CNIL (France) · 11 May 2023
Doctissimo
About: Data principles, Data security, Special categories
Fine€380,000Violation found
- Regulator
- CNIL (France)
- Decided
- 11 May 2023
- Country
- France
- Sector
- Not given
- Regulator’s reference
- SAN-2023-006
- Fino case number
- 2023/FR/013
What happened
The French DPA fined Doctissimo €380,000 for several data protection violations, including failure to obtain users' consent for the processing of health data, lack of security measures, violation of storage limitation and setting cookies without consent.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(e)Read →
- Art. 9Processing of special categories of personal data9(2)Read →
- Art. 26Joint controllersRead →
- Art. 32Security of processingRead →
- Data principles
- Data security
- Special categories
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/FR/013.