News

🇫🇷 Insurance and excessive retention periods

Data Subject Rights, Retention & Minimisation | 29/03/2025

📢 €1.75 Million Fine for a French Insurance Company Source: SAN 2021-010 👉 The CNIL has sanctioned an insurance company for two serious breaches of ...

Read more

📢 AI and copyright

Artificial Intelligence (AI) | 28/03/2025

🎨✨ Can ChatGPT Really Imitate Studio Ghibli to Create Images? Between Creative Fun and Legal Risk... 🤖🎬 Since March 25, ChatGPT's image generator usi...

Read more

❌ Insufficient association of a dpo

DPO | 28/03/2025

🔒📉 Luxembourg: €15,000 Fine for Poor DPO Involvement 📅 Decision 20FR/2021 of June 11, 2021The Luxembourg Data Protection Authority sanctioned a compa...

Read more

❌ Failure of a DPO

DPO | 28/03/2025

⚠️When a DPO Oversteps Their Role 🔍 Context:Following the receipt of unsolicited newsletters from a recruitment agency, a data subject submitted an a...

Read more

🚫 Spain Failure to Appoint a DPO

DPO | 28/03/2025

When Glovo Fails to Meet Its Obligations 📦🇪🇸📌 AEPD PS/00417/2019 A Spanish citizen filed a complaint against Glovo (GlovoApp23, SL), a home delivery ...

Read more

❌ Data transfer outside the EU!

Data Transfers | 28/03/2025

📢 GDPR & Public Procurement: Transferring Data Outside the EU Can Invalidate a Contract Award! 🌍❌ 🗓️ On December 21, 2023, the Belgian Council of Sta...

Read more

🚨 SS2I Inappropriate legal basis 🚨

Legal basis | 28/03/2025

📍 Greece | HDPA | €150,000 Fine 🔍 Following a complaint, the Hellenic Data Protection Authority (HDPA) investigated an IT services company (SS2I) reg...

Read more

🇪🇸 Data security and USB key

Confidentiality & Security | 28/03/2025

Source : PS-00117-2024 📢 A famous insurance company made a major mistake... 📌 Facts • 📅 Security Incident: On May 11, 2023, the ...

Read more

🇫🇷 Data security and real estate

Retention & Minimisation, Confidentiality & Security | 28/03/2025

🏠 Real Estate & Personal Data: €400,000 Fine📅 CNIL Decision – May 28, 2019 (Ref: 2019-995)🔍 A security breach + excessive data retention = double GDPR...

Read more

🇫🇷 Non-compliant video surveillance

Biometrics & Video Surveillance, Retention & Minimisation | 28/03/2025

🚨 Workplace Surveillance: HR Practices Too Intrusive Sanctioned📦 From Scanners to Cameras: When Performance Oversteps Privacy Rights Source: SAN 2023...

Read more

🇫🇷 Collection form and Processing register

Tools & Documentation, Legal basis | 28/03/2025

📅 December 29, 2023 – CNIL Sanction💸 €75,000 fine imposed on a data broker📄 Reference: SAN-2023-025 🎯 Why? 🔹 Misleading forms: The company collected ...

Read more

🇫🇷 Excessive data collection

Retention & Minimisation | 28/03/2025

🚨 EXCESSIVE DATA COLLECTION • SENSITIVE DATA • LACK OF COOPERATION📅 SAN 2023-013 – September 18, 2023💸 €200,000 fine imposed on S__ LOGISTIC (air frei...

Read more

Explore all our areas of expertise: