π«π· Insurance and excessive retention periods
Data Subject Rights, Retention & Minimisation | 29/03/2025
π’ €1.75 Million Fine for a French Insurance Company

Source: SAN 2021-010

π The CNIL has sanctioned an insurance company for two serious breaches of ...
Read more
π¨ SS2I Inappropriate legal basis π¨
Legal basis | 28/03/2025
π Greece | HDPA | €150,000 Fine π Following a complaint, the Hellenic Data Protection Authority (HDPA) investigated an IT services company (SS2I) reg...
Read more
β Insufficient association of a dpo
DPO | 28/03/2025
ππ Luxembourg: €15,000 Fine for Poor DPO Involvement

π
Decision 20FR/2021 of June 11, 2021The Luxembourg Data Protection Authority sanctioned a compa...
Read more
β Failure of a DPO
DPO | 28/03/2025
β οΈWhen a DPO Oversteps Their Role

π Context:Following the receipt of unsolicited newsletters from a recruitment agency, a data subject submitted an a...
Read more
π« Spain Failure to Appoint a DPO
DPO | 28/03/2025
When Glovo Fails to Meet Its Obligations π¦πͺπΈπ AEPD PS/00417/2019

A Spanish citizen filed a complaint against Glovo (GlovoApp23, SL), a home delivery ...
Read more
β Data transfer outside the EU!
Data Transfers | 28/03/2025
π’ GDPR & Public Procurement: Transferring Data Outside the EU Can Invalidate a Contract Award! πβ

ποΈ On December 21, 2023, the Belgian Council of Sta...
Read more
π’ AI and copyright
Artificial Intelligence (AI) | 28/03/2025
π¨β¨ Can ChatGPT Really Imitate Studio Ghibli to Create Images? Between Creative Fun and Legal Risk... π€π¬

Since March 25, ChatGPT's image generator usi...
Read more
π«π· Collection form and Processing register
Tools & Documentation, Legal basis | 28/03/2025
π
December 29, 2023 – CNIL SanctionπΈ €75,000 fine imposed on a data brokerπ Reference: SAN-2023-025

π― Why? πΉ Misleading forms: The company collected ...
Read more
πͺπΈ Data security and USB key
Confidentiality & Security | 28/03/2025
Source : PS-00117-2024 π’ A famous insurance company made a major mistake...





















π Facts • π
Security Incident: On May 11, 2023, the ...
Read more
π«π· Data security and real estate
Retention & Minimisation, Confidentiality & Security | 28/03/2025
π Real Estate & Personal Data: €400,000 Fineπ
CNIL Decision – May 28, 2019 (Ref: 2019-995)π A security breach + excessive data retention = double GDPR...
Read more
π«π· Excessive data collection
Retention & Minimisation | 28/03/2025
π¨ EXCESSIVE DATA COLLECTION • SENSITIVE DATA • LACK OF COOPERATIONπ
SAN 2023-013 – September 18, 2023πΈ €200,000 fine imposed on S__ LOGISTIC (air frei...
Read more
π«π· Non-compliant video surveillance
Biometrics & Video Surveillance, Retention & Minimisation | 28/03/2025
π¨ Workplace Surveillance: HR Practices Too Intrusive Sanctionedπ¦ From Scanners to Cameras: When Performance Oversteps Privacy Rights

Source: SAN 2023...
Read more