News

🇪🇸 Spain: When a postal service provider abandons letters in a field...

Confidentiality & Security | 26/03/2025

📄 Facts: • September 28, 2022: 📌 Police in La Palma discovered 1,404 letters abandoned in a field. 📌 A complaint was filed with the AEPD. The provide...

Read more

🇪🇸 No Facial Recognition System for Work Time Control!

Biometrics & Video Surveillance | 26/03/2025

AEPD Sanctions Cartonajes Bañeres S.A. for GDPR Violations 🇪🇸 Source : PS 00361-2023 The Spanish Data Protection Agency (AEPD) has imposed a €220,00...

Read more

🇪🇸 An Employer Cannot Publish Personal Information About a Former Employee in Comments 🇪🇸

Confidentiality & Security, Legal basis | 26/03/2025

Source : PS-00395-2021 👁️ Facts: In response to negative reviews left by customers on Google, a Spanish café published the personal data of its form...

Read more

🇪🇸 When a Spanish Employer Accidentally Shares the Payslips of 446 Employees 🇪🇸

Confidentiality & Security | 25/03/2025

🇪🇸 Source: PS-00238-2024 👕👗 Facts: A former employee of a clothing brand requested information about their payslip for July 2022. In response, the e...

Read more

🇸🇮 Video Surveillance: No Employee Monitoring and Live Image Broadcasting 🇸🇮

Biometrics & Video Surveillance | 25/03/2025

Continuous video surveillance of a pizzeria kitchen 👁️ Facts: The Slovenian Supervisory Authority (SA) conducted an investigation in 2023 at a DODO P...

Read more

🚨 Company Fined for Abusive Marketing and Collection of Sensitive Data 🚨

Data Subject Rights | 25/03/2025

In 2019, the French Data Protection Authority (CNIL) imposed a fine of €500,000 on a company specializing in home thermal insulation for improper mark...

Read more

Lack of Security and Failure to Report Data Breach ⚕️

Confidentiality & Security | 25/03/2025

Administrative sanction against two doctors of 3,000 and 6,000 Euros, following a data leak. Source: SAN 2019-014 🔍 Context: Thousands of medical im...

Read more

🇫🇷 Excessive data collection by an online clairvoyance company

Retention & Minimisation, Confidentiality & Security | 25/03/2025

🔮 CNIL Fines an Online Fortune-Telling Company Source : SAN 2023-008 of June 8, 2023 Violations: 🛑 EXCESSIVE DATA COLLECTION 📋 CONSENT 💉 SENSI...

Read more

🇫🇷 Exercise of the Right of Access: Medical Data 🩺 🇫🇷

Data Subject Rights | 25/03/2025

The CNIL has fined a dentist 10,000 euros. Source : SAN 2017-008 ⚠️ Non-transmission of a medical file within the prescribed time limits The regula...

Read more

🇵🇱 Ban on using personal data for testing 🇵🇱

Subcontracting, Confidentiality & Security | 25/03/2025

The Polish DPA sanctions a data controller and its processor  Source : DKN 5130.2215.2020 𝗙𝗮𝗰𝘁𝘀 The Polish Data Protection Authority (DPA) imposed ...

Read more

👠🇫🇷 An E-Commerce Website Fined for Excessive Data Collection 🇫🇷👠

Retention & Minimisation, Confidentiality & Security | 25/03/2025

💸 The CNIL has imposed a €250,000 fine 💸 Facts: As part of evaluating and training its employees, the e-commerce website recorded customer service ca...

Read more

🔐 🇫🇷 No Biometrics for Monitoring Employees’ Working Hours! 🇫🇷 🔐

Biometrics & Video Surveillance | 25/03/2025

The CNIL has fined a company €10,000 for illegal use of biometric data. Context In 2017, a company was sanctioned for installing a biometric fingerp...

Read more

Explore all our areas of expertise: