{"id":1744,"date":"2023-12-05T13:39:36","date_gmt":"2023-12-05T12:39:36","guid":{"rendered":"https:\/\/blog.eprivacy.eu\/?p=1744"},"modified":"2023-12-05T13:39:36","modified_gmt":"2023-12-05T12:39:36","slug":"french-data-protection-supervisory-authority-imposes-fine-on-pay-tv-provider-reason-several-gdpr-violations","status":"publish","type":"post","link":"https:\/\/blog.eprivacy.eu\/?p=1744","title":{"rendered":"French data protection supervisory authority imposes fine on pay-TV provider &#8211; reason: several GDPR violations"},"content":{"rendered":"\n<p>Prior to the evaluation by the CNIL, the French data protection supervisory authority&nbsp;had received several complaints from individuals. They accused GROUP CANAL+ \u2013&nbsp;a publisher of channels and provider of pay-TV services in France \u2013 of difficulties in enforcing their rights.<\/p>\n\n\n\n<p>The infringements related to a wide variety of GDPR requirements, including the<\/p>\n\n\n\n<ul><li>Failure to comply with the obligation to obtain the consent of individuals to receive commercial prospecting by electronic means (art. L. 34-5 of the French Postal and Communications Code (CPCE) and art. 7 GDPR)<\/li><li>Failure to provide information (art. 13 and 14 GDPR) and to safeguard the exercise of rights (art. 12 and 15 GDPR)<\/li><li>Lack of a contractual framework for processing by a processor (art. 28(3) GDPR)<\/li><li>Failure to ensure the security of personal data (art. 32 GDPR)<\/li><li>Failure to comply with the obligation to notify the CNIL of a data breach (art. 33 GDPR)&nbsp;<\/li><\/ul>\n\n\n\n<p>On 12 October 2023 CNIL imposed a fine of EUR 600,000.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Prior to the evaluation by the CNIL, the French data protection supervisory authority&nbsp;had received several complaints from individuals. They accused GROUP CANAL+<\/p>\n<p class=\"link-more\"><a class=\"myButt \" href=\"https:\/\/blog.eprivacy.eu\/?p=1744\">Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/1744"}],"collection":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1744"}],"version-history":[{"count":1,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/1744\/revisions"}],"predecessor-version":[{"id":1745,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/1744\/revisions\/1745"}],"wp:attachment":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1744"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1744"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1744"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}