This is based on the law applicable before the GDPR. That French law dates from 2004 and implements EU law from 1995.