The protection of the personal and asset information of the company manager

‍

Recent attacks on business leaders and their loved ones have highlighted a vulnerability that is often underestimated: the exposure of their personal and asset information. This exposure results less from individual recklessness than from the very functioning of legal advertising, which makes sensitive data relating to managers and the companies they control accessible in a lawful manner.

The decree of 22 August 2025, authorizing the hiding of the personal address of managers in documents filed with the registry office, is a significant advance. More generally, it invites us to question the existing legal tools and the complementary levers to limit the exploitation of this information.

Legal protection in construction, still partial

A structural distribution of personal data

The life of a company is punctuated by formalities carried out via the one-stop shop operated by the INPI. These procedures involve the transmission of detailed personal information concerning managers and, in some cases, partners.

This data feeds into the national business register and is transmitted to INSEE, before being redistributed by numerous public or private platforms. In practice, the personal address of the manager, his complete civil status or elements revealing his financial situation become easily accessible, in particular when the head office is located at his home or when this information appears in the articles of association.

Recent limitations to widespread advertising

Under the impetus of European Union law, certain restrictions have been introduced in order to better reconcile economic transparency and respect for privacy. Access to the register of beneficial owners is now limited to persons with a legitimate interest.

In the same spirit, the decree of 22 August 2025 allows managers to request the hiding of their personal address appearing in the acts filed with the registry office. This measure, while welcome, remains targeted. It does not produce an effect retroactive and does not allow the deletion of data already distributed or aggregated by third parties.

The right to object and its limited scope

Managers also have a right to object to the use of their data by INSEE, in particular for prospecting purposes. In principle, this right applies to private platforms reusing this information, with varying effectiveness depending on the actors.

However, a minimum data base remains accessible via public databases, which limits the real scope of this protection and requires constant vigilance.

The disclosure of accounts and the indirect protection of assets

The annual accounts, which are freely accessible, are a source of indirect information on the financial situation of managers and partners. However, the law provides mechanisms for confidentiality or simplified presentation depending on the size of the business.

These options require a voluntary approach and particular attention to the content of the documents filed. In practice, prior reprocessing of accounts may be necessary in order to avoid the publication of sensitive information not required by the texts.

The legal levers to be mobilized beforehand

The effective protection of manager information is largely based on structuring choices made as soon as the company was founded or during its evolution.

The choice of social form is decisive. The SAS offers a Statutory flexibility And a publicity less intrusive than other social forms, making it a preferred tool for managers looking for greater discretion.

The drafting of acts subject to advertising must be deliberately sober. Information relating to the personal, family or financial situation of the partners is, as a general rule, not intended to be included.

When the texts allow it, the use of extracts or certificates, rather than the filing of complete acts, makes it possible to limit the dissemination of sensitive data, in particular in the event of the transfer or transmission of shares.

Certain structuring methods, such as capital variability or financing by advances in an associate's current account, also make it possible to limit the advertising of transactions affecting equity, subject to increased vigilance when filing accounts.

Essential vigilance practices

Legal mechanisms alone are not enough. The protection of managers implies control of the information voluntarily disseminated, in particular on social networks or company communication media.

Regular monitoring of platforms for the distribution of legal data makes it possible to quickly identify excessive or inaccurate information and to exercise, where appropriate, the rights of opposition or concealment.

The protection of managers' personal and asset information is progressing, but remains largely dependent on their initiative. In an environment marked by the massive and sustainable dissemination of data, only a global approach, combining legal choices, editorial rigor and practical vigilance, makes it possible to effectively reduce exposure and the resulting risks.

‍