As the COVID-19 pandemic continues, the French data protection authority, CNIL, has released guidance on the measures to be implemented to limit the spread of the virus, as well as the conditions under which personal data -particularly health data -may be used. The CNIL recalls certain principles regarding security obligations, workplace practices, and temperature checks.