{"id":2011,"date":"2019-06-14T11:19:39","date_gmt":"2019-06-14T09:19:39","guid":{"rendered":"https:\/\/taoma-partners.fr\/en\/?p=2011"},"modified":"2019-06-14T11:19:39","modified_gmt":"2019-06-14T09:19:39","slug":"french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court","status":"publish","type":"post","link":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/","title":{"rendered":"French Supervisory authority sanctions: no obligation of prior formal notice confirmed by the Administrative Supreme Court"},"content":{"rendered":"<p><span style=\"color: #000000\">In a decision of April 17 2019, the French supreme administrative authority refused to overturn the sanctions imposed by the CNIL (the French data protection authority) on the OPTICAL CENTER company on the grounds that they were not preceded by a formal notice allowing the company to correct the problems.<\/span><\/p>\n<p><span style=\"color: #000000\">In 2017, a CNIL investigation initiated following several complaints about OPTICAL CENTER revealed that simply entering URLs in a browser allowed access to many invoices and purchase orders from the company&#8217;s customers because due to access not being restricted by connecting to a personal space.<\/span><\/p>\n<p><span style=\"color: #000000\">The CNIL then took the decision to impose a fine of 250,000 euros for this serious security breach, which violated Article 34 of the French Data Protection Act\u00a0[1], without any sort of formal notice allowing the company to correct the errors and even though the company had already taken the necessary measures to correct the problem.<\/span><\/p>\n<p><span style=\"color: #000000\">This decision was referred to the Conseil d&#8217;Etat which, in its judgment of April 17 2019, confirmed the decision and reminded that the formal notice is not a mandatory step\u00a0 before imposing sanctions, and that Article 45 of the law of 6 January 1978 provides that &#8220;Where the breach found cannot be brought into conformity in the context of a formal notice, the restricted formation may pronounce, without prior notice and after a contradictory procedure, the sanctions provided for&#8221;.<\/span><\/p>\n<p><span style=\"color: #000000\">The Conseil d\u2019Etat concludes from this that the CNIL may overlook the formal notice stage when it is clearly unnecessary; either when the breach cannot be remedied or, as in the present case, when it has already been remedied.<\/span><\/p>\n<p><span style=\"color: #000000\">However, the Conseil d&#8217;\u00c9tat reduced OPTICAL CENTER&#8217;s penalty, ruling that the CNIL, not taking into account the company&#8217;s promptness to react to its requests, imposed a disproportionate penalty; the latter will therefore be reduced to 200,000 euros.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #0000ff\"><a style=\"color: #0000ff\" href=\"https:\/\/www.conseil-etat.fr\/fr\/arianeweb\/CE\/decision\/2019-04-17\/422575\" target=\"_blank\" rel=\"noopener\">Read the full decision here (in French)<\/a><\/span><\/p>\n<p><span style=\"color: #000000\">[1]\u00a0Loi n\u00b0 78-17 du 6 janvier 1978 relative \u00e0 l&#8217;informatique, aux fichiers et aux libert\u00e9s<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In a decision of April 17 2019, the French supreme administrative authority refused to overturn the sanctions imposed by the CNIL (the French data protection authority) on the OPTICAL CENTER company on the grounds that they were not preceded by a formal notice allowing the company to correct the problems. In 2017, a CNIL investigation [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":1994,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,38],"tags":[31,26,25],"class_list":["post-2011","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-gdpr","category-personnal-data","tag-data-processings","tag-gdpr","tag-personal-data"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>French Supervisory authority sanctions: no obligation of prior formal notice confirmed by the Administrative Supreme Court - TAoMA Partners EN<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"French Supervisory authority sanctions: no obligation of prior formal notice confirmed by the Administrative Supreme