Enforcement · French Data Protection Authority (CNIL) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

FREE MOBILE: Insufficient fulfilment of data subjects rights

€300,000 Fine
FREE MOBILE
FRANCE
Art. 12 GDPR Art. 15 GDPR Art. 21 GDPR Art. 25 GDPR Art. 32 GDPR
Right to Object Data Subject Rights Exercise Modalities and Procedures Telecommunications Processing Agreement Personal Data Security Supervisory Authorities Privacy by Design & Default
Dec 28, 2021 Source

How it connects

Related across sources

Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR EDPB Guidance Guidelines 07/2022 on certification as a tool for transfers EDPB Guidance EDPB Annual Report 2021 EDPB News DeFine is a calculator for GDPR fines based on method of the EDPB Kromann Reumert Case Law GC and Others v CNIL CJEU Guidance Guidelines 2/2018 on derogations of Article 49 under Regulation 2016/679 EDPB

Full text

The French DPA (CNIL) has imposed a fine of EUR 300,000 on FREEE MOBILE. The CNIL had received numerous complaints regarding the company's failure to comply with data subjects' rights. During its investigation, the CNIL found that the company had failed to respond to data subjects' requests in a timely manner. In addition, the company failed to comply with the data subjects' right to object, as it continued to send advertisements to the data subjects despite them having exercised their right to object. In addition, the CNIL found that the company had failed to implement adequate technical and organizational measures to ensure a level of security appropriate to the risk to the data subjects. For example, it had sent users passwords by email in clear text.

Industry: Media, Telecoms and Broadcasting

Original document at the source www.cnil.fr

Similar Content