France
AMERICAN EXPRESS CARTE FRANCE
1,500,000 €
GDPR enforcement action by French Data Protection Authority (CNIL) on 2025-11-27.
Rank · Sector
#22
of 322 in Finance, Insurance and Consulting
Rank · France
#21
of 74
Rank · All fines
#142
of 3,050
Case details
- Authority
- French Data Protection Authority (CNIL)
- Date
- 2025-11-27
- Controller / Processor
- AMERICAN EXPRESS CARTE FRANCE
- Sector
- Finance, Insurance and Consulting
- Quoted Articles
- Art. 82 loi Informatique et Libertés
- Type of violation
- Insufficient legal basis for data processing
Summary
The French DPA has imposed a fine of EUR 1,500,000 on AMERICAN EXPRESS CARTE FRANCE. The controller used excessive cookies on its website and failed to adequately inform data subjects about them.
Open original source
Links to the regulator's original publication or another source.
Related fines
France
2025-09-01
200,000,000 €
ETid-2862
GOOGLE LLC
Media, Telecoms and Broadcasting
France
2025-09-01
150,000,000 €
ETid-2864
INFINITE STYLES SERVICES CO. LIMITED
Industry and Commerce
France
2025-09-01
125,000,000 €
ETid-2863
GOOGLE IRELAND LIMITED
Media, Telecoms and Broadcasting
France
2021-12-31
90,000,000 €
ETid-978
Google LLC
Media, Telecoms and Broadcasting
France
2021-12-31
60,000,000 €
ETid-979
Google Ireland Ltd.
Media, Telecoms and Broadcasting
France
2021-12-31
60,000,000 €
ETid-980
Facebook Ireland Ltd.
Media, Telecoms and Broadcasting