Authority
CNIL
Country
France
Date Issued
November 21, 2019
Industry
Manufacturing
Summary
The company failed to adequately justify the necessity and relevance of collected data, did not properly inform individuals of data processing, violated the right to object, failed to cooperate with CNIL, and conducted unregulated data transfers outside the EU. A €500,000 fine and compliance injunction with penalties were imposed.
Violation Types
TransparencyData Subject RightsCross-Border Transfer
Articles Violated
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate GDPR compliance before regulators come knocking.
Talk to an Expert