Company Developing Voice over IP Software and Instant Messaging

Summary

The CNIL fined a voice over IP and instant messaging software company €800,000 for multiple GDPR violations including inadequate data security, failure to respect opposition rights, lack of transparency in data processing, excessive data retention, and failure to conduct required impact assessments. The company failed to implement privacy by design and did not provide proper information to data subjects.