CNIL Fines French Real Estate Service Provider for Data Security and Retention Failures
On June 6, 2019, the French Data Protection Authority (the “CNIL”) announced that it levied a fine of €400,000 on SERGIC, a French real estate service provider, for failure to (1) implement appropriate security measures and (2) define data retention periods for the personal data of unsuccessful rental candidates.
Source: CNIL Fines French Real Estate Service Provider for Data Security and Retention Failures