Sanctions
Sanctions and corrective measures: CNIL’s actions in 2025
Cookies, employee monitoring and data security were the main subjects of sanctions imposed by the CNIL in 2025, with fines totalling €486,839,500.
09 February 2026
Sanctions and corrective measures: CNIL’s actions in 2025
Cookies, employee monitoring and data security were the main subjects of sanctions imposed by the CNIL in 2025, with fines totalling €486,839,500.
09 February 2026
Data breach: FRANCE TRAVAIL fined €5 million
On 22 January 2026, the CNIL fined FRANCE TRAVAIL (formerly Pôle Emploi) €5 million for failing to ensure the security of job seekers' data.
29 January 2026
Data breach: FRANCE TRAVAIL fined €5 million
On 22 January 2026, the CNIL fined FRANCE TRAVAIL (formerly Pôle Emploi) €5 million for failing to ensure the security of job seekers' data.
29 January 2026
Transfer of data to a social network for advertising purposes: the CNIL imposed a fine of €3.5 million
On 30th December 2025, the CNIL imposed a fine of €3.5 million on a company for transferring the data of members of its loyalty programme to a social network for advertising targeting purposes,…
22 January 2026
Transfer of data to a social network for advertising purposes: the CNIL imposed a fine of €3.5 million
On 30th December 2025, the CNIL imposed a fine of €3.5 million on a company for transferring the data of members of its loyalty programme to a social network for advertising targeting purposes,…
22 January 2026
Data breach: FREE MOBILE and FREE fined €42 million
On 13th January 2026, the CNIL issued two sanction decisions against FREE MOBILE and FREE, imposing fines of €27 million and €15 million respectively, given the inadequacy of the measures…
14 January 2026
Data breach: FREE MOBILE and FREE fined €42 million
On 13th January 2026, the CNIL issued two sanction decisions against FREE MOBILE and FREE, imposing fines of €27 million and €15 million respectively, given the inadequacy of the measures…
14 January 2026
Data security: NEXPUBLICA FRANCE fined €1,700,000
On 22 December 2025, the CNIL fined NEXPUBLICA FRANCE €1,700,000 for failing to implement sufficient security measures for its PCRM software, a user relationship management tool in the social…
24 December 2025
Data security: NEXPUBLICA FRANCE fined €1,700,000
On 22 December 2025, the CNIL fined NEXPUBLICA FRANCE €1,700,000 for failing to implement sufficient security measures for its PCRM software, a user relationship management tool in the social…
24 December 2025
Data breach: MOBIUS SOLUTIONS LTD fined €1 million
On 11 December 2025, the CNIL imposed a fine on MOBIUS SOLUTIONS LTD, the processor behind a data breach affecting users of DEEZER. The company was fined €1 million for failing to comply with…
19 December 2025
Data breach: MOBIUS SOLUTIONS LTD fined €1 million
On 11 December 2025, the CNIL imposed a fine on MOBIUS SOLUTIONS LTD, the processor behind a data breach affecting users of DEEZER. The company was fined €1 million for failing to comply with…
19 December 2025