# Company: Non-compliance with general data processing principles

- Type: Enforcement
- Source: French Data Protection Authority (CNIL)
- Date: 2024-06-05
- Original: https://www.enforcementtracker.com/ETid-2344
- Canonical: https://overview.legal/posts/48459
- Topics: Personal Data, IP Address, Direct Marketing, Consent, Processing Agreement, Processing, Supervisory Authorities

## Summary

The French DPA has imposed a fine on a company. The company published a promotional video on its website and social networks in which images of patient files of one of its customers were shown. The images, which made personal data such as the name of the data subject visible, were used without their consent.

## Full text

The French DPA has imposed a fine on a company. The company published a promotional video on its website and social networks in which images of patient files of one of its customers were shown. The images, which made personal data such as the name of the data subject visible, were used without their consent.

GDPR Articles: Art. 5 (1) a) GDPR
Industry: Not assigned

---
Generated by overview.legal · https://overview.legal/posts/48459 · 2026-08-22