On 9 February 2026, the Commission Nationale de l’Informatique et des Libertés (CNIL) published its 2025 report on its enforcement action. Beyond the €487 million – in cumulative fines – largely driven (unsurprisingly) by two sanctions related to cookies, another trend deserves attention: the growing numbers of fines for failure to ensure the security of personal
Latest Post
More Posts
Global AI regulation
12th Annual European Data Protection Conference
The right of access to personal data: a more extensive view?
European Commission adopts its adequacy decision for the EU-US Data Privacy Framework
European rulings on the use of Google Analytics and how it may affect your business
How to process employees’ health data in France after lockdown: dos and don’ts for employers
StopCovid: the French contact-tracing app
Irish data protection authority launches new cookie guidance and indicates cookie investigations are on the horizon
The French data protection authority (CNIL) adopts a new standard on whistleblowing systems
Subscribe: Subscribe via RSS
Blogs
Firm/Org