🇪🇺 French Data Protection Authority (CNIL)
93 decisions · €1.4B total fines · FRANCE →
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2023-12-22 | FRANCE DPA: Insufficient cooperation with supervisory authority Insufficient cooperation with supervisory authority | 🇪🇺 French Data Protection Authority (CNIL) | — | |
| 2023-12-22 | Municipality Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | — | |
| 2023-12-22 | Company Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5 | — |
| 2023-12-22 | Candidate for parliamentary elections Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 21 | — |
| 2023-12-12 | Kourou municipality Insufficient cooperation with supervisory authority | 🇪🇺 French Data Protection Authority (CNIL) | Art. 31Art. 37 | €5,000 |
| 2023-10-12 | GROUPE CANAL + Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 7Art. 12Art. 13Art. 14 | €600,000 |
| 2023-09-18 | SAF LOGISTICS Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 9Art. 10Art. 31 | €200,000 |
| 2023-06-08 | KG COM Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 6Art. 9Art. 12 | €150,000 |
| 2023-05-10 | Clearview AI Insufficient cooperation with supervisory authority | 🇪🇺 French Data Protection Authority (CNIL) | €5,200,000 | |
| 2023-03-16 | CITYSCOOT Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 28Art. 82 | €125,000 |
| 2022-12-08 | FREE SAS Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 12Art. 15Art. 17Art. 32 | €300,000 |
| 2022-11-24 | ÉLECTRICITÉ DE FRANCE Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 7Art. 12Art. 13Art. 14 | €600,000 |
| 2022-11-10 | DISCORD INC. Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 13Art. 25Art. 32 | €800,000 |
| 2022-10-17 | Clearview Al Inc. Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 6Art. 12Art. 15Art. 17 | €20,000,000 |
| 2022-09-13 | GIE INFOGREFFE Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 32 | €250,000 |
| 2022-08-19 | ACCOR SA Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 12Art. 13Art. 15Art. 21 | €600,000 |
| 2022-07-07 | UBEEQO INTERNATIONAL Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 12 | €175,000 |
| 2022-06-23 | TotalEnergies Electricité et Gaz France Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 14Art. 15Art. 21 | €1,000,000 |
| 2022-04-15 | DEDALUS BIOLOGIE Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 28Art. 29Art. 32 | €1,500,000 |
| 2021-12-31 | Google LLC Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €90,000,000 |
| 2021-12-31 | Google Ireland Ltd. Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €60,000,000 |
| 2021-12-31 | Facebook Ireland Ltd. Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 82 | €60,000,000 |
| 2021-12-28 | FREE MOBILE Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 12Art. 15Art. 21Art. 25 | €300,000 |
| 2021-12-28 | SLIMPAY Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 28Art. 32Art. 34 | €180,000 |
| 2021-11-04 | Régie autonome des transports parisiens Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 32 | €400,000 |