French Data Protection Authority (CNIL) · 20 July 2021
SGAM AG2R LA MONDIALE
Non-compliance with general data processing principles
- Regulator
- French Data Protection Authority (CNIL)
- Decided
- 20 July 2021
- Country
- France
- Sector
- Finance, Insurance and Consulting
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/FR/009
What happened
The French DPA fined an insurance and supplementary pension firm €1,750,000 for violating the data retention principle in Article 5. Although it also investigated the firm for violations of Articles 13 and 14 GDPR, it did not fine the firm for these violations since it implemented adequate measures to comply during the course of the procedure.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(e)Read →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 14Information to be provided where personal data have not been obtained from the data subjectRead →
- Data principles
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/FR/009.