Authority
CNIL
Country
France
Date Issued
December 7, 2020
Industry
Advertising
Summary
A commercial telemarketing company failed to obtain proper consent before processing personal data, collected excessive and irrelevant data, and violated data retention requirements and individuals' right to object. The company also failed to properly oversee its data processor through adequate contractual safeguards.
Violation Types
ConsentTransparencyData RetentionData Subject RightsProcessor Obligations
Articles Violated
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate GDPR compliance before regulators come knocking.
Talk to an Expert