The French data protection authority CNIL closed the injunction it issued on 15 May 2025 after the company demonstrated measures to verify the validity of consent obtained by its data‑broker partners. The original sanction included a €900,000 fine and a daily penalty of €10,000 for non‑compliance. CNIL reminded the company remains responsible for ensuring valid consent for its electronic prospecting activities.
Why it matters: The decision underscores CNIL's enforcement of GDPR consent requirements for commercial prospecting and the accountability of controllers for partner‑collected data.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
