🇪🇸 Spain: When a postal service provider abandons letters in a field...
Confidentiality & Security | 26/03/2025
📄 Facts: • September 28, 2022: 📌 Police in La Palma discovered 1,404 letters abandoned in a field. 📌 A complaint was filed with the AEPD. The provide...
Read more
🇪🇸 No Facial Recognition System for Work Time Control!
Biometrics & Video Surveillance | 26/03/2025
AEPD Sanctions Cartonajes Bañeres S.A. for GDPR Violations 🇪🇸 Source : PS 00361-2023

The Spanish Data Protection Agency (AEPD) has imposed a €220,00...
Read more
🇪🇸 An Employer Cannot Publish Personal Information About a Former Employee in Comments 🇪🇸
Confidentiality & Security, Legal basis | 26/03/2025
Source : PS-00395-2021

👁️ Facts: In response to negative reviews left by customers on Google, a Spanish café published the personal data of its form...
Read more
🇪🇸 When a Spanish Employer Accidentally Shares the Payslips of 446 Employees 🇪🇸
Confidentiality & Security | 25/03/2025
🇪🇸 Source: PS-00238-2024

👕👗 Facts: A former employee of a clothing brand requested information about their payslip for July 2022. In response, the e...
Read more
🇸🇮 Video Surveillance: No Employee Monitoring and Live Image Broadcasting 🇸🇮
Biometrics & Video Surveillance | 25/03/2025
Continuous video surveillance of a pizzeria kitchen

👁️ Facts: The Slovenian Supervisory Authority (SA) conducted an investigation in 2023 at a DODO P...
Read more
🚨 Company Fined for Abusive Marketing and Collection of Sensitive Data 🚨
Data Subject Rights | 25/03/2025
In 2019, the French Data Protection Authority (CNIL) imposed a fine of €500,000 on a company specializing in home thermal insulation for improper mark...
Read more
Lack of Security and Failure to Report Data Breach ⚕️
Confidentiality & Security | 25/03/2025
Administrative sanction against two doctors of 3,000 and 6,000 Euros, following a data leak.

Source: SAN 2019-014

🔍 Context: Thousands of medical im...
Read more
🇫🇷 Excessive data collection by an online clairvoyance company
Retention & Minimisation, Confidentiality & Security | 25/03/2025
🔮 CNIL Fines an Online Fortune-Telling Company Source : SAN 2023-008 of June 8, 2023

Violations:



🛑 EXCESSIVE DATA COLLECTION

📋 CONSENT

💉 SENSI...
Read more
🇫🇷 Exercise of the Right of Access: Medical Data 🩺 🇫🇷
Data Subject Rights | 25/03/2025
The CNIL has fined a dentist 10,000 euros. Source : SAN 2017-008

⚠️ Non-transmission of a medical file within the prescribed time limits The regula...
Read more
🇵🇱 Ban on using personal data for testing 🇵🇱
Subcontracting, Confidentiality & Security | 25/03/2025
The Polish DPA sanctions a data controller and its processor

 Source : DKN 5130.2215.2020

𝗙𝗮𝗰𝘁𝘀

The Polish Data Protection Authority (DPA) imposed ...
Read more
👠🇫🇷 An E-Commerce Website Fined for Excessive Data Collection 🇫🇷👠
Retention & Minimisation, Confidentiality & Security | 25/03/2025
💸 The CNIL has imposed a €250,000 fine 💸

Facts: As part of evaluating and training its employees, the e-commerce website recorded customer service ca...
Read more
🔐 🇫🇷 No Biometrics for Monitoring Employees’ Working Hours! 🇫🇷 🔐
Biometrics & Video Surveillance | 25/03/2025
The CNIL has fined a company €10,000 for illegal use of biometric data.

Context

In 2017, a company was sanctioned for installing a biometric fingerp...
Read more