Enforcement
EN Company: Non-compliance with general data processing principles
French Data Protection Authority (CNIL)
Content
The French DPA has imposed a fine on a company operating a call center. The controller had systematically recorded all incoming and outgoing calls for training, evaluation and dispute purposes. The CNIL found that such comprehensive recording violated the principle of data minimization and that random and selective recording for training purposes was sufficient.
GDPR Articles: Art. 5 (1) c) GDPR
Industry: Not assigned