The CJEU has decided that the maximum thresholds for GDPR fines should be calculated using the global turnover of the broader corporate group, not solely the infringing entity....more
2/20/2025
/ Affiliates ,
Civil Monetary Penalty ,
Corporate Fines ,
Court of Justice of the European Union (CJEU) ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
EU ,
General Data Protection Regulation (GDPR) ,
Multinationals ,
Personal Data ,
Privacy Laws
The French Data Protection Authority imposed a €280,000 fine for GDPR infringements and a €100,000 fine for violation of French cookie rules.
On 11 May 2023 the French Data Protection Authority (the CNIL) handed down its...more
6/12/2023
/ CNIL ,
Consent ,
Cookies ,
Corporate Fines ,
Enforcement Actions ,
EU ,
France ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Member State ,
Personal Data ,
PHI ,
Risk Management ,
Statutory Violations ,
Websites
The CNIL has imposed a €250,000 fine on an online retailer for GDPR infringements in cooperation with other EU supervisory authorities.
Founded in 2006 and headquartered in France, Spartoo SAS (Spartoo) is one of the...more
The Council decision contains useful considerations and clarifications on the “one-stop shop” mechanism, transparency obligations, and consent for targeted advertising.
On 19 June 2020, France’s Highest Administrative...more
7/6/2020
/ Android ,
CNIL ,
Consent ,
Corporate Fines ,
Enforcement Actions ,
EU ,
EU Data Protection Laws ,
France ,
General Data Protection Regulation (GDPR) ,
Google ,
Personal Data ,
Regulatory Violations
The closure of four cases involving targeted advertising provides lessons for navigating compliance standards under the GDPR.
The recent closure of cases brought by the French Data Protection Authority (CNIL) against four...more
3/28/2019
/ Advertising ,
Behavioral Advertising ,
CNIL ,
Consent ,
Corporate Counsel ,
Data Protection ,
e-Privacy Directive ,
Enforcement Actions ,
European Data Protection Board (EDPB) ,
France ,
General Data Protection Regulation (GDPR) ,
Geolocation ,
Ireland ,
Personal Data ,
UK