France

TotalEnergies Electricité et Gaz France

1,000,000 €

GDPR enforcement action by French Data Protection Authority (CNIL) on 2022-06-23.

Rank · Sector

#29

of 167 in Transportation and Energy

Rank · France

#22

of 74

Rank · All fines

#168

of 3,050

Case details

Authority: French Data Protection Authority (CNIL)
Date: 2022-06-23
Controller / Processor: TotalEnergies Electricité et Gaz France
Sector: Transportation and Energy
Quoted Articles: Art. 14 GDPR, Art. 15 GDPR, Art. 21 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The French DPA has imposed a fine of EUR 1,000,000 on TotalEnergies Electricité et Gaz France.

As part of its investigation, the DPA found that the controller had violated its information obligations under Art. 14 GDPR by failing to provide data subjects with sufficient information during telephone contact about the processing of their personal data for advertising purposes. In addition, the company did not comply with the data subjects' requests to object to the processing of their personal data for advertising purposes. Furthermore, the controller did not respond to requests from data subjects in a timely manner, contrary to its obligation under Art. 12 GDPR.

Open original source Links to the regulator's original publication or another source.