Sanction RGPD French Data Protection Authority (CNIL) — CALOGA : 80 k€ (2025)
- Autorité de contrôle
- French Data Protection Authority (CNIL)
- Pays
- France
- Entreprise / secteur
- CALOGA
- Montant de l'amende
- 80 k€
- Date de la décision
- 15 mai 2025
- Fondement juridique
- Art. 5 (1) e), Art. 6
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The French DPA imposed a fine of EUR 80,000 on CALOGA. The controller is a company obtaining data from data brokers to use those for marketing purposes. The DPA found multiple infingements against the GDPR and the French Post and Electronic Communications Code. The controller failed to have sufficient legal basis for transferring data to third parties for advertising purposes. Additionally, the controller retained data longer than necessary.