Authority
CNIL
Country
France
Date Issued
March 16, 2023
Industry
Transport
Summary
The CNIL issued a €125,000 fine for failing to adhere to data minimization principles, inadequately informing data subjects, and failing to properly establish contractual obligations with data processors. The company collected excessive personal data and did not maintain proper governance of data processor relationships.
Violation Types
Data CollectionTransparencyProcessor Obligations
Articles Violated
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate GDPR compliance before regulators come knocking.
Talk to an Expert