Association – €10,000 Fine (France, 2024)

€10,000Commission Nationale de l'Informatique et des Libertés25 May 2024France
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Another French association was fined €10,000 for similar reasons, including poor data security and not following rules about data collection. This ruling reinforces the need for all organizations to manage personal data responsibly.

What happened

The French DPA fined an association €10,000 for lacking data security and not complying with data minimization rules.

Who was affected

Members of the association and individuals whose data was processed by the organization were affected.

What the authority found

The authority determined that the association failed to meet GDPR standards for data security and minimization.

Why this matters

This case serves as a crucial reminder that organizations must prioritize data protection. It encourages businesses to evaluate their data practices to avoid similar penalties.

Source verified 14 March 2026
articles corrected
date discrepancy
Full Legal Summary
Detailed

The French DPA has fined an association EUR 10,000 due to a lack of data security, non-compliance with the principle of data minimisation and a failure to comply with its information obligations under the GDPR.

Details

Fine Date

25 May 2024

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€10,000

Enforcement Tracker ID

ETid-2424

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Association - France (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: