Skip to content
Content type · 103 documents in this view · 3,811 in total

Enforcement

Regulatory actions, fines, warnings, and enforcement decisions

Country: France (3) Clear filter
101–103 of 103 sort newestlargest fineoldest
€20,000 Employer UNIONTRAD COMPANY: Insufficient legal basis for data processing Between 2013 and 2017, the CNIL received complaints from several employees of the company who were filmed at their workstation. On two occasions, it alerted the company to the… Art. 5, 12, 13 +1 Processing Supervisory Authorities Employees Jun 13, 2019
€400,000 SERGIC (Real Estate): Insufficient technical and organisational measures to ensure information security The CNIL based the penalty on two grounds: Lack of basic security measures and excessive data storage. As to the first, sensitive user documents uploaded by rental candidates… Art. 5 Security Identification Access Controls May 28, 2019
€50M Google LLC: Insufficient legal basis for data processing The fine was imposed on the basis of complaints from the Austrian organisation 'None Of Your Business' and the French NGO 'La Quadrature du Net'. The complaints were filed on 25th… Art. 5, 6, 13 +1 Transparency Fairness & Transparency Consent Jan 21, 2019