GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Multinational Transportation Network Company

Country
France
Fine
400,000 EUR
Date
2018-12-19
Sector
Business Sector
Articles
pre-GDPR

Fine

In November 2017, the company revealed to the press that in 2016, two individuals succeeded in stealing the personal data of 57 million users of its services by accessing a server on which the personal data is stored using credentials accessible on a software development platform. Following the investigation, the CNIL decided that the company had failed to fulfil its obligations to ensure the security of its users' personal data. Authority: CNIL - French Data Protection Autority (National Commission for Informatics and Liberties)