Association – €16,000 Fine (France, 2024)

€16,000Commission Nationale de l'Informatique et des Libertés25 April 2024France
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An association in France was fined €16,000 for processing personal data without a valid legal reason. This is important because it shows that organizations need to have a clear legal basis for handling personal information. Failing to do so can result in significant fines.

What happened

The association processed personal data without a sufficient legal basis.

Who was affected

Individuals whose personal data was processed by the association were affected.

What the authority found

The French DPA ruled that the association did not have a valid legal basis for processing personal data, violating GDPR.

Why this matters

This case highlights the necessity for organizations to ensure they have a legal basis for processing personal data. It reinforces the need for compliance with data protection laws.

GDPR Articles Cited

AI-verified

Art. 6(GDPR)
View original scraped data
Art. 6(GDPR)

Original data from scraper before AI verification against source document.

Source verified 13 March 2026
date discrepancy

Details

Fine Date

25 April 2024

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€16,000

Enforcement Tracker ID

ETid-2422

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Association - France (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: