France

Company

—

GDPR enforcement action by French Data Protection Authority (CNIL) on 2024-06-05.

Case details

Authority: French Data Protection Authority (CNIL)
Date: 2024-06-05
Controller / Processor: Company
Sector: Not assigned
Quoted Articles: Art. 5 (1) a) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The French DPA has imposed a fine on a company. The company published a promotional video on its website and social networks in which images of patient files of one of its customers were shown. The images, which made personal data such as the name of the data subject visible, were used without their consent.

Open original source Links to the regulator's original publication or another source.