On 20 March 2023, the French data protection authority (CNIL) opened an investigation into the company Nexpublica after receiving data breach notifications, authorising CNIL to carry out on-site monitoring to verify compliance with data protection r…