Most people in France would sell their data for under €40/month

A new survey commissioned by France's data protection authority (CNIL) reveals that 65% of French citizens are open to selling access to their personal data, with most placing its value below €40 per month.

While the idea of monetizing privacy has long remained theoretical, the findings illustrate a tangible public stance on exchanging personal information for cash.

The study, conducted online by Harris Interactive between December 18 and 23, 2024, polled 2,082 individuals aged 15 and older.

The data shows a notable spectrum of valuations. While 7% of respondents would sell their data for less than €1 per month, 14% expect over €200. The most common price point, selected by 28%, falls in the €10–30 range. A theoretical market equilibrium, where the willingness to buy and sell data aligns, was identified at €37.84 per month, based on a modeled supply-demand curve.

Still, not everyone is interested in putting a price on their privacy. A firm 35% of participants refuse to sell their data at any price, signaling a fundamental rejection of personal data commodification. Notably, this group also overlaps with those who decline to pay for privacy-preserving, ad-free services, suggesting a deep-rooted opposition to both the monetization and commodification of personal data ecosystems.

The concept of monetizing privacy has seen increased traction in recent years. While some initiatives have emerged from the private sector or academic research, public-sector efforts like Brazil's Dataprev “Wallet” platform indicate growing international interest in formalizing such markets. However, CNIL stresses that the legal framework in France and the EU does not allow individuals to waive their data protection rights entirely. At best, one can grant limited usage rights, not ownership transfer, over their data.

The privacy valuation framework used in the survey aligns with the so-called “privacy calculus” theory, where individuals weigh perceived privacy risks against potential benefits. Respondents valuing their data more highly tended to cite privacy as a key component in assessing digital service quality. Conversely, lower asking prices often reflect either a lower concern for privacy or a higher willingness to trade it for economic gain.

The implied market price of around €40 per month for access to personal data stands in stark contrast to recent data breaches where individuals' information was compromised at no benefit to them whatsoever. In 2025 alone, high-profile incidents involving Air France–KLM and Orange France exposed sensitive data from airline passengers and enterprise clients, without consent, compensation, or recourse. Last year, France Travail, the country's public employment service, exposed the personal data of 43 million people, which was the worst incident in the country's history.