# The 2022 annual report of the CNIL - Type: News - Source: CNIL - Date: 2023-05-23 - Original: https://www.cnil.fr/en/2022-annual-report-cnil#entry-5292 - Canonical: https://overview.legal/posts/6201 - Topics: AI Act Violations, Audit Logs, Fines, Telecommunications, Entry Into Force, IP Address, Education, Monitoring, Privacy by Design, Privacy by Default ## Summary The publication of its activity report enables the CNIL to report on its actions with regard to its four major missions: inform and protect the general public, accompany and advise professionals and public authorities, anticipate and innovate to build the digital of tomorrow, and finally monitor and sanction breaches of the General Data Protection Regulation (GDPR) and the French law.     Download the 2022 annual report (in French) Informing and protecting The actions carried out this year ## Full text The publication of its activity report enables the CNIL to report on its actions with regard to its four major missions: **inform and protect** the general public, **accompany and advise** professionals and public authorities, **anticipate and innovate** to build the digital of tomorrow, **and finally monitor and sanction** breaches of the General Data Protection Regulation (GDPR) and the French law. [![Rapport annuel 2022 - Couverture](/sites/default/files/thumbnails/image/rapport_annuel_2022_-_thumbnail.png "Rapport annuel 2022 - Couverture")](/sites/default/files/atoms/files/cnil%5F-%5F43e%5Frapport%5Fannuel%5F-%5F2022.pdf) [Download the 2022 annual report (in French)](/sites/default/files/atoms/files/cnil%5F-%5F43e%5Frapport%5Fannuel%5F-%5F2022.pdf "2022 Annual report (PDF, 7,8 Mo) [in French] - New window") ## Informing and protecting The actions carried out this year reflect a new dynamic of communication between the CNIL is its audiences. **Several campaigns aimed at the general public were launched** in 2022: “ [All together, caution on the Internet!](/en/education "Tous ensemble, prudence sur Internet ! Les ressources pour les 8 - 10 ans [in French] - New window")”, a set of resources to accompany children from CE2 (3rd grade) to CM2 (5th grade), as well as **two radio spots** broadcast during the holidays and which have reached more than 8 million listeners each. The website cnil.fr has recorded a new audience record, with more than 11 million visits, demonstrating the interest of individuals and professionals in the many content offered. As regards the protection of persons, **for the first time since the entry into force of the GDPR, the CNIL has dealt with more complaints than it has received,** which has led to a decrease in the stock. It received 12,193 complaints and dealt with 13,160 complaints. This result is the result of two years of efforts that have enabled the opening of a portal offering users the opportunity to follow their file, simplify and secure exchanges with the CNIL. ![Picto téléphone](/sites/default/files/thumbnails/image/picto_telephone.png) **49 139** calls answered during hotlines ![Picto web](/sites/default/files/thumbnails/image/picto_web.png) **11 millions** visits to CNIL’s websites ![Picto plaintes](/sites/default/files/thumbnails/image/picto_plaintes.png) **13 425** complaints processed ## Supporting and advising Supporting professionals in their compliance process is one of the essential tasks of the CNIL. Beyond sectoral support and, in some cases, individual, the CNIL produced new [tools](/en/les-outils-de-la-conformite "Les outils de la conformité [in French] - New window") in 2022, including guides, benchmarks, and recommendations. The year was also marked by the publication of its position on the [deployment of ‘enhanced’ cameras in public spaces](/en/deploiement-de-cameras-augmentees-dans-les-espaces-publics-la-cnil-publie-sa-position "Déploiement de caméras « augmentées » dans les espaces publics : la CNIL publie sa position [in French] - New window"). In addition, the CNIL has published a major update of its MOOC [“Atelier RGPD](/en/le-mooc-de-la-cnil-est-de-retour-dans-une-nouvelle-version-enrichie "Le MOOC de la CNIL est de retour dans une nouvelle version enrichie [in French] - New window")” (GDPR workshop), a free training course open to all. New modules make it possible to revisit the key concepts of the GDPR and a new one is aimed specifically at **local and regional authorities**. A series of webinars complemented the CNIL ‘toolbox’ on various themes: health, commercial prospecting, safety, etc. Among