Authority
CNIL
Country
France
Date Issued
December 29, 2023
Industry
Finance
Summary
The French data protection authority (CNIL) fined an online payment company €105,000 for multiple GDPR violations including inadequate data security measures, failure to obtain proper consent for cookies, excessive data retention, and lack of transparency to individuals.
Violation Types
SecurityConsentData RetentionTransparency
Articles Violated
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate GDPR compliance before regulators come knocking.
Talk to an Expert