News & Analysis as of September 18, 2024

CNIL

+ Follow

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -

GDPR – Company Fined for Improper Data Collection

Barnea Jaffa Lande & Co. on 3/27/2024

The French Data Protection Authority (CNIL) recently imposed a EUR 310,000 fine, representing 1% of its turnover, on FORIOU, a telemarketing company promoting loyalty programs. The fine stemmed from FORIOU’s use of...more

CNIL Fines Health Website for Unlawful Data Processing

Latham & Watkins LLP on 6/12/2023

The French Data Protection Authority imposed a €280,000 fine for GDPR infringements and a €100,000 fine for violation of French cookie rules. On 11 May 2023 the French Data Protection Authority (the CNIL) handed down its...more

European Regulators Provide Some Key Clarifications on Cookie Banners

McDermott Will & Emery on 1/23/2023

The European Data Protection Board (EDPB) adopted a draft report of the work undertaken by the Cookie Banner Taskforce (the Report). The Report describes how regulators apply cookie legislation in handling certain types of...more

Whether You Like it or Not, Cookies are Back on the Menu and UK and EU Data Protection Authorities are Taking Enforcement Action

Orrick, Herrington & Sutcliffe LLP on 7/27/2021

The French data protection authority, La Commission nationale de l’informatique et des libertés ("CNIL"), one of Europe's ("EU") most active data protection regulators, has continued to focus on the lawfulness of the use of...more

International Data Protection Update – First Quarter 2021

BakerHostetler on 3/30/2021

This quarterly update highlights some of the international data protection issues that have caught our attention, and the attention of our clients, in the past three months....more

Comply or Get Fined: 2020 GDPR Fines are the Highest on Record

Epiq on 1/13/2021

The European Union’s (EU) General Data Protection Regulation (GDPR) has been in effect since May 2018. The law’s goal of protecting EU citizens’ personal information and privacy seems to be coming into fruition. In the past,...more

ICO and CNIL Levy Landmark Fines Against British Airways and Marriott for 2018 Data Breaches

Kramer Levin Naftalis & Frankel LLP on 11/5/2020

On Oct. 30, 2020, the United Kingdom’s data protection authority, the Information Commissioner’s Office (ICO), in connection with France’s Commission nationale de l’informatique et des libertés (CNIL), announced the largest...more

French Court refuses to suspend Microsoft’s hosting of a public health data lake despite CNIL opinion (the Health Data Hub case –...

Hogan Lovells on 10/22/2020

On October 14, 2020, the French Administrative Supreme Court (Conseil d’Etat) published its decision in a lawsuit requesting that the French health data platform (Health Data Hub) be suspended for breach of the GDPR in light...more

EU Data Protection Authority Levies Its First Fine for Violations of the GDPR

Carlton Fields on 9/9/2020

The French Data Protection Authority, CNIL, has levied its first fine for enforcement of the General Data Protection Regulation (GDPR). The enforcement target, Spartoo, is a French online shoe retailer that makes its website...more

French Data Protection Authority Hands Down First Sanction as Lead Authority

Latham & Watkins LLP on 9/3/2020

The CNIL has imposed a €250,000 fine on an online retailer for GDPR infringements in cooperation with other EU supervisory authorities. Founded in 2006 and headquartered in France, Spartoo SAS (Spartoo) is one of the...more

French State Council Upholds CNIL’s €50M Fine for GDPR Violations

Latham & Watkins LLP on 7/6/2020

The Council decision contains useful considerations and clarifications on the “one-stop shop” mechanism, transparency obligations, and consent for targeted advertising. On 19 June 2020, France’s Highest Administrative...more

Highest Administrative Court in France Upholds Google’s €50 Million Fine

Orrick, Herrington & Sutcliffe LLP on 6/30/2020

On January 21, 2019, the CNIL (the French data protection authority) issued a fine of €50 million to Google under the General Data Protection Regulation (the “GDPR”) for its failure to (1) provide notice in an easily...more

How Are European Supervisory Authorities Exercising Cooperation and Consistency In Practice?

Latham & Watkins LLP on 9/3/2019

Recent action by the Hamburg authority may present implications for companies regulated by a lead data protection supervisory authority in Europe. A German supervisory authority has initiated an investigation into Google’s...more

High GDPR Fines: German Data Protection Authority Joins the Club

Latham & Watkins LLP on 8/28/2019

Following in the footsteps of the CNIL and the ICO, the Berlin DPA will impose a multimillion-euro fine for breach of the GDPR. The Berlin Data Protection Authority (Berlin DPA) recently announced that it will issue a...more

GDPR – The Year in Review

Hogan Lovells on 5/30/2019

Following the one-year anniversary of the coming into effect of the GDPR, Hogan Lovells’ Privacy and Cybersecurity practice has prepared a compilation of key GDPR-related developments of the past 12 months. The compilation...more

A GDPR Update for Employers, Part IV: Implementing Lessons Learned From GDPR Complaints and Enforcement Actions

Ogletree, Deakins, Nash, Smoak & Stewart,... on 5/22/2019

Much has happened since the European Union (EU) General Data Protection Regulation (GDPR) went into effect on May 25, 2018. Many EU countries have enacted national legislation to implement and expand the requirements of the...more

March 2019 IP Update: Europe’s One-Stop Shop for Privacy Regulation: For EU Companies Only?

Sunstein LLP on 4/17/2019

One key aspect of the EU’s General Data Protection Regulation (GDPR) is its aim of streamlining the regulatory process by providing “one-stop shopping”: the opportunity to deal with a single regulator with respect to all data...more

Privacy and Data Security Client Alert | February 2019

Shook, Hardy & Bacon L.L.P. on 2/7/2019

Google Receives Record GDPR Fine - Marking the first major penalty against a U.S. tech company under the General Data Protection Regulation (GDPR), the French data-protection authority, CNIL, has fined Google a record $57...more

Google Fine Signals GDPR Enforcement Priorities and Complexities

Dorsey & Whitney LLP on 1/31/2019

The French Data Protection Authority, CNIL, has fined Google $50 Million Euros for Google’s alleged failure to comply with the EU’s sweeping General Data Protection Regulation (GDPR). The enforcement action is significant for...more

Google Fined $57M by French Data Protection Authority for Alleged Violations of GDPR

Robinson+Cole Data Privacy + Security Insider on 1/28/2019

France’s data protection authority (DPA) (CNIL) recently announced that it has fined Google $57 million for violations of the General Data Protection Regulation (GDPR). This is the first fine by a European DPA of an American...more

Privacy & Cybersecurity Update - August 2018

Skadden, Arps, Slate, Meagher & Flom LLP on 9/7/2018

In this month's edition of our Privacy & Cybersecurity Update, we examine Brazil's new data protection regulation, the French data protection authority's warning to two companies of potential GDPR violations and the U.S....more

Global Privacy & Cybersecurity Update Vol. 14

Jones Day on 6/5/2017

New York Attorney General Announces Record Number of Data Breach Notices in 2016 - On March 21, 2017, the New York Attorney General's Office announced that it received 1,300 reported data breaches in 2016—a 60 percent...more

EU-US Data Transfers?: An update on actions taken by European DPAs

Foley Hoag LLP - Security, Privacy and the... on 6/20/2016

After the European Court of Justice invalidated Safe Harbor on October 6, ?2015, the Article 29 Working Party announced in an October 16, 2015 statement that US companies that were Safe Harbor certified had until the end of...more

Privacy & Cybersecurity Update - September 2015

Skadden, Arps, Slate, Meagher & Flom LLP on 10/1/2015

Adviser to European Court of Justice Says US-EU Safe Harbor Should Be Declared Invalid - An advisory opinion issued by the advocate general to the European Court of Justice states that the U.S.-EU Safe Harbor should be...more

24 Results

View per page

Page: of 1

European Union › Enforcement Actions › CNIL

"My best business intelligence, in one easy email…"