Sanctions
Failure to respect the rights of individuals: EUR 300,000 fine against EXTIA
On 21 July 2026, the CNIL fined EXTIA EUR 300,000 for various breaches relating to respect for the rights of individuals, in particular the right to erasure of personal data (‘right to be forgotten’)…
09 septembre 2026
Failure to respect the rights of individuals: EUR 300,000 fine against EXTIA
On 21 July 2026, the CNIL fined EXTIA EUR 300,000 for various breaches relating to respect for the rights of individuals, in particular the right to erasure of personal data (‘right to be forgotten’)…
09 septembre 2026
Health data breach: EUR 500,000 fine against HÔPITAL PRIVÉ DE LA LOIRE
On 3 September 2026, the CNIL imposed a penalty of EUR 500,000 on HÔPITAL PRIVÉ DE LA LOIRE for failing to take appropriate measures to ensure the security of the data of its patients and some of…
03 septembre 2026
Health data breach: EUR 500,000 fine against HÔPITAL PRIVÉ DE LA LOIRE
On 3 September 2026, the CNIL imposed a penalty of EUR 500,000 on HÔPITAL PRIVÉ DE LA LOIRE for failing to take appropriate measures to ensure the security of the data of its patients and some of…
03 septembre 2026
Automated decisions: UBER fined nearly EUR 825 million
In cooperation with the CNIL, the Dutch Data Protection Authority fined UBER B.V. and UBER TECHNOLOGIES INC. EUR 824,990,000 for taking automated individual decisions concerning the drivers of its…
24 août 2026
Automated decisions: UBER fined nearly EUR 825 million
In cooperation with the CNIL, the Dutch Data Protection Authority fined UBER B.V. and UBER TECHNOLOGIES INC. EUR 824,990,000 for taking automated individual decisions concerning the drivers of its…
24 août 2026
Health data: fine of 5 million euros against IQVIA
On 26 May 2026, IQVIA OPERATIONS FRANCE was fined €5 million, in particular because it didn't respect guarantees aimed at limiting risks to individuals in the management of health data warehouses.
28 mai 2026
Health data: fine of 5 million euros against IQVIA
On 26 May 2026, IQVIA OPERATIONS FRANCE was fined €5 million, in particular because it didn't respect guarantees aimed at limiting risks to individuals in the management of health data warehouses.
28 mai 2026
Annual report: CNIL's achievements and key actions in 2025
Professionals support, investigations, awareness-raising, AI regulation, cybersecurity and European cooperation… the CNIL reviews an intense year in 2025, at the service of the protection of personal…
19 mai 2026
Annual report: CNIL's achievements and key actions in 2025
Professionals support, investigations, awareness-raising, AI regulation, cybersecurity and European cooperation… the CNIL reviews an intense year in 2025, at the service of the protection of personal…
19 mai 2026
The sanctions issued by the CNIL
The sanctions issued by the CNIL’s restricted committee since the entering into force of the GDPR.
14 avril 2026
The sanctions issued by the CNIL
The sanctions issued by the CNIL’s restricted committee since the entering into force of the GDPR.
14 avril 2026