SAF LOGISTICS – €200,000 Fine (France, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The French data protection authority fined SAF LOGISTICS EUR 200,000 for invading employee privacy. The company collected excessive personal information about employees and their families without a valid reason. This case shows the importance of respecting employee privacy and having a legal basis for data collection.
What happened
SAF LOGISTICS collected sensitive personal data about employees and their family members without proper justification.
Who was affected
Employees of SAF LOGISTICS whose personal and family information was collected.
What the authority found
The authority found that SAF LOGISTICS violated privacy laws by processing sensitive data without a legal basis.
Why this matters
This fine underscores the need for companies to carefully consider what employee data they collect and ensure they have a valid reason for doing so. Businesses should review their data collection practices to avoid similar penalties.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The French DPA has fined SAF LOGISTICS EUR 200,000. An employee reported to the DPA that the controller had collected data on the private lives of its employees. During its investigation, the DPA found that the controller had collected a large amount of information about employees' family members, including their identity, contact details, position, employer and marital status, via a form sent to employees. The DPA considered this to be a violation of the employees' privacy. In addition, the forms requested information on blood type, ethnicity, and political affiliation. The DPA found that the controller had no legal basis for processing such sensitive data. The DPA also found that the controller had been storing extracts from the criminal records of employees who had already been cleared by the relevant authorities following an administrative investigation. Accordingly, the DPA no longer saw a reason for the retention. The DPA also requested the controller to provide a translation of the form written in Chinese. However, the controller only provided an incomplete translation.
Related Enforcement Actions (0)
No other enforcement actions found for SAF LOGISTICS in FR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
18 September 2023
Authority
Commission Nationale de l'Informatique et des Libertés
Fine Amount
€200,000
Enforcement Tracker ID
ETid-2044
About this data
Cite as: Cookie Fines. SAF LOGISTICS - France (2023). Retrieved from cookiefines.eu
Last updated: