French Data Protection Authority (CNIL) · 12 October 2023
GROUPE CANAL +
Insufficient fulfilment of data subjects rights
- Regulator
- French Data Protection Authority (CNIL)
- Decided
- 12 October 2023
- Country
- France
- Sector
- Media, Telecoms and Broadcasting
- Regulator’s reference
- Not recorded
- Fino case number
- 2023/FR/006
What happened
The French DPA fined GROUPE CANAL+ €600,000 after receiving 31 complaints for the failure to comply with several GDPR Articles. The fine relates in particular to ‘cold’ calls, the exercise of rights by the data subjects, safety issues concerning the company's employees’ passwords and the company’s failure to notify the DPA when a serious personal data breach took place in 2020.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 7Conditions for consent7(1)Read →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 14Information to be provided where personal data have not been obtained from the data subjectRead →
- Art. 15Right of access by the data subjectRead →
- Art. 28ProcessorRead →
- Art. 32Security of processingRead →
- Art. 33Notification of a personal data breach to the supervisory authorityRead →
- Consent
- Data breach
- Data security
- Data subject rights
- Processor obligations
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/FR/006.