Sanction RGPD French Data Protection Authority (CNIL) — NEXPUBLICA FRANCE : 1,7 M€ (2025)
- Autorité de contrôle
- French Data Protection Authority (CNIL)
- Pays
- France
- Entreprise / secteur
- NEXPUBLICA FRANCE
- Montant de l'amende
- 1,7 M€
- Date de la décision
- 22 décembre 2025
- Fondement juridique
- Art. 32
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The French DPA has imposed a fine of EUR 1,700,000 on NEXPUBLICA FRANCE. The controller, who was a software developer, created and offered a software package designed to manage user relations in the social action sector. Insufficient technical and organisational measures resulted in a cyber incident affecting the software.