Loading

Tag: CNIL

Tag: CNIL

CNIL fined Cegedim Santé €800,000 for unlawful processing of sensitive health data

CNIL imposed a €800,000 fine on Cegedim Santé for the unauthorized and unlawful processing of sensitive health data.   In 2021, Cegedim Santé, a company specializing in management software for general practitioners and health centers, came under scrutiny from the French data protection authority, CNIL. The company provides software to around 25,000 medical practices and

Recommendations on the development of AI systems from European DPAs

DPAs across Europe have provided useful recommendations for organisations involved in the development and deployment of AI systems, aiding these organisations to remain in compliance with the GDPR and other regulations applicable to AI systems.    The French data protection authority, CNIL recently published its first recommendations on the development of AI systems. These recommendations

Unlawful use of data results in significant fine for canvassing company

Unlawful use of data results in significant fine for canvassing company A company was fined by CNIL for unlawfully using data obtained from a data broker for commercial prospecting purposes.    On April 4, 2024, the French data protection authority, CNIL, imposed a significant fine of 525,000 euros on the company HUBSIDE.STORE. The fine was

AI action plan outlined by CNIL

The French data protection authority, CNIL has outlined an AI action plan to guide businesses and organisations that are developing AI systems.   The French data protection authority, CNIL, has published a strategic plan on artificial intelligence (AI) to provide guidance to businesses and organisations that are developing AI systems. The plan outlines the principles

CNIL selects three digital companies for an enhanced support program on data protection projects

CNIL selects three digital companies for an enhanced support program to promote innovative projects in data protection and privacy.   The French data protection authority, CNIL, has selected three digital companies for its Enhanced Support program: Contentsquare, Hugging Face and Lifen. The program aims to support innovative projects in the field of data protection and

Creation of an artificial intelligence department at CNIL

The CNIL has created an artificial intelligence department and is launching a two-year project using artificial intelligence.  The CNIL of France has created an artificial intelligence department and is launching a two-year project using artificial intelligence. The aim of this venture is to establish a regulatory framework for using AI in Europe. While preparing for

CNIL fines TikTok over cookie consent violations

TikTok was recently hit with a fine of 5 million euros from CNIL of France over cookie consent violations.   Following a series of investigations on the TikTok.com website between May 2020 and June 2022, TikTok has been hit with a €5 million fine for cookie consent violations. CNIL concluded that the refusal mechanism for

Cookie consent violations lead to a fine of 60 million euros for Microsoft

Microsoft was recently hit with a fine of 60 million euros from CNIL of France for various cookie consent violations.   Following several investigations into the company regarding cookies deposited via bing.com, CNIL has imposed a fine of €60 million on Microsoft. The investigations were spurred by complaints about the conditions for depositing cookies on

Previous Standard Contractual Clauses can no longer be used: CNIL issues reminder

CNIL of France recently issued a reminder that the previous Standard Contractual Clauses can no longer be used for the transfer of data outside of the EU. CNIL of France has recently issued a reminder that the old Standard Contractual Clauses (SCCs) can no longer be used, as of 27th December. Data exporters and importers

Electric company was fined by CNIL over commercial prospecting

French electric company EDF was fined by the CNIL for commercial prospecting and other GDPR violations.   The French electric company EDF has recently been fined a total of €600,000 after being found guilty of several GDPR violations. According to this report from the CNIL of France, the company was found guilty of commercial prospecting