Sanctions
Transfer of data to a social network for advertising purposes: the CNIL imposed a fine of €3.5 million
On 30th December 2025, the CNIL imposed a fine of €3.5 million on a company for transferring the data of members of its loyalty programme to a social network for advertising targeting purposes,…
22 January 2026
Transfer of data to a social network for advertising purposes: the CNIL imposed a fine of €3.5 million
On 30th December 2025, the CNIL imposed a fine of €3.5 million on a company for transferring the data of members of its loyalty programme to a social network for advertising targeting purposes,…
22 January 2026
Data breach: FREE MOBILE and FREE fined €42 million
On 13th January 2026, the CNIL issued two sanction decisions against FREE MOBILE and FREE, imposing fines of €27 million and €15 million respectively, given the inadequacy of the measures…
14 January 2026
Data breach: FREE MOBILE and FREE fined €42 million
On 13th January 2026, the CNIL issued two sanction decisions against FREE MOBILE and FREE, imposing fines of €27 million and €15 million respectively, given the inadequacy of the measures…
14 January 2026
Data security: NEXPUBLICA FRANCE fined €1,700,000
On 22 December 2025, the CNIL fined NEXPUBLICA FRANCE €1,700,000 for failing to implement sufficient security measures for its PCRM software, a user relationship management tool in the social…
24 December 2025
Data security: NEXPUBLICA FRANCE fined €1,700,000
On 22 December 2025, the CNIL fined NEXPUBLICA FRANCE €1,700,000 for failing to implement sufficient security measures for its PCRM software, a user relationship management tool in the social…
24 December 2025
Data breach: MOBIUS SOLUTIONS LTD fined €1 million
On 11 December 2025, the CNIL imposed a fine on MOBIUS SOLUTIONS LTD, the processor behind a data breach affecting users of DEEZER. The company was fined €1 million for failing to comply with…
19 December 2025
Data breach: MOBIUS SOLUTIONS LTD fined €1 million
On 11 December 2025, the CNIL imposed a fine on MOBIUS SOLUTIONS LTD, the processor behind a data breach affecting users of DEEZER. The company was fined €1 million for failing to comply with…
19 December 2025
Cookies: AMERICAN EXPRESS fined €1.5 million by the CNIL
On 27th November 2025, the CNIL sanctioned AMERICAN EXPRESS CARTE FRANCE, the French subsidiary of the AMERICAN EXPRESS group, with a fine of €1.5 million for non-compliance with the rules applicable…
03 December 2025
Cookies: AMERICAN EXPRESS fined €1.5 million by the CNIL
On 27th November 2025, the CNIL sanctioned AMERICAN EXPRESS CARTE FRANCE, the French subsidiary of the AMERICAN EXPRESS group, with a fine of €1.5 million for non-compliance with the rules applicable…
03 December 2025
Cookies placed without consent: the company that publishes the website “vanityfair.fr” fined 750,000 euros by the CNIL
On 20 November 2025, the CNIL imposed a fine of 750,000 euros on the French company LES PUBLICATIONS CONDE NAST for failing to comply with the rules applicable to cookies placed on the devices of…
27 November 2025
Cookies placed without consent: the company that publishes the website “vanityfair.fr” fined 750,000 euros by the CNIL
On 20 November 2025, the CNIL imposed a fine of 750,000 euros on the French company LES PUBLICATIONS CONDE NAST for failing to comply with the rules applicable to cookies placed on the devices of…
27 November 2025