🇫🇷 French Data Protection Authority (CNIL)
93 decisions · €1.4B total fines · France →
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2026-05-26 | IQVIA OPERATIONS FRANCE Non-compliance with general data processing principles | 🇫🇷 French Data Protection Authority (CNIL) | Art. 14Art. 25 | €5,000,000 |
| 2026-01-22 | FRANCE TRAVAIL Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 32 | €5,000,000 |
| 2026-01-08 | FREE MOBILE Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 32 | €27,000,000 |
| 2026-01-08 | FREE MOBILE Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 32 | €27,000,000 |
| 2026-01-08 | FREE Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 32Art. 34 | €15,000,000 |
| 2026-01-08 | FREE Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 32Art. 34 | €15,000,000 |
| 2025-12-30 | Company Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 6Art. 13Art. 32Art. 35 | €3,500,000 |
| 2025-12-22 | NEXPUBLICA FRANCE Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 32 | €1,700,000 |
| 2025-12-22 | NEXPUBLICA FRANCE Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 32 | €1,700,000 |
| 2025-12-11 | MOBIUS SOLUTIONS LTD Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 28Art. 29Art. 30 | €1,000,000 |
| 2025-12-11 | MOBIUS SOLUTIONS LTD Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 28Art. 29Art. 30 | €1,000,000 |
| 2025-11-27 | AMERICAN EXPRESS CARTE FRANCE Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €1,500,000 |
| 2025-11-27 | AMERICAN EXPRESS CARTE FRANCE Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €1,500,000 |
| 2025-11-20 | LES PUBLICATIONS CONDE NAST Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €750,000 |
| 2025-11-20 | LES PUBLICATIONS CONDE NAST Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €750,000 |
| 2025-09-18 | SAMARITAINE SAS Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 33Art. 38 | €100,000 |
| 2025-09-18 | SAMARITAINE SAS Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 33Art. 38 | €100,000 |
| 2025-09-01 | GOOGLE LLC Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €200,000,000 |
| 2025-09-01 | GOOGLE LLC Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €200,000,000 |
| 2025-09-01 | INFINITE STYLES SERVICES CO. LIMITED Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €150,000,000 |
| 2025-09-01 | INFINITE STYLES SERVICES CO. LIMITED Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €150,000,000 |
| 2025-09-01 | GOOGLE IRELAND LIMITED Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €125,000,000 |
| 2025-09-01 | GOOGLE IRELAND LIMITED Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €125,000,000 |
| 2025-05-15 | SOLOCAL MARKETING SERVICES Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 6Art. 7 | €900,000 |
| 2025-05-15 | SOLOCAL MARKETING SERVICES Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 6Art. 7 | €900,000 |
1–25 of 93 next →