Enforcement · French Data Protection Authority (CNIL) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Company: Non-compliance with general data processing principles
How it connects
Related across sources
News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Guidance Guidelines 04/2021 on Codes of Conduct as tools for transfers Literature General Data Protection Regulation (GDPR) ambiguity, national diversity and data protection officer certification: Implementing Art. 39(1) GDPR in France, Italy, Luxembourg and Spain Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 Case Law Google LLC v CNIL Guidance Guidelines 1/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation
Full text
The French DPA has imposed a fine on a company. The company published a promotional video on its website and social networks in which images of patient files of one of its customers were shown. The images, which made personal data such as the name of the data subject visible, were used without their consent.
Industry: Not assigned
Original document at the source www.cnil.fr