Enforcement
EN Company: Non-compliance with general data processing principles
French Data Protection Authority (CNIL)
Content
The French DPA has imposed a fine on a company. The controller had collected data from applicants, even though the processing of the specific data was not necessary for the job application.
GDPR Articles: Art. 5 (1) b) GDPR
Industry: Employment