- Enforcing jurisdiction
- France · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
CNIL – Violation Found (France, 2026)
The French data protection authority found that KASPR engaged in unlawful data collection and retention practices. This ruling emphasizes the need for companies to adhere to data protection laws. It serves as a reminder that transparency and legality are crucial in data handling.
What happened
KASPR was found to have collected and retained personal data unlawfully.
Who was affected
Individuals whose data was collected and retained by KASPR were affected.
What the authority found
The authority determined that KASPR violated GDPR by failing to comply with data protection principles.
Why this matters
This case highlights the importance of lawful data collection practices. Companies must ensure they follow data protection regulations to protect user privacy.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Entities Involved
Source checks
Linked-source text retrieved.
Review needed — 27 March 2026.
Processing notes: scope corrected, date discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The case involved unlawful data collection and retention practices, not cookies or consent mechanisms.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (1)
Other enforcement actions involving CNIL in FR
Details
Decision Date
4 March 2026
Authority
Commission Nationale de l'Informatique et des Libertés
About this data
Cite as: Cookie Fines. CNIL - France (2026). Retrieved from cookiefines.eu
Last updated: