France: National Commission for Information Technology and Freedoms investigation into unnamed company over unlawful transmission of loyalty programme member data to social network for targeted advertising
Progress
Current status
in force
30 Dec 2025 under investigation
21 Dec 2022 under deliberation
Scope
Implementers
France
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
online advertising provider
platform intermediary: user-generated content
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
National Commission for Information Technology and Freedoms imposed EUR 3’500’000 administrative fine on unnamed company for unlawful transmission of loyalty programme member data to social network
On 30 December 2025, the National Commission for Information Technology and Freedoms (CNIL), acting through its restricted panel, issued Ruling SAN-2025-017 in relation to its investigation into an unnamed company, referred to as company X, which tr…
Event type
investigation
Action type
interim ruling
Government branch
executive
Government body
data protection authority
National Commission for Information Technology and Freedoms opened investigation into unnamed company regarding compliance with data protection regulations
On 21 December 2022, the National Commission for Information Technology and Freedoms (CNIL) opened an investigation into an unnamed company, referred to as company X, to verify its compliance with data protection requirements.
Event type
investigation
Action type
announcement
Government branch
executive
Government body
data protection authority