| 01/09/2024 | WEBSITE PUBLISHER - REVERSE LOOK-UP DIRECTORY (simplified procedure) | Failure to cooperate with the CNIL
Failure to respect the right of access
Failure to respect the right to object | Fine of €1,500 |
| 01/15/2024 | LAWYER (simplified procedure) | Failure to cooperate with the CNIL
Failure to respect the right of erasure | Fine of €5,000 |
| 01/22/2024 | LAWYER (simplified procedure) | Failure to cooperate with the CNIL | Fine of €500 |
| 01/24/2024 | PHARMACEUTICAL WHOLESALE BUSINESS (simplified procedure) | Lack of data security
Failure to cooperate with the CNIL
Register of processing activities
Obligation for processors to offer sufficient guarantees, recruited after authorization by the controller | Fine of €20,000 |
| 01/25/2024 | POLITICAL ASSOCIATION (simplified procedure) | Information of individuals and transparency (political canvassing) | Fine of €20,000 |
| 01/31/2024 | PUBLISHER OF A WEBSITE OFFERING INDIVIDUALS THE OPPORTUNITY TO PUBLISH OR CONSULT REAL ESTATE ADS AND OTHER SERVICES | Lack of data security
Framework for relations between the controller and the processor
Information of individuals and transparency
Data retention periods | Fine of €100,000 |
| 01/31/2024 | INDIVIDUAL (simplified procedure) | Failure to cooperate with the CNIL | Fine of €500 |
| 01/31/2024 | DENTAL SURGEON (simplified procedure) | Lack of data security
Failure to respect the right of access (health data) | Fine of €5,000 |
| 01/31/2024 | WEBSITE PUBLISHER - NEWS IN THE FIELD OF NEW TECHNOLOGIES (simplified procedure) | Lack of data security | Fine of €20,000 |
| 01/31/2024 | COMPANY ENGAGED IN THE MARKETING AND MANAGEMENT OF LOYALTY PROGRAMS AND CARDS (simplified procedure | Obligation to process data lawfully
(commercial prospecting by phone) | Fine of €310,000 |
| 01/31/2024 | BUSINESS SUPPORT COMPANY (simplified procedure) | Lack of data security | Fine of €10,000 |
| 02/29/2024 | SCIENTIFIC RESEARCH AND DEVELOPMENT COMPANY (simplified procedure) | Obligation to process data lawfully | Fine of €10,000 |
| 02/29/2024 | DENTAL SURGEON (simplified procedure) | Failure to cooperate with the CNIL
Failure to respect the right of access (health data) | Fine of €4,000 |
| 04/04/2024 | RETAIL SALE OF TELECOMMUNICATIONS EQUIPMENT | Consent of individuals (commercial prospecting by phone - Article L. 34-5 of the French Postal and Electronic Communications Code)
Lack of legal basis
Information of individuals and transparency (art. 14) | Fine of €525,000 |
| 04/04/2024 | COMPANY ENGAGED IN COMMERCIAL PROSPECTING BY E-MAIL ON BEHALF OF ADVERTISERS | No response to injunction | Liquidation of the penalty payment of €25,000 |
| 04/25/2024 | COMPANY OPERATING SHOE AND SPORTSWEAR STORES (simplified procedure) | Information of individuals and consent (cookies) | Fine of €15,000 |
| 04/25/2024 | ASSOCIATION PARTICIPATING IN THE ACTIVITIES OF POLITICAL ORGANIZATIONS (simplified procedure) | Lack of legal basis | Fine of €16,000 euros and injunction |
| 04/25/2024 | FRENCH LITERARY REVIEW (simplified procedure) | Late compliance for erasure requests (injunction procedure) | Liquidation of the penalty payment of €3,000 |
| 05/23/2024 | NATIONAL PUBLIC ESTABLISHMENT (TEACHING) (simplified procedure) | Data minimization
Information of individuals and consent | Fine of €6,000 |
| 05/23/2024 | COMPANY ENGAGED IN OPTICAL RETAILING (simplified procedure) | Late response to compliance order (injunction procedure) | Liquidation of the penalty payment of €4,000 |
| 05/23/2024 | COMPANY MANAGING A CALL PLATFORM FOR PROFESSIONAL SECRETARIAT (simplified procedure) | Data minimization
Information of individuals and consent
Lack of data security | Fine of €15,000 |
| 05/23/2024 | COMPANY MANAGING A CALL PLATFORM FOR PROFESSIONAL SECRETARIAT (simplified procedure) | Data minimization
Information of individuals and consent
Lack of data security | Fine of €10,000 |
