France

FNAC DIRECT

1,000,000 €

GDPR enforcement action by French Data Protection Authority (CNIL) on 2026-10-22.

Rank · Sector

#38

of 657 in Industry and Commerce

Rank · France

#25

of 78

Rank · All fines

#187

of 3,267

Case details

Authority: French Data Protection Authority (CNIL)
Date: 2026-10-22
Controller / Processor: FNAC DIRECT
Sector: Industry and Commerce
Quoted Articles: Art. 82 French Data Protection Act
Type of violation: Insufficient legal basis for data processing

Summary

The French DPA has imposed a fine of EUR 1,000,000 on FNAC DIRECT. On 15 September 2023, a complaint was filed with the CNIL regarding the controller's app. The complaint stated that the app was using tracking technology without the consent of the data subjects. The CNIL then launched an investigation into the app and found that, even though data subjects had not consented to tracking activities, the app was still tracking their usage behaviour. This data was then used to personalise content and train a recommendation algorithm. FNAC Darty Participations et Services and FNAC Direct are joint controllers regarding the relevant application, as stated in the app's privacy policy. FNAC Darty Participations et Services was also fined (ETid).

Open original source Links to the regulator's original publication or another source.