CNIL – Violation Found (France, 2026)

Violation Found
Commission Nationale de l'Informatique et des Libertés4 March 2026France
final
ePrivacy
Violation Found

The French data protection authority, CNIL, found issues related to data collection and transparency but did not impose a fine. This matters because it underscores the importance of clear data handling practices. Companies should ensure they are transparent about how they collect and use personal data.

What happened

CNIL identified problems with data collection, retention, and transparency practices.

Who was affected

Individuals whose data was collected by the organization were affected.

What the authority found

The CNIL found that the organization did not meet GDPR requirements regarding data handling and transparency.

Why this matters

This case serves as a reminder for businesses to be clear and open about their data practices. Transparency is crucial for building trust with users.

GDPR Articles Cited

AI-verified

Art. 6(GDPR)
Art. 12(GDPR)
Art. 14(GDPR)
Art. 15(GDPR)
Art. 5(1)(e) GDPR
View original scraped data
Art. 5(1)(e) GDPR
Art. 6(GDPR)
Art. 12(GDPR)
Art. 14(GDPR)
Art. 15(GDPR)

Original data from scraper before AI verification against source document.

Entities Involved

CNIL
KASPR
Source verified 27 March 2026
scope corrected
date discrepancy

Details

Decision Date

4 March 2026

Authority

Commission Nationale de l'Informatique et des Libertés

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. CNIL - France (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: