Société nouvelle de l’annuaire français (SNAF) – €3,000 Fine (France, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The CNIL fined Société nouvelle de l’annuaire français EUR 3,000 for not addressing user requests to delete or correct their data on time. The company also failed to keep proper records of data processing activities. This case highlights the importance of timely responses to data requests and maintaining proper documentation.
What happened
Société nouvelle de l’annuaire français was fined for failing to handle data deletion and correction requests and for not keeping adequate records.
Who was affected
Users of the annuairefrancais.fr website who requested data changes were affected.
What the authority found
The CNIL determined that the company did not meet GDPR requirements for data rectification and erasure, and failed to maintain processing records.
Why this matters
This case underscores the necessity for businesses to promptly address data requests and maintain comprehensive records of data processing. It serves as a warning to ensure compliance with GDPR obligations.
GDPR Articles Cited
The CNIL received 16 complaints between 2018 and 2019 specifying that users were facing difficulties for deleting or rectifying their data on the annuairefrancais.fr website. The website hosts information about companies registered in France that are published on the SIRENE database - a public database managed by the National Institute for Statistics and Economic Studies (INSEE). The website annuairefrancais.fr offers the possibility of creating an account allowing users to get information about registered companies and to subscribe to commercial offers from these companies. After an initial inspection, the CNIL found that the processing was not compliant with the GDPR and issued a formal notice giving the company two months to bring its processing practices into compliance by implementing a clear policy regarding data deletion and rectification, establishing a record of processing activities and dealing with the data subjects' requests. Noting that the company had not actively cooperated and had failed to implement the required measures within the prescribed period, as spelled out in the formal notice, the CNIL imposed a fine of €3,000 on the company Société nouvelle de l'annuaire français. More specifically: * concerning Article 16 GDPR (right to rectification), it was found that the company had failed to follow up on a data subject's request to rectify his postal address from his personal to his professional address within the prescribed period. The deadline for rectifying the personal data of the complainant had been largely exceeded as the company's director implemented the required measures in July 2021, whereas the deadline expired in September 2020; * concerning Article 17 GDPR (right to erasure), it was also found that the erasure requests of several data subjects had not been processed within the prescribed period. Several requests which were supposed to have been processed had, in fact, not been followed up on, even after the formal notice period had
Related Enforcement Actions (0)
No other enforcement actions found for Société nouvelle de l’annuaire français (SNAF) in FR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
15 September 2021
Authority
Commission Nationale de l'Informatique et des Libertés
Fine Amount
€3,000
GDPRhub ID
gdprhub-4027About this data
Cite as: Cookie Fines. Société nouvelle de l’annuaire français (SNAF) - France (2021). Retrieved from cookiefines.eu
Last updated: