoning applies to your phone. Giving your personal number to a mailing list means entrusting it to everyone who will administer that list over the next ten years. One option is to use a second number, or not to give one at all: when it comes to putting a delicate question to a community leader, reporting problematic behaviour, or asking for information before stepping through the door of a place of worship, an anonymous text message lets you open the conversation without handing over your phone number. Anonymity towards the recipient is not impunity — the rules set out in our article on the legality of anonymous SMS in France apply in full — but it does provide a useful buffer.
2. Fill in only what is mandatory
On an association's form, only the fields necessary for the stated purpose can be required. To receive a newsletter, a postal address or an email address is enough. Occupation, exact date of birth, family situation, number of children: none of that is necessary. A field not marked as mandatory can be left blank without justification.
3. Lock down the phone, not just the apps
The most accessible religious data remains what a third party reads over your shoulder or by unlocking your screen: prayer app notifications, invitations to ceremonies, community chat groups. Three settings are enough:
- hide notification content on the lock screen;
- enable individual app locking for the most sensitive apps where the system allows it;
- add a privacy screen filter to the device you use on public transport or in an open-plan office.
4. Clean up your donation and subscription history
Once a year, run a review: which associations have I given to, which still solicit me, which ones have shared my address? Mail arriving from organisations you have never given anything to, but which are close to the one you support, is the sign of file-sharing. A written objection sent by registered post is the most effective lever. If there is no reply within a month, a complaint to the CNIL is free and can be filed online.
5. Prepare for separation or conflict
This is the scenario in which such data become weapons. During a break-up, donation histories, community messages and ceremony photos can be added to a case file to build an argument about how the children are being raised. The useful measures are the same as for any digital disentanglement: change your passwords, remove devices from family sharing, disable photo backups to a joint account, and keep sensitive documents out of the shared cloud — an encrypted USB stick stored somewhere other than the shared home remains the simplest solution.
The most common mistakes
| Common reflex | Why it's risky | What to do instead |
|---|---|---|
| Giving your personal number to the community chat group | Shared with dozens of contacts, cascading leaks | Second number, or a dedicated email address |
| Allowing permanent location access to a prayer app | Reveals home, work, habits; can be resold | One-off location access or a manually entered city |
| Ticking "religious meal" at the canteen | Records a presumed religion for the child | Simply ask for a menu without a given ingredient |
| Requesting a tax receipt for a small donation | A lasting named trace for a minimal gain | Cash for small amounts, a receipt for large ones |
| Leaving your name on a published donor list | Public, indexed, permanent information | Explicitly request anonymity |
Going further
The subject belongs as much to law as to sociology. Two useful reads: the CNIL's practical guidance notes on associations and sensitive data, available free of charge on cnil.fr, and an accessible book on personal data protection to grasp the overall logic of the GDPR rather than learning its articles by heart. The CNIL's annual reports, also public, detail the formal warnings issued to associations and show concretely where the shortcomings lie.
In summary
- Religious and philosophical beliefs are sensitive data within the meaning of Article 9 of the GDPR: processing them is prohibited as a matter of principle.
- A religious association may keep a record of its members, but may never disclose it externally without consent.
- No public authority, no employer and no landlord can require you to state your faith: a blank field is almost always lawful.
- The most solid traces are the tax receipt and the bank transaction description; the most talkative are apps and geolocation.
- The steps with the best return are compartmentalisation (a dedicated email address and phone number), refusing permanent location access, and an annual audit of your donations and subscriptions.
Freedom of conscience includes the right not to explain yourself. Protecting your traces is nothing to be ashamed of: it is simply refusing to let a database answer the question on your behalf.
