🇪🇺 French Data Protection Authority (CNIL)
93 decisions · €1.4B total fines · FRANCE →
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2021-09-15 | Société nouvelle de l’annuaire français Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 16Art. 17Art. 30Art. 31 | €3,000 |
| 2021-07-26 | Monsanto Company Insufficient fulfilment of information obligations | 🇪🇺 French Data Protection Authority (CNIL) | Art. 14Art. 28 | €400,000 |
| 2021-07-20 | SGAM AG2R LA MONDIALE Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 13Art. 14 | €1,750,000 |
| 2021-06-14 | BRICO PRIVÉ Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 13Art. 17Art. 32 | €500,000 |
| 2021-01-27 | FRANCE DPA: Insufficient technical and organisational measures to ensure information security Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 32 | €150,000 |
| 2021-01-27 | FRANCE DPA: Insufficient technical and organisational measures to ensure information security Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 32 | €75,000 |
| 2021-01-05 | Nestor SAS Insufficient fulfilment of information obligations | 🇪🇺 French Data Protection Authority (CNIL) | Art. 12Art. 13 | €20,000 |
| 2020-12-17 | Doctor Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 32Art. 33 | €6,000 |
| 2020-12-17 | Doctor Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 32Art. 33 | €3,000 |
| 2020-12-07 | Perfomeclic Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 14Art. 21Art. 28 | €7,300 |
| 2020-11-18 | Carrefour France Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 12Art. 13Art. 15 | €2,250,000 |
| 2020-11-18 | Carrefour Banque Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5 | €800,000 |
| 2020-08-05 | Spartoo Non-compliance with general data processing principles | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 13Art. 14 | €250,000 |
| 2019-11-21 | Futura Internationale Insufficient fulfilment of data subjects rights | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 6Art. 13Art. 14 | €500,000 |
| 2019-07-25 | ACTIVE ASSURANCES (car insurer) Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 32 | €180,000 |
| 2019-06-13 | Employer UNIONTRAD COMPANY Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5Art. 12Art. 13Art. 32 | €20,000 |
| 2019-05-28 | SERGIC (Real Estate) Insufficient technical and organisational measures to ensure information security | 🇪🇺 French Data Protection Authority (CNIL) | Art. 5 | €400,000 |
| 2019-01-21 | Google LLC Insufficient legal basis for data processing | 🇪🇺 French Data Protection Authority (CNIL) | Art. 13Art. 14Art. 6Art. 5 | €50,000,000 |
← previous 76–93 of 93