- Enforcing jurisdiction
- France · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
SAF LOGISTICS – €200,000 Fine (France, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The French data protection authority fined SAF LOGISTICS EUR 200,000 for collecting excessive personal information about its employees. The investigation revealed that the company gathered sensitive data, such as blood type and political affiliation, without a legal basis. This case underscores the need for companies to respect employee privacy and handle personal data responsibly.
What happened
SAF LOGISTICS was fined for collecting sensitive personal data about its employees without a valid legal basis.
Who was affected
Employees of SAF LOGISTICS whose personal information was inappropriately collected.
What the authority found
The French DPA found that the company violated GDPR by processing sensitive data without legal justification.
Why this matters
This ruling highlights the importance of compliance with data protection laws and serves as a warning to companies about the consequences of mishandling employee data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 6 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The French DPA has fined SAF LOGISTICS EUR 200,000. An employee reported to the DPA that the controller had collected data on the private lives of its employees. During its investigation, the DPA found that the controller had collected a large amount of information about employees' family members, including their identity, contact details, position, employer and marital status, via a form sent to employees. The DPA considered this to be a violation of the employees' privacy. In addition, the forms requested information on blood type, ethnicity, and political affiliation. The DPA found that the controller had no legal basis for processing such sensitive data. The DPA also found that the controller had been storing extracts from the criminal records of employees who had already been cleared by the relevant authorities following an administrative investigation. Accordingly, the DPA no longer saw a reason for the retention. The DPA also requested the controller to provide a translation of the form written in Chinese. However, the controller only provided an incomplete translation.
Related Enforcement Actions (0)
No other enforcement actions found for SAF LOGISTICS in FR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
18 September 2023
Authority
Commission Nationale de l'Informatique et des Libertés
Fine Amount
€200,000
About this data
Cite as: Cookie Fines. SAF LOGISTICS - France (2023). Retrieved from cookiefines.eu
Last updated: