Authority
CNIL
Country
France
Date Issued
December 11, 2025
Industry
Advertising
Summary
A marketing tools development company was fined €1,000,000 by CNIL for unjustified retention of data and unauthorized data processing by a sub-processor not approved by the data controller. The company failed to maintain proper processing activity records as required under GDPR.
Violation Types
Data RetentionProcessor ObligationsData Processing
Articles Violated
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate GDPR compliance before regulators come knocking.
Talk to an Expert