The French Supervisory Authority Fines The Economic Interest Group INFOGREFFE EUR 250.000

Following a complaint, the CNIL ("French Supervisory Authority") carried out an online investigation of the infogreffe.fr website, which allows users to consult legal information on companies and order documents certified by the commercial court registries.

The investigations focused in particular on the data retention periods defined and the security measures implemented by the economic interest group INFOGREFFE, which provides the legal and official information publishing service on companies via the website.

Based on (i) failure to comply with the obligation to keep data for a period of time proportionate to the purpose of the processing (Article 5.1.e of the GDPR), (ii) failure to comply with the obligation to ensure the security of personal data (Article 32 of the GDPR) findings, the restricted committee (the CNIL body responsible for imposing sanctions) issued a fine of 250.000 Euros on INFOGREFFE and decided to make it public.

This decision was taken in cooperation with the other European authorities concerned, as user accounts were created from all EU Member States.

You can reach further information here.

Kind regards,

Zumbul Attorneys at Law

info@zumbul.av.tr