Authority
CNIL
Country
France
Date Issued
November 24, 2022
Industry
Energy
Summary
The company violated GDPR requirements by conducting commercial prospecting without proper consent, failing to provide transparency information, and not respecting data subjects' rights to object and access their data. Additionally, the organization failed to implement adequate data security measures.
Violation Types
TelemarketingTransparencySecurityData Subject Rights
Articles Violated
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate GDPR compliance before regulators come knocking.
Talk to an Expert