Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Create an account
Join our community for free to access exclusive whitepapers, reports, and regulatory information.
France: CNIL celebrates Data Protection Day with summary of 2021 enforcement activity
The French data protection authority ('CNIL') published, on 28 January 2022, an overview of its enforcement activity in 2021, in celebration of Data Protection Day. In particular, CNIL outlined that over the course of 2021 it had imposed 18 sanctions totalling €214,106,000, 12 of which were made public. In addition, CNIL highlighted that, in 2021, it issued its first decision to impose an additional fine of €65,000 for non-compliance with an order, following its initial decision which imposed a fine of a significantly lower amount, €7,300.
Among other notable statistics, CNIL underlined that half of the 18 sanctions it imposed related to data security breaches, noting that in relation to this the security measures taken by organisations often remain insufficient and that CNIL systematically verifies the security of information systems whenever it carries out an inspection.
Furthermore, CNIL noted that the 135 formal notices that it issued in 2021 mark a very significant increase compared to previous years, while also highlighting that a significant proportion of these, namely 89, relate to CNIL's priority focus area on the regulation of cookies and similar technologies.
You can read the press release here.
Send us your Feedback!
Please let us know what you think of DataGuidance! It will only take 60 seconds and help us make the site better for you.
