Back to Explorer
GDPRGovernment

Public Industrial and Commercial Establishment

€400,000

Authority

CNIL

Country

France

Date Issued

October 29, 2021

Industry

Government

Summary

A public industrial and commercial establishment was fined €400,000 by CNIL for failing to comply with data minimization and accountability principles, maintaining excessive data retention periods, and inadequate data security measures.

Violation Types

SecurityData RetentionData Collection

Articles Violated

Avoid enforcement risk with automated compliance

IQWorks helps organizations automate GDPR compliance before regulators come knocking.

Talk to an Expert