Be called back
Demonstration
To process your request, we need to process your personal data. Find out more about the processing of your personal data here.
Free fined 300,000 euros for non-compliance with GDPR
After receiving a number of complaints against mobile operator Free, the CNIL (National Commission for Information Technology and Civil Liberties) decided to carry out checks, which revealed a number of shortcomings.
Firstly, with regard to complaints, users found it difficult to consider requests for access to and deletion of their personal data.
The audits that were conducted revealed violations of the rights of the individuals concerned, particularly regarding the right of access and the right to erasure, which users had been experiencing issues with. In addition, there were also breaches of personal data security, such as weak password strength, for example.
Based on the foregoing, the enforcement division of the CNIL (National Commission for Information Technology and Civil Liberties) imposed a fine of 300,000 euros on Free. The fine was made public.
Furthermore, the mobile phone operator is required to comply with its users' access requests and to justify its decision within three months of notification of the deliberation.
Violations of the Data Protection Act
Failure to respect the right of access
(art. 12 and 15 of the GDPR)
Failure to respect the right to erasure
(art. 12 and 21 of the GDPR)
Failure to ensure the security of personal data
(art. 32 of the GDPR)
