ThreatCluster

CNIL Fines Company €3.5 Million for Data Transfer Violations

First seen 22 Jan 2026, 21:42 UTC Cnil.FrMondaq 33

Article Content

Browse articles
ThreatCluster

On December 30, 2025, the CNIL fined a company €3.5 million for transferring loyalty program members' data to a social network for advertising without valid consent. The investigation revealed non-compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Timeline

2025-12-30
CNIL imposes €3.5 million fine on company for data transfer violations