# FREE MOBILE: Insufficient fulfilment of data subjects rights

- Type: Enforcement
- Source: French Data Protection Authority (CNIL)
- Date: 2021-12-28
- Original: https://www.enforcementtracker.com/ETid-972
- Canonical: https://overview.legal/posts/47087
- Topics: Right to Object, Data Subject Rights Exercise Modalities and Procedures, Telecommunications, Processing Agreement, Personal Data, Security, Supervisory Authorities, Privacy by Design & Default, Law Enforcement

## Summary

The French DPA (CNIL) has imposed a fine of EUR 300,000 on FREEE MOBILE. The CNIL had received numerous complaints regarding the company's failure to comply with data subjects' rights. During its investigation, the CNIL found that the company had failed to respond to data subjects' requests in a timely manner. In addition, the company failed to comply with the data subjects' right to object, as it continued to send advertisements to the data subjects despite them having exercised their right to

## Full text

The French DPA (CNIL) has imposed a fine of EUR 300,000 on FREEE MOBILE. The CNIL had received numerous complaints regarding the company's failure to comply with data subjects' rights. During its investigation, the CNIL found that the company had failed to respond to data subjects' requests in a timely manner. In addition, the company failed to comply with the data subjects' right to object, as it continued to send advertisements to the data subjects despite them having exercised their right to object. In addition, the CNIL found that the company had failed to implement adequate technical and organizational measures to ensure a level of security appropriate to the risk to the data subjects. For example, it had sent users passwords by email in clear text.

GDPR Articles: Art. 12 GDPR, Art. 15 GDPR, Art. 21 GDPR, Art. 25 GDPR, Art. 32 GDPR
Industry: Media, Telecoms and Broadcasting

---
Generated by overview.legal · https://overview.legal/posts/47087 · 2026-08-22