๐ช๐ธ Data security and USB key
Confidentiality & Security | 28/03/2025
Source : PS-00117-2024 ๐ข A famous insurance company made a major mistake...





















๐ Facts • ๐
Security Incident: On May 11, 2023, the ...
Read more
๐ซ๐ท Collection form and Processing register
Tools & Documentation, Legal basis | 28/03/2025
๐
December 29, 2023 – CNIL Sanction๐ธ €75,000 fine imposed on a data broker๐ Reference: SAN-2023-025

๐ฏ Why? ๐น Misleading forms: The company collected ...
Read more
๐ซ๐ท Excessive data collection
Retention & Minimisation | 28/03/2025
๐จ EXCESSIVE DATA COLLECTION • SENSITIVE DATA • LACK OF COOPERATION๐
SAN 2023-013 – September 18, 2023๐ธ €200,000 fine imposed on S__ LOGISTIC (air frei...
Read more
๐ซ๐ท Non-compliant video surveillance
Biometrics & Video Surveillance, Retention & Minimisation | 28/03/2025
๐จ Workplace Surveillance: HR Practices Too Intrusive Sanctioned๐ฆ From Scanners to Cameras: When Performance Oversteps Privacy Rights

Source: SAN 2023...
Read more
๐ซ๐ท Data security and real estate
Retention & Minimisation, Confidentiality & Security | 28/03/2025
๐ Real Estate & Personal Data: €400,000 Fine๐
CNIL Decision – May 28, 2019 (Ref: 2019-995)๐ A security breach + excessive data retention = double GDPR...
Read more
๐ Data security and PIA
27/03/2025
๐จ Poland: American Heart of Poland SA Penalized for Serious Data Security Breaches ๐จ

The company American Heart of Poland SA suffered a cyberattack r...
Read more
โ DPO : Insufficient Resources
DPO | 27/03/2025
โ ๏ธ Insufficient Resources for the Exercise of DPO Functions

Following an evaluation campaign, the CNIL conducted several audits across public and pri...
Read more
โ Failure to Notify the DPO
DPO | 27/03/2025
โ ๏ธFailure to Notify the DPO to the Supervisory Authority

๐ Following a complaint, the Hamburg Data Protection Authority imposed a €51,000 fine on Fa...
Read more
๐จ Lack of Direct DPO Contact Information
DPO | 27/03/2025
๐ Luxembourg-Based Company Penalized ๐จ Facts Following an audit, the Luxembourg regulator, CNPD, imposed a fine of €18,700 on a company due to failur...
Read more
๐จ Failure to Appoint a DPO
27/03/2025
Portuguese Municipality Penalized ๐จ

The Portuguese Data Protection Authority (APD) fined the municipality of Setúbal €170,000 for failing to appoint ...
Read more
๐ Lack of Processing Activities Register
Tools & Documentation | 27/03/2025
๐จ A Micro-Enterprise Fined by the CNIL Source : SAN 2021-014

In 2021, the restricted formation of the CNIL imposed a fine of €3,000 on a micro-ente...
Read more
๐ซ๐ท Data accessible on a server
Subcontracting, Confidentiality & Security | 27/03/2025
Source : SAN 2021-20

๐ Banking Data Left on a Server: Service Provider Fined €180,000 ๐

A payment service provider has been fined €180,000 by the ...
Read more