CNIL sanction: 400,000€ GDPR fine for COSMOSPACE and TELEMAQUE

Sanctions CNIL Alert 🔔: 400,000€ fine GDPR

💶 COSMOSPACE sentenced to 250,000 € 🚔
💶 TELEMACHUS sentenced to 150,000 € 🚔

🗞 The CNIL has imposed fines for significant violations of GDPR rules.

❌ Excessive data retention:
COSMOSPACE kept its customers' data for 6 years, while 3 years is recommended.
TELEMAQUE stored this data without sorting or access restriction, even after the end of the commercial relationship.

❌ Collection of sensitive data without explicit consent:
Information about clients' health, sexual orientation and religious beliefs was collected without clear consent.

❌ Non-compliant commercial prospecting:
Promotional messages were sent to people without their explicit consent.

❌ Systematic recording of telephone calls (COSMOSPACE):
All calls were recorded excessively, beyond what is necessary for training and quality of service.

Learn more

✅ How could this sanctions have been helped to avoid:

We offer an all-in-one solution for GDPR compliance with comprehensive GDPR software and personalized support from DPO Coaches. With automated compliance management and best practice tracking, these companies could have:

1️⃣ Optimize data retention period in accordance with legal requirements.
2️⃣ Collect and manage sensitive data with the explicit consent of users.
3️⃣ Guarantee the compliance of prospecting campaigns by validating consent practices.
4️⃣ Limit telephone recordings to only necessary cases, thereby reducing risks.

To ensure your business is GDPR compliant, assess your situation with our free GDPR Diag below💻