Enforcement · French Data Protection Authority (CNIL) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

FREE SAS: Insufficient fulfilment of data subjects rights

€300,000 Fine
FREE SAS
FRANCE
Art. 12 GDPR Art. 15 GDPR Art. 17 GDPR Art. 32 GDPR Art. 33 GDPR
Data Breaches Encryption Personal Data Security Telecommunications Processing Agreement Supervisory Authorities Law Enforcement
Dec 8, 2022 Source

How it connects

Related across sources

News De Deense beschermingsautoriteit (SA) heeft verklaard dat het gebruik van Google Analytics onrechtmatig is zonder aanvullende maatregelen. Datatilsynet Guidance EDPB Annual Report 2021 EDPB Guidance EDPB Annual Report 2022 EDPB Guidance Guidelines 9/2022 on personal data breach notification under GDPR EDPB Guidance Guidelines 07/2022 on certification as a tool for transfers EDPB News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet

Full text

The French DPA has imposed a fine of EUR 300,000 on FREE SAS. The DPA had received several complaints from individuals experiencing difficulties in exercising their rights to access and delete their personal data at FREE. During its investigation, the DPA found that the company did not process the requests for access and deletion of personal data in a timely manner. The DPA also found that the company failed to ensure the security of personal data. For example, the company allowed users to use insecure passwords and user passwords were stored unencrypted in the company's databases. Finally, the DPA found that the company had not adequately documented a data breach.

Industry: Media, Telecoms and Broadcasting

Original document at the source www.cnil.fr

Similar Content