SERGIC SAS – Court Ruling (France, 2020)
The French Conseil d'Etat upheld a €400,000 fine against SERGIC for poor data security and retaining personal data longer than necessary. The ruling confirmed that the CNIL can download publicly exposed data during investigations and impose fines without prior notice. This case stresses the importance of data security and compliance with data retention rules.
What happened
SERGIC was fined €400,000 for inadequate data security and keeping personal data longer than needed.
Who was affected
Individuals whose personal information was exposed online due to SERGIC's security flaws.
What the authority found
The Conseil d'Etat confirmed the CNIL's right to conduct online investigations and impose fines without prior notice.
Why this matters
This ruling highlights that companies must ensure robust data security and adhere to data retention limits. It also clarifies that regulatory bodies can act swiftly against breaches without warning.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 18 March 2026.
Processing notes: articles corrected, amount discrepancy, scope corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The case focused on security issues and data retention violations, with no mention of cookies or consent banners.
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (1)
Other cases involving SERGIC SAS in FR
Details
Ruling Date
4 November 2020
Authority
Commission Nationale de l'Informatique et des Libertés
About this data
Cite as: Cookie Fines. SERGIC SAS - France (2020). Retrieved from cookiefines.eu
Last updated: