Loading

Tag: Fine

Tag: Fine

CNIL fined Cegedim Santé €800,000 for unlawful processing of sensitive health data

CNIL imposed a €800,000 fine on Cegedim Santé for the unauthorized and unlawful processing of sensitive health data.   In 2021, Cegedim Santé, a company specializing in management software for general practitioners and health centers, came under scrutiny from the French data protection authority, CNIL. The company provides software to around 25,000 medical practices and

Clearview AI faces a punishment from Dutch DPA for Illegal Facial Recognition Data Collection

Clearview AI faces a punishment of 30.5 million euros from the Dutch DPA for Illegal Facial Recognition Data Collection.   Clearview AI faces a punishment of 30.5 million euros from the Dutch Data Protection Authority (AP) and up to 5 million euros in penalty payments. The US based company provides services using its facial recognition

Provisional decision from the ICO to fine a software company following a ransomware attack

Following a ransomware attack, the ICO has made a provisional decision to impose a £6 million fine, and urged organisations to secure external connections.    The Information Commissioner’s Office (ICO) released a statement earlier this month, announcing that they have issued a provisional decision to fine Advanced Computer Software Group Ltd (Advanced), a healthcare technology

Right to be forgotten: how unfit data deletion protocol resulted in a fine from Dutch DPA

A company was fined by the Dutch Data Protection Agency for failure to delete data after receiving such requests, thereby violating individuals’ right to be forgotten under the GDPR.   The Dutch Data Protection Authority (DPA) has imposed a fine of 6,000 euros on a recruitment company. The company was fined for failing to delete

Unlawful use of data results in significant fine for canvassing company

Unlawful use of data results in significant fine for canvassing company A company was fined by CNIL for unlawfully using data obtained from a data broker for commercial prospecting purposes.    On April 4, 2024, the French data protection authority, CNIL, imposed a significant fine of 525,000 euros on the company HUBSIDE.STORE. The fine was

ICO fines two UK companies £180,000 for unlawful marketing calls

The ICO fines two UK companies for breaching PECR and launches video guides for small businesses.   The UK Information Commissioner’s Office (ICO) recently fined two companies a total of £180,000 for making unlawful marketing calls. The companies, Ice Telecommunications Ltd and UK Direct Business Solutions Ltd, were found to have made thousands of unsolicited

Spam emails result in a £130,000 fine from the ICO

The ICO has fined an online recruitment firm £130,000 after several spam emails were sent out to individuals over a one year period.    A UK-based online recruitment firm, Join the Triboo Limited, has been fined £130,000 by the ICO for sending 107 million spam emails between October 2019 and October 2020 to individuals seeking

The Importance of the GDPR in 2022: Continuous Regulatory Enforcement

The importance of the GDPR is not going away as we witness continuous regulatory enforcement through significant fines four years after the start of its application.    Since the GDPR’s inception in 2016 and its implementation in 2018, there have been concerns about its status and applicability. The General Data Protection Regulation or GDPR is

CNIL fines TikTok over cookie consent violations

TikTok was recently hit with a fine of 5 million euros from CNIL of France over cookie consent violations.   Following a series of investigations on the TikTok.com website between May 2020 and June 2022, TikTok has been hit with a €5 million fine for cookie consent violations. CNIL concluded that the refusal mechanism for

Electric company was fined by CNIL over commercial prospecting

French electric company EDF was fined by the CNIL for commercial prospecting and other GDPR violations.   The French electric company EDF has recently been fined a total of €600,000 after being found guilty of several GDPR violations. According to this report from the CNIL of France, the company was found guilty of commercial prospecting