The National Commission for Computing and Freedoms (CNIL), responsible for monitoring compliance with regulations relating to the protection of personal data, sanctioned a company specializing in real estate with a fine of € 400.000 for breach of data security and non-compliance with retention periods, within the framework of the GDPR regulation.

Our expert, Florence Schlegel, recalls that in its control strategy and its desire to make stakeholders accountable, the CNIL is stepping up its controls (310 in 2018) and no longer hesitates to heavily sanction companies.

A reminder to all business leaders to ensure proper compliance with their GDPR practice!