France: National Commission for Information Technology and Freedoms imposed EUR 3’500’000 administrative fine on unnamed company for unlawful transmission of loyalty programme member data to social network
Description
National Commission for Information Technology and Freedoms imposed EUR 3’500’000 administrative fine on unnamed company for unlawful transmission of loyalty programme member data to social network
On 30 December 2025, the National Commission for Information Technology and Freedoms (CNIL), acting through its restricted panel, issued Ruling SAN-2025-017 in relation to its investigation into an unnamed company, referred to as company X, which tr…
Scope
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
online advertising provider, platform intermediary: user-generated content
Implementation Level
national
Government Branch
executive
Government Body
data protection authority