Finding a person’s address in France is based on a precise legal framework that conditions each available method. The GDPR requires that any collection of addresses be proportionate to the intended purpose, with a principle of data minimization. Before starting a search, we recommend identifying the legitimate reason that justifies it: debt recovery, inheritance, service of legal documents, or re-establishing family contact.
RNIPP Files and Administrative Access: What Directories Do Not Cover
Most articles on the subject point to the White Pages or search engines. These tools rely on declarative data, subject to the right of opposition. A person who has exercised their right to erasure with a directory disappears permanently from it.
The National Directory of Identification of Natural Persons (RNIPP) constitutes a different source. It records civil status, but access to the RNIPP is reserved for administrations and public officers. An individual cannot query it directly.
In practice, it is the bailiff (now justice commissioner) who has the broadest prerogatives. As soon as they hold an enforceable title, they can query tax administrations, social security funds, and banking files to locate a debtor. Without an enforceable title, their investigative means remain limited to open sources and professional directories.
We regularly observe that creditors attempt searches for months before commissioning a justice commissioner, whereas an enforceable title would have unlocked access to administrative files in just a few days. When the reason is judicial, starting down this path saves considerable time.
Online Directories and Open Databases: Reliability and Limitations of Cross-Referencing
Public directories remain the first reflex, and rightly so. They allow free searches by name, first name, and locality. A directory available on Le Comptoir Web details the different search options and their terms of use.
Cross-referencing multiple open sources increases the reliability of the result. Comparing a phone directory with a commercial register (for a self-employed person) or a LinkedIn profile (to locate a geographical area) helps reduce the risks of name confusion. Social networks sometimes provide a city or department, but rarely a complete address.
Some points of caution regarding data from directories:
- An address listed in a directory may be several years old. Updates depend on telecom operators and the subscriber’s consent.
- The right of opposition allows any person to request their removal. The CNIL requires organizations to respond promptly to these requests.
- Paid reverse directories do not necessarily offer more recent data. Their added value lies in the aggregation of sources, not in access to privileged files.
Regarding name confusion, a search for a common name in a large urban area can yield dozens of results. Adding a distinguishing element (date of birth, former neighborhood, profession) is necessary to isolate the correct person.
GDPR Constraints on the Reuse of a Found Address
Finding an address is one thing. Using it in compliance with the GDPR is another, and this is often where mistakes occur.
The principle of purpose requires that the address be used exclusively for the reason stated during the search. An address found for an inheritance cannot be reused for commercial prospecting purposes. The CNIL reminds us that any postal prospecting requires that the person has been informed in advance and can easily and freely oppose each solicitation.
The practices of data brokers are subject to increased scrutiny. The CNIL has strengthened its control and sanction actions against address search providers that do not comply with transparency and minimization obligations. Specifically, a professional who purchases an address database from a provider must verify:
- That the individuals in the database have been informed of the collection and its purpose.
- That the right of opposition has been organized and that erasure requests have been processed.
- That the database contains only the data strictly necessary for the intended purpose (principle of minimization).
The burden of proof of compliance rests with the data controller, not solely on the provider. In the event of an audit, it is the user company that must demonstrate the legality of the initial collection.
Private Detective and Justice Commissioner: When to Hire a Licensed Professional
Resorting to a licensed private detective is justified when open sources have been exhausted or when the search requires field investigations. The private detective can conduct surveillance, interview neighbors, and cross-reference public information. Their report is admissible in court, provided that the methods used comply with the legal framework.
The justice commissioner remains the only professional authorized to query administrative files with an enforceable title. This distinction is central: a private detective does not have access to tax databases or social security files, even when commissioned by a lawyer.
In practice, we recommend combining both profiles in complex cases. The detective conducts the field investigation and produces a report. The justice commissioner then uses this report to guide their administrative inquiries and proceed with the service or seizure.
The cost of a private detective varies depending on the complexity of the case and geographical location. Requesting a detailed quote before any mission avoids unpleasant surprises, especially since rates can vary significantly from one firm to another.
Address searching remains an exercise where method matters more than the quantity of tools used. Identifying the legitimate reason, choosing the right channel (directory, justice commissioner, detective), and respecting data reuse constraints: these three steps, in this order, cover the vast majority of situations.
