Back to Explorer
GDPRRetail

Department Store Operating Company

€100,000

Authority

CNIL

Country

France

Date Issued

September 18, 2025

Industry

Retail

Summary

A retail department store operator was fined €100,000 by the French CNIL for violations including unlawful data processing and inadequate video surveillance practices, failure to minimize collected data, and failure to properly notify authorities of a data breach and involve its data protection officer in data protection matters.

Violation Types

Legal BasisEmployee SurveillanceData Breach

Articles Violated

Avoid enforcement risk with automated compliance

IQWorks helps organizations automate GDPR compliance before regulators come knocking.

Talk to an Expert