CNIL (France) - SAN-2025-014

}}}} The DPA fined a processor €1 million for failing to delete the personal data of users, processing it for purposes contrary to contract stipulations and for failing to keep a record of its processing activities.The DPA fined a processor €1,000,000 for failing to delete the personal data of users, processing the data for purposes contrary to contract stipulations, and for failing to keep a record of its processing activities. == English Summary ==== English Summary == Finally, the DPA found the processor in breach of [[Article 30 GDPR]] by failing to keep a record of the processing activities it carried out and for failing to provide the name and contact details of the data protection officer of the controller. Finally, the DPA found the processor in breach of [[Article 30 GDPR]] by failing to keep a record of the processing activities it carried out and for failing to provide the name and contact details of the data protection officer of the controller. Therefore, the DPA fined the