the highlights was also the launch **of a regional travel programme,** the ‘GDPR Days’. New meetings are planned in 2023 in several cities in the metropolis. Finally, with a first experiment carried out in 2021 and its success, the CNIL proposed a second edition of its **‘sandbox’ personal data**, which helped support 10 innovative digital projects in the field of education (EdTech). ![Picto guide](/sites/default/files/thumbnails/image/picto_guide.png) **5** guides ![Picto référentiel](/sites/default/files/thumbnails/image/picto_referentiel.png) **7** referentials ![Picto recommandation](/sites/default/files/thumbnails/image/picto_reco.png) **3** recommendations ![Picto santé](/sites/default/files/thumbnails/image/picto_sante.png) **453** Health Authorisation Files Processed ![Picto délais](/sites/default/files/thumbnails/image/picto_delais.png) **62** days of average processing time for applications for health authorisation ![Picto Edtech](/sites/default/files/thumbnails/image/picto_edtech.png) **10** projects supported via the EdTech ‘sandbox’ ## Anticipating and Innovating In order to detect and study technologies or new uses that may have significant impacts on privacy, the CNIL ensures a dedicated monitoring on which it communicated by publishing [the research program of the next few years of the LINC](/en/le-laboratoire-dinnovation-numerique-de-la-cnil-publie-son-programme-de-recherche-20222023 "Le laboratoire d’innovation numérique de la CNIL publie son programme de recherche 2022/2023 [in French] - New window") (Laboration d’innovation numérique de la CNIL). It thus contributes to the development of technological solutions that protect privacy by advising companies as upstream as possible, in a sense of privacy by design. In the field of artificial intelligence, the CNIL has paid particular attention to the development of products or services based on algorithms that are data-intensive, often personal, and whose use requires compliance with certain precautions. In this context, it published [a set of content for all audiences in 2022](/en/artificial-intelligence-ai "Artificial intelligence (AI) - New window") and announced, in early 2023, the creation of a dedicated AI service. Last year’s review also includes the organisation of the first edition of thePrivacy Research Day, which brought together European researchers on data protection and generated numerous scientific contributions. ![Picto recherche](/sites/default/files/thumbnails/image/picto_prd.png) **4 000** attendants and **119** scientific contributions ![Picto éducation au numérique](/sites/default/files/thumbnails/image/picto_air_educ.png) **1 700** participants at the air2022 event on digital education ![Picto Design patterns](/sites/default/files/thumbnails/image/picto_design_pattern.png) **22** design patterns respectful of personal data on [design.cnil.fr](https://design.cnil.fr/ "Design.cnil.fr - New window") ## Investigating and issuing sanctions In 2022, CNIL’s law enforcement activity confirmed the 2021 trends, both in terms of the number of measures adopted (21 sanctions and 147 formal notices), and by the cumulative amount of fines, which exceeds EUR 100 million. Since the GDPR came into force in 2018, the total amount of sanctions imposed exceeds half a billion euros. The organisations involved in these measures are of all sizes, including digital giants, and belong to a wide variety of sectors. The sanctions procedures have benefited from a major reform, with the creation of a [simplified procedure](/en/la-procedure-de-sanction-simplifiee "La procédure de sanction simplifiée [in French] - New window"), adapted to cases that do not present any particular legal or technical difficulty, and which will allow the CNIL to act better in the face of numerous complaints. While for the conventional procedure, the amount of fines can be up to EUR 20 million or 4% of global annual turnover, the penalty incurred under a simplified procedure is up to EUR 20 000. ![Picto contrôle](/sites/default/files/thumbnails/image/picto_controle.png) **345** controls ![Picto sanction](/sites/default/files/thumbnails/image/picto_sanctions.png) **21** sanctions ![Picto amendes](/sites/default/files/thumbnails/image/picto_amendes.png) **EUR 101 millions** fines ![Picto mise en demeure](/sites/default/files/thumbnails/image/picto_mise_en_demeure.png) **147** notices of formal notice --- Generated by overview.legal · https://overview.legal/posts/6201 · 2026-08-22