Skip to main content
Home
  • My compliance tools
    • GDPR toolkit
      • Record of processing activities
      • Privacy Impact assessment (PIA)
      • Binding Corporate Rules (BCR)
      • Certification
      • Code of conduct
    • Guidelines and recommendations
      • EDPB Guidelines
      • CNIL's guidelines and recommendations (in French)
  • Data protection
    • Personal Data : definition
    • Official Texts
    • Glossary
  • Topics
    • Artificial intelligence (AI)
    • Cybersecurity
    • Data economy
    • Digital rights of children
    • Facial recognition
    • The right to de-listing in questions
    • Documents
    • Videos
  • The CNIL
    • The CNIL’s Missions
    • Status & Composition
    • Investigation powers of the CNIL
      • The steps of the CNIL's law enforcement process
      • How does the CNIL conduct its investigations?
      • The sanctions issued by the CNIL
      • The sanctions procedure
    • Around the world
      • The CNIL's actions in Europe and around the world
      • The EDPB
      • Map of the data protection around the world
      • The CNIL Worldwide
      • Law enforcement
FrEnCookies manager

CNIL: search form

  1. Home
  2. Investigating and issuing sanctions

Investigating and issuing sanctions


The CNIL shall conduct investigations following the lodging of a complaint, allegations of infringements brought to its knowledge or because it decides to address a specific issue. If an infringement of the regulation is established, the Chair of the CNIL may render an order to comply or the CNIL’s restricted committee can take different measures or sanctions.

  • Print the article
  • Email
  • Decrease the size of the font
  • Increase the size of the font

The steps of the CNIL's law enforcement process

The CNIL has a complete law enforcement toolkit enabling it to collect reports of infringements through different channels in order to carry out investigations, which can lead to issuing sanctions or rendering orders to comply.

How does the CNIL conduct its investigations?

These investigations can be carried out on site, document-based, through a hearing or online. They are essential to monitor the enforcement of the French Data Protection Act as well as the General Data Protection Regulation (GDPR) by data…

The sanctions procedure

Following investigations, complaints or in case of breaches of the GDPR or of the Data Protection Act, the CNIL restricted committee may issue sanctions to controllers or processors.

The sanctions issued by the CNIL

The sanctions issued by the CNIL’s restricted committee since the entering into force of the GDPR.
  • #Investigations
  • #Issuing sanctions
Commission Nationale de l’Informatique et des Libertés
My compliance tools
  • GDPR toolkit
  • Guidelines and recommendations

The CNIL
  • The CNIL’s Missions
  • Status & Composition
  • Investigation powers of the CNIL
  • Around the world
Data protection
  • Personal Data : definition
  • Official Texts
  • Glossary
Topics
  • Artificial intelligence (AI)
  • Cybersecurity
  • Data economy
  • Digital rights of children
  • Facial recognition
  • The right to de-listing in questions
  • Documents
  • Videos
Suivez-nous
  • twitter
  • linkedin
  • PUBLICATIONS
  • Glossary
  • Cookies management
  • Contact us