Every pastor who takes notes after a meeting has asked this question, often without finding a clear answer. The law distinguishes two things that are almost always confused: what you are allowed to say, and what you are allowed to write down and keep.
This guide covers French law: the French Criminal Code, the GDPR as applied in France and the recommendations of the CNIL (the French data protection authority). Legal terms are given in French in parentheses the first time they appear.
The gist in 20 seconds: confidentiality protects what you say; the GDPR governs what you write. As soon as a confidence becomes a recorded note, it becomes personal data — often sensitive data — which the person concerned has the right to come and read. The rule that follows fits in one sentence: write to support people, never to archive or to judge.
French law does not enshrine a "pastoral secret" (secret pastoral) by that name. What does exist is professional secrecy (secret professionnel) under Article 226-13 of the French Criminal Code, which case law has long recognized as covering ministers of religion for confidences received in the course of their ministry.
But this secrecy governs one specific thing: disclosure to a third party. It says nothing about writing things down, storing them, sharing them internally or keeping them for ten years. That ground belongs to the GDPR, and it applies to your notebook just as much as to your software.
Professional secrecy: I don't tell. GDPR: I write only what is necessary, I protect it, I keep it for a limited time, and I accept that the person may read it.
The right of access (Article 15 of the GDPR) allows anyone to request a copy of the data about them — your meeting notes included. You then have one month to respond.
This obligation, often experienced as a burden, is in fact the best writing guide there is:
If you would feel uncomfortable reading this sentence aloud, in front of the person, it has no place in the note. Not because it is forbidden — because it is a sign you have written a judgment, an assumption or a detail you don't need.
A good pastoral note is not a report; it is a point to pick up from. Four lines are almost always enough:
"Meeting with Mr. D. He is clearly depressed since his wife left him for a colleague, he drinks. He told me very serious things about his past. Not reliable for the welcome team."
Medical diagnosis, information about third parties, details of a confidence, a value judgment: everything you shouldn't write, in four lines.
"Sept 12 — Home visit. Going through a difficult time, family-wise and personally. Would like support; agreed to be referred to professional help. Next step: call back in 2 weeks."
The pastor has everything needed to pick up the thread, and the person could read it without being hurt.
This needs to be said clearly, because it is the point where you cannot improvise: confidentiality is not absolute. French law permits disclosure in certain situations, and penalizes failing to act in others — in particular when a minor or vulnerable person is suffering deprivation or abuse, or when a person is in imminent danger.
These situations are not decided on the basis of a blog post. If you are faced with a disclosure of this kind, contact your church federation, a lawyer and, where appropriate, 119 (Allô Enfance en danger, the French child protection hotline) or the public prosecutor (procureur de la République). What is at stake goes far beyond the question of the note.
In most tools — a shared spreadsheet, association software, a notebook left in the office — confidentiality rests on an agreement between well-meaning people. That holds as long as nothing happens: a change of team, a computer left open, a poorly targeted export, and the confidence gets around.
Confidentiality that holds must be guaranteed by the architecture. At Ministeo, a note marked confidential is:
For as long as the pastoral care lasts. A reasonable practice, in line with the CNIL's three-year recommendation for association members' data: ordinary notes kept up to one year after the person leaves, confidential notes deleted as soon as they leave. For the full framework, see our guide GDPR and your church membership file.
Does pastoral confidentiality exist in French law?
French law does not enshrine a "pastoral secret" under that name, but case law has long recognized that ministers of religion are bound by professional secrecy within the meaning of Article 226-13 of the French Criminal Code for confidences received in the course of their ministry. Be careful, though: this secrecy governs disclosure to third parties. It says nothing about what you write — the GDPR takes over as soon as a note is recorded somewhere.
What should you never write in a meeting note?
Four kinds of information: medical diagnoses and details, information about named third parties who have not consented, moral judgments about the person, and anything relating to legal proceedings. Add to that assumptions presented as facts: one day they will be read back as if they were.
Can a member ask to read the notes about them?
Yes. The right of access under Article 15 of the GDPR covers all personal data about them, notes included. It is the best writing test there is: if a sentence would embarrass you in front of the person, it has no place in the note.
How do you technically protect a confidential note?
Three cumulative safeguards: individual encryption of the note before it is stored, visibility limited to its author alone — including with respect to administrators — and exclusion from any automated processing. At Ministeo, a note marked confidential is encrypted with AES-256-GCM, visible to its author only, and never sent to the AI model.
Does pastoral confidentiality have limits?
Yes, and they are important. French law provides for situations where disclosure is permitted, and where failing to act can even be penalized: notably deprivation or abuse inflicted on a minor or a vulnerable person, and situations where a person is in imminent danger. These are serious matters to be handled case by case: contact your church federation and, if necessary, a lawyer.
How long should a meeting note be kept?
For as long as the pastoral care lasts, no longer. A reasonable practice: ordinary notes up to one year after the person leaves, confidential notes deleted as soon as they leave. Keeping ten years of notes on someone who has left the church has no justification and creates needless risk.
This article is an educational summary written by the Ministeo team based on public texts (the GDPR, CNIL recommendations, French law on associations). It does not constitute legal advice: for a specific situation, contact your church federation, a lawyer or your association's data protection officer. Spotted an inaccuracy? Write to us: contact@ministeo.com.
Individual AES-256-GCM encryption, visible only to their author, never sent to the AI. Try it free up to 50 members.
Get started for free