French hotel group ACCOR fined 600,000 euros
The French data protection authority CNIL found French hotel group ACCOR to be in breach of French law and observed four breaches of the GDPR, and therefore issued a fine of 600,000 euros.
The CNIL and several other European data protection authorities have received complaints about difficulties encountered by individuals in exercising their rights with ACCOR, a French hotel group. The investigations carried out by the CNIL revealed that when an individual made a reservation directly with the staff of a hotel or on the website of one of the ACCOR group’s hotel brands, they were automatically sent a newsletter containing commercial offers from partners, as the box relating to consent to receive the newsletter was pre-ticked by default.
Source: Commercial prospecting and rights of individuals: ACCOR fined 600,000 euros | CNIL