French DPA issues EUR 1.75 million penalty against AG2R LA MONDIALE
In 2019 when French data protection authority CNIL carried out an inspection at the AG2R LA MONDIALE group, it found that the company responsible for coordinating the group’s provident, dependency, health, savings and supplementary pension insurance activities, was keeping data on millions of people for an excessive period of time and was not complying with its information obligations in the context of telephone canvassing campaigns.
Based on the findings the CNIL considered that the company had failed to comply with two fundamental obligations under the GDPR. It therefore imposed a fine of 1,750,000 euros.
Source: 1.75 million penalty against AG2R LA MONDIALE
August 28, 2021 @ 18:16
Always interesting to see larger fines unrelated to security breaches. A shame there’s a lack of consistency in fines and legal action across Europe.