Enforcement · French Data Protection Authority (CNIL) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
TotalEnergies Electricité et Gaz France: Insufficient fulfilment of data subjects rights
How it connects
Related across sources
News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Guidance EDPB Annual Report 2021 Guidance Guidelines 04/2021 on Codes of Conduct as tools for transfers Literature General Data Protection Regulation (GDPR) ambiguity, national diversity and data protection officer certification: Implementing Art. 39(1) GDPR in France, Italy, Luxembourg and Spain Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 Guidance EDPB Annual Report 2019
Full text
The French DPA has imposed a fine of EUR 1,000,000 on TotalEnergies Electricité et Gaz France. As part of its investigation, the DPA found that the controller had violated its information obligations under Art. 14 GDPR by failing to provide data subjects with sufficient information during telephone contact about the processing of their personal data for advertising purposes. In addition, the company did not comply with the data subjects' requests to object to the processing of their personal data for advertising purposes. Furthermore, the controller did not respond to requests from data subjects in a timely manner, contrary to its obligation under Art. 12 GDPR.
Industry: Transportation and Energy
Original document at the source www.cnil.fr