France: National Commission for Information Technology and Civil Liberties investigation into FREE MOBILE and FREE over violations of cybersecurity obligations
Progress
Current status
in force
08 Jan 2026 in force
Scope
Implementers
France
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
National Commission for Information Technology and Civil Liberties imposed 42 million fine against FREE MOBILE and FREE over violations of cybersecurity obligations
On 8 January 2026, the National Commission for Information Technology and Civil Liberties (CNIL) imposed fines of EUR 27'000'000 on FREE MOBILE and EUR 15'000'000 on FREE following an investigation into data security breaches. The sanctions resulted…
SourceEvent type
investigation
Action type
ruling
Government branch
executive
Government body
data protection authority