| 06/10/2024 | BAKERY (simplified procedure) | Information of individuals
Obligation to process data lawfully (CCTV)
Data minimization (CCTV) | Fine of €5,000 |
| 06/10/2024 | COMPANY DISTRIBUTING JOURNALISTIC CONTENT (simplified procedure) | Information of individuals and consent (cookies) | Fine of €3,000 and injunction |
| 06/10/2024 | GENERAL PRACTITIONER (simplified procedure) | Failure to respect the right of access (medical records)
Lack of cooperation with the CNIL | Fine of €4,000 and injunction |
| 06/27/2024 | COMPANY SPECIALIZING IN PROPERTY MANAGEMENT AND COMMERCIAL OPERATIONS COMPANY BROADCASTING JOURNALISTIC CONTENT (procédure simplifiée) | Information of individuals and consent (cookies) | Fine of €12,000 |
| 07/09/2024 | FRENCH MINISTRY | Data retention
Obligation to process data lawfully | Reprimand and injunction |
| 07/22/2024 | MUNICIPALITY | Failure to respond to injunction and non-compliance | Liquidation of the penalty payment of €6,900 |
| 07/25/2024 | PRIVATE HIGHER EDUCATION ESTABLISHMENT (simplified procedure) | Data minimization
Data retention
Lack of data security | Fine of €20,000 |
| 08/08/2024 | ENERGY BROKERAGE COMPANY (simplified procedure) | Data minimization
Information of individuals and transparency (commercial prospection)
Recording of processing activities | Fine of €20,000 and injunction |
| 08/20/2024 | WEBSITE HOST (simplified procedure) | Failure to respect the right to object
Lack of cooperation with the CNIL | Fine of €8,000 |
| 08/28/2024 | COMPANY SPECIALIZING IN STATISTICAL STUDIES OF HEALTH DATA | Authorization from the CNIL unrequested (health data wahehouse) | Fine of €800,000 |
| 08/28/2024 | COMPANY SPECIALIZING IN THE MANAGEMENT OF HEALTH DATA FLOWS | Authorization from the CNIL unrequested (health data wahehouse) | Fine of €200,000 |
| 08/29/2024 | WEB PUBLISHER IN THE TRANSPORT SECTOR | Obligation to perform a data protection impact assessment
Information of individuals and consent
Obligation to process data lawfully | Fine of €300,000 |
| 09/05/2024 | CLOTHING RETAILING COMPANY (simplified procedure) | Obligation to process data lawfully
Data minimization
Information of individuals and transparency (CCTV)
Lack of cooperation with the CNIL | Fine of €15,000 |
| 09/05/2024 | FENCE MANUFACTURING AND INSTALLATION COMPANY (simplified procedure) | Failure to respect the right to access
Lack of cooperation with the CNIL | Fine of €10,000 |
| 09/05/2024 | PUBLICATION AND SALE OF MANAGEMENT SOFTWARES FOR PHYSICIANS | Failure to apply for a CNIL authorization (health data warehouse)
Obligation to process data lawfully | Fine of €800,000 |
| 09/12/2024 | COMPANY OPERATING A CASINO AND A HOTEL (simplified procedure) | Information of individuals (CCTV)
Failure to respect the right of access | Fine of €12,000 |
| 09/13/2024 | MUNICIPALITY (simplified procedure) | Unlawful processing of data
Data retention period
Record of processing activities
Obligation to appoint a Privacy Officer
Lack of cooperation with the CNIL | Fine of €20,000 |
| 09/19/2024 | ARMOURY SELLING ONLINE AND IN-STORE (simplified procedure) | Data retention period
Information of individuals and transparency
Failure to respect the right of erasure
Lack of data security
Obligation to document a data breach | Fine of €20,000 |
| 09/26/2024 | COMPANY OFFERING IT SYSTEMS AND SOFTWARE CONSULTANCY SERVICES, SOFTWARE PUBLISHING AND PRODUCTION | Lack of cooperation with the CNIL
Failure to respect the right of erasure | Fine of €15,000 and injunction |
| 09/26/2024 | TRAINING ORGANISATION FOR HEALTHCARE PROFESSIONALS | Information of individuals and consent (cookies)
Failure to respect the right of erasure
Framework for relations between the controller and the processor
Lack of data security | Fine of €15,000 and injunction |
| 09/26/2024 | COMPANY OFFERING REMOTE DIVINATION SERVICES | Consent of individuals (online commercial prospection)
Consent of individuals (special data category)
Data retention period
Minimisation of data | Fine of €250,000 |
| 09/26/2024 | COMPANY ENGAGED IN THE DEVELOPMENT AND PROVISION OF IT AND DIGITAL SERVICES | Consent of individuals (online commercial prospection)
Consent of individuals (special data category)
Data retention period | Fine of €150,000 |
| 09/26/2024 | MARKETING COMPANY (simplified procedure) | Failure to respond to the injunction and non-compliance (injunction procedure) | Liquidation of penalty of €3,000 |
| 09/30/2024 | ASSOCIATION FOR THE CREATION OF A PSYCHIATRIC HEALTH NETWORK (simplified procedure) | Lack of cooperation with the CNIL
Failure to respect the right of access | Fine of €3,000 |
| 10/10/2024 | COMPANY MARKETING CRYPTOCURRENCY WALLETS | Lack of data security
Data retention period | Fine of €750,000 |
| 10/11/2024 | ORTHOPHONIST (simplified procedure) | Failure to respond to the injunction and non-compliance | Liquidation of penalty of €4,000 |
| 10/17/2024 | MINISTRY | Obligation to process accurate data
Information of individuals
Failure to respect the right of access
Failure to respect the right of rectification
Failure to respect the right of erasure | Reprimand and injunction |
| 10/17/2024 | MINISTRY | Obligation to process accurate data
Information of people
Failure to respect the right of access
Failure to respect the right of rectification
Failure to respect the right of erasure | Reprimand and injunction |
| 10/17/2024 | COMPANY ENGAGED IN THE PROVISION OF SERVICES (MANAGEMENT OF TELEPHONE CALLS) (simplified procedure) | Information of individuals (CCTV and phone recording)
Failure to respect the right to object
Lack of data security | Fine of €20,000 |
| 10/17/2024 | DENTIST SURGEON (simplified procedure) | Failure to respect the right of access (medical file)
Lack of cooperation with the CNIL | Fine of €3,000 and injunction |
| 10/23/2024 | ASSOCIATION PARTICIPATING IN THE ACTIVITIES OF POLITICAL ORGANISATIONS (simplified procedure) | Failure to respond to an injunction and non-compliance (injunction procedure) | Liquidation of penalty of €4,000 |
| 11/14/2024 | TELECOMMUNICATIONS OPERATOR | Information of individuals (cookies)
Commercial prospecting (article L. 34-5 CPCE) | Fine of €50 million and injunction |
| 11/26/2024 | IT FACILITIES MANAGEMENT COMPANY (simplified procedure) | Failure to cooperate with the CNIL | Fine of €15,000 |
| 11/26/2024 | ASSOCIATION PROVIDING SOCIAL SERVICES WITHOUT ACCOMMODATION AND MANAGING MEDICAL, SOCIAL AND HEALTH ESTABLISHMENTS (simplified procedure) | Failure to respect the right of access
Failure to cooperate with the CNIL | Fine of €10,000 |
| 12/05/2024 | COMPANY OFFERING PRIVATE SECURITY SERVICES (simplified procedure) | Minimisation of data
Information of individuals and transparency
Register of processing activities | Fine of €20,000 and injunction |
| 12/05/2024 | COMPANY SPECIALISING IN THE DEVELOPMENT AND ORGANISATION OF ADVERTISING CAMPAIGNS (simplified procedure) | Commercial prospecting (article L. 34-5 CPCE)
Data retention period
Information of individuals and transparency | Fine of €20,000 |
| 12/05/2024 | COMPANY SELLING COSMETIC PRODUCTS (simplified procedure) | Obligation to process data lawfully (CCTV)
Limitation of purpose (CCTV)
Minimisation of data (CCTV)
Information of individuals | Fine of €3,000 |
| 12/05/2024 | CLINIC (simplified procedure) | Failure to cooperate with the CNIL | Fine of €15,000 |
| 12/05/2024 | COMPANY DEVELOPING AND MARKETING A BROWSER EXTENSION (simplified procedure) | Lack of legal basis
Data retention period
Information of individuals and transparency
Failure to respect the right of access | Fine of €240,000 and injunction |
| 12/12/2024 | COMMUNICATION AND AUDIOVISUAL PRODUCTION AGENCY (simplified procedure) | Transparency and information (exercise of rights)
Failure to respect the right of access | Fine of €6,000 |
| 12/12/2024 | RETAIL SALES COMPANY (simplified procedure) | Failure to respect the right of access | Fine of €18,000 |
| 12/12/2024 | COMPANY CARRYING ON THE BUSINESS OF COMPARING DRIVING SCHOOLS (simplified procedure) | Transparency and information (exercise of rights)
Failure to respect the right of access | Fine of €10,000 |
| 12/12/2024 | TWO COMPANIES OPERATING AS PRESS AGENCIES (simplified procedure) | Consent of individuals (cookies) | Fine of €5,000 and Fine of €5,000 |
| 12/12/2024 | CLOTHING RETAIL COMPANY (simplified procedure) | Consent of individuals (cookies) | Fine of €5,000 |
| 12/12/2024 | CLOTHING RETAIL COMPANY (simplified procedure) | Consent of individuals (cookies) | Fine of €3,000 |
| 12/12/2024 | CLOTHING RETAIL COMPANY (simplified procedure) | Consent of individuals (cookies) | Fine of €20,000 |
| 12/12/2024 | CLOTHING RETAIL COMPANY (simplified procedure) | Consent of individuals (cookies) | Fine of €10,000 |
| 12/12/2024 | SOFTWARE DEVELOPMENT TOOLS AND LANGUAGES COMPANY (simplified procedure) | Consent of individuals (cookies) | Fine of €20,000 and injunction |
| 12/12/2024 | COMPANY OPERATING INTERNET PORTALS (simplified procedure) | Consent of individuals (cookies) | Fine of €20,000 and injunction |
| 12/19/2024 | PUBLIC ADMINISTRATIVE ESTABLISHMENT (simplified procedure) | Failure to respect the right of access
Failure to cooperate with the CNIL | Reprimand |
| 12/19/2024 | CALL CENTER (simplified procedure) | Obligation to process data lawfully and with transparency
Lack of data security
Failure to cooperate with the CNIL | Fine of €20,000 |
| 12/19/2024 | COMPANY PROVIDING PRIVATE SECURITY, CLOSE PROTECTION, HOTESSARIAT AND LOGISTICS MANAGEMENT SERVICES (simplified procedure) | Failure to cooperate with the CNIL | Fine of €8,000 |
| 12/19/2024 | STOMATOLOGIST (simplified procedure) | Failure to respect the right of access (medical records)
Failure to cooperate with the CNIL | Fine of €5,000 |
| 12/19/2024 | COMPANY PUBLISHING A DEMATERIALISED GAMES WEBSITE (simplified procedure) | Failure to respect the right of access | Fine of €15,000 |
| 12/19/2024 | COMPANY RUNNING A GYM (simplified procedure) | Failure to cooperate with the CNIL | Fine of €3,000 |
| 12/19/2024 | COMPANY SPECIALISING IN INTERNET PORTALS (simplified procedure) | Failure to respect the right of opposition
Failure to cooperate with the CNIL | Fine of €5,000 |
| 12/19/2024 | IT SYSTEMS AND SOFTWARE CONSULTANCY COMPANY (simplified procedure) | Failure to respect the right of access | Fine of €8,000 |
| 12/19/2024 | COMPANY CARRYING ON ESTATE AGENCY BUSINESS | Minimisation of data (CCTV)
Obligation to process data lawfully (CCTV)
Information of individuals
Lack of data security
Obligation to perform a data protection impact assessment | Fine of €40,000 |
| 12/19/2024 | ACCESS TO HEALTHCARE (simplified procedure) | Failure to cooperate with the CNIL | Fine of €5,000 |
| 12/19/2024 | REGIONAL SUPPORT GROUP FOR THE DEVELOPMENT OF E-HEALTH (simplified procedure) | Obligations relating to data processing in health sector
Framework for relations between the controller and the processor | Fine of €20,000 |
| 12/19/2024 | GENERAL PRACTITIONER (simplified procedure) | No response to injunction | Liquidation of the penalty payment of €2,000 |
| 12/26/2024 | COMPANY OPERATING SUPERMARKETS (simplified procedure) | Minimisation of data
Register of processing activities Obligation to carry out a data protection impact assessment | Fine of €18,000 |
| 12/31/2024 | AMBULANCE TRANSPORT COMPANY (simplified procedure) | Failure to cooperate with the CNIL | Fine of €10,000 |
| 12/31/2024 | INDIVIDUALS (simplified procedure) | Failure to cooperate with the CNIL | Fine of €5,000 |
| 12/31/2024 | COMPANY MANAGING A CONVERSATIONAL ROBOT USING ARTIFICIAL INTELLIGENCE (simplified procedure) | Failure to cooperate with the CNIL | Fine of €5,000 |
