BRICO PRIVÉ – €500,000 Fine (France, 2021)

€500,000Commission Nationale de l'Informatique et des Libertés14 June 2021France
final
ePrivacy
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

France's data protection authority fined BRICO PRIVÉ EUR 500,000 for several data protection failures. The company kept customer data longer than allowed, failed to delete data upon request, and didn't secure user accounts properly. This case underscores the importance of respecting data retention limits and securing personal data.

What happened

BRICO PRIVÉ was fined for keeping customer data too long, not honoring deletion requests, and failing to secure user accounts.

Who was affected

Customers and prospects whose data was retained or not deleted as requested were affected.

What the authority found

The authority found that BRICO PRIVÉ violated GDPR by not adhering to data retention policies, failing to delete data on request, and lacking adequate security measures.

Why this matters

This case serves as a warning to businesses about the importance of following data retention policies and ensuring data security. It highlights the need for companies to respect customer rights and comply with privacy laws.

GDPR Articles Cited

AI-verified

Art. 13 GDPR
Art. 17 GDPR
Art. 32 GDPR
Art. 5(1)(e) GDPR
View original scraped data
Art. 5(1)(e) GDPR
Art. 13 GDPR
Art. 17 GDPR
Art. 32 GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. 82 Loi Informatique et Libertes
Source verified 6 March 2026
national law identified
scope corrected
Full Legal Summary
Detailed

The case involved data retention, information obligations, and security measures, with no mention of cookies or consent mechanisms.

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for BRICO PRIVÉ in FR

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

14 June 2021

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€500,000

Enforcement Tracker ID

ETid-734

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. BRICO PRIVÉ - France (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: