CNIL fines Infogreffe 250,000 euros
Following a complaint, the CNIL carried out an online investigation of the infogreffe.fr website, which allows users to consult legal information on companies and order documents certified by the commercial court registries. The investigations focused in particular on the data retention periods defined and the security measures implemented by the economic interest group INFOGREFFE, which provides the legal and official information publishing service on companies via the website.
During its investigations, the CNIL noted several infringements concerning the processing of personal data of the service’s users (people who have created an account to view or order an act and subscribers with an annual subscription).
On the basis of these findings, the restricted committee (the CNIL body responsible for imposing sanctions) issued a fine of 250,000 euros on INFOGREFFE, and decided to make it public. This decision was taken in cooperation with the other European authorities concerned, as user accounts were created from all EU Member States.
Source: INFOGREFFE fined 250,000 euros | CNIL
