GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Social Housing Non-Profit Organisation

Country
France
Fine
75,000 EUR
Date
2018-06-21
Sector
Business Sector
Articles
pre-GDPR

Fine

June 2017: The investigation by the CNIL showed that changing the path of the URL of the company's website allowed access to documents (tax assessment notices, passports, identity cards, residence permits and pay slips) uploaded by other users. The company was fined under Article 34 of the French Data Protection Act for failing to take adequate measures to ensure the security of users' personal data. Authority: CNIL - French Data Protection Autority (National Commission for Informatics and Liberties)

Source: https://www.legifrance.gouv.fr/affichCnil.do?id=CNILTEXT000037110598

Reported by: Alain Bensoussan Avocats Lexing