# Company: Non-compliance with general data processing principles

- Type: Enforcement
- Source: French Data Protection Authority (CNIL)
- Date: 2024-06-05
- Original: https://www.enforcementtracker.com/ETid-2345
- Canonical: https://overview.legal/posts/48460
- Topics: IP Address, Controllers, Processing Agreement, Processing, Data Controller, Supervisory Authorities

## Summary

The French DPA has imposed a fine on a company operating a call center. The controller had systematically recorded all incoming and outgoing calls for training, evaluation and dispute purposes. The CNIL found that such comprehensive recording violated the principle of data minimization and that random and selective recording for training purposes was sufficient.

## Full text

The French DPA has imposed a fine on a company operating a call center. The controller had systematically recorded all incoming and outgoing calls for training, evaluation and dispute purposes. The CNIL found that such comprehensive recording violated the principle of data minimization and that random and selective recording for training purposes was sufficient.

GDPR Articles: Art. 5 (1) c) GDPR
Industry: Not assigned

---
Generated by overview.legal · https://overview.legal/posts/48460 · 2026-08-22