Authority
CNIL
Country
France
Date Issued
July 28, 2020
Industry
Retail
Summary
Online Commerce failed to apply data minimization principles, retained personal data beyond necessary periods, failed to provide adequate information to individuals, and did not ensure proper security and confidentiality of personal data. CNIL imposed a €250,000 fine and enforcement order.
Violation Types
Data CollectionData RetentionTransparencySecurity
Articles Violated
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate GDPR compliance before regulators come knocking.
Talk to an Expert