AMERICAN EXPRESS CARTE FRANCE: Insufficient legal basis for data processing

€1,500,000 fine - French Data Protection Authority (CNIL)

€1,500,000 Fine

AMERICAN EXPRESS CARTE FRANCE

FRANCE

Insufficient legal basis for data processing

Nov 27, 2025 Source

Content

The French DPA has imposed a fine of EUR 1,500,000 on AMERICAN EXPRESS CARTE FRANCE. The controller used excessive cookies on its website and failed to adequately inform data subjects about them.

GDPR Articles: Art. 82 loi Informatique et Libertés
Industry: Finance, Insurance and Consulting