French Data Protection Act has been around since
1978. And was amended in 2018.
GDPR (which is basically all such acts from across EU in one legislation) has been around since 2016.
If in 2021 your company pretends not to understand the law, your company deserves to be sued into oblivion