Authority
CNIL
Country
France
Date Issued
December 30, 2025
Industry
Other
Summary
The Tertiary Sector Company was fined €3.5 million by CNIL for multiple GDPR violations including inadequate data security measures, failure to obtain proper consent for cookies, lack of transparency in data processing, and failure to conduct required impact assessments. The company failed to process personal data lawfully and did not properly inform data subjects of their rights.
Violation Types
SecurityConsentTransparency
Articles Violated
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate GDPR compliance before regulators come knocking.
Talk to an Expert