Enforcement · French Data Protection Authority (CNIL) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Société nouvelle de l’annuaire français: Insufficient fulfilment of data subjects rights

The French DPA (CNIL) has fined Société nouvelle de l'annuaire français (SNAF) EUR 3,000.

€3,000 Fine
Société nouvelle de l’annuaire français
FRANCE
Art. 16 GDPR Art. 17 GDPR Art. 30 GDPR Art. 31 GDPR
Accuracy Personal Data Supervisory Authorities
Sep 15, 2021 Source legifrance.gouv.fr

Full text

The French DPA (CNIL) has fined Société nouvelle de l'annuaire français (SNAF) EUR 3,000. SNAF operates the website annuairefrancais.fr, which lists French companies based on data published by the French Statistical Office. Between 2018 and 2019, the CNIL received sixteen complaints indicating problems in requesting the erasure and rectification of personal data. In response, the CNIL requested SNAF to comply with the requests within two months, which SNAF failed to do. As a result, the CNIL imposed the fine on SNAF, mainly for non-compliance with the rights of rectification and erasure of the data subjects and for lack of cooperation with the CNIL.

Industry: Individuals and Private Associations

How it connects

References

Related across sources

C-487/21 Österreichische Datenschutzbehörde v CRIF C-487/21 (Österreichische Datenschutzbehörde) CJEU Oct 26, 2023 Right of Access Right to Restriction Personal Data
C-129/21 Proximus NV v Gegevensbeschermingsautoriteit In a preliminary ruling requested by the Brussels Court of Appeal, the Court of Justice of the European Union addressed the interpretation of Article 12 of Directive 2002/58/EC… CJEU ·Fourth Chamber Oct 27, 2022 Telecommunications Right to be Forgotten Personal Data
W291 2298748-1 Art. 16 GDPR requires formal rectification request; vague tweet does not suffice A data subject wished to be addressed in a gender-neutral way and claimed they were misgendered by two companies (the controllers) in profile settings, tickets, and train… Federal Administrative Court Oct 31, 2025 Right to Rectification Personal Data Accuracy
C-154/21 RW v Österreichische Post AG The Court of Justice of the European Union (First Chamber), in response to a preliminary reference from the Oberster Gerichtshof (Austrian Supreme Court), interpreted Article… CJEU ·First Chamber Jan 12, 2023 Right of Access Personal Data Recipient
W254 2321912-1 Austrian court: university may refuse GDPR rectification of student's chosen name without The data subject, an Austrian citizen residing in Vienna, was enrolled in a distance-learning programme at a German university (the controller). When the data subject enrolled,… Federal Administrative Court Apr 14, 2026 Personal Data Right to Restriction Accuracy
7 A 170/24 VG Osnabrück - 7 A 170/24 A firearms authority (the controller) sent the holder of a hunting license and a firearms ownership card (the data subject) information required under Articles 13 and 14 GDPR… Administrative Court Osnabrück Aug 19, 2026 Personal Data Right to Restriction Right of Access
Related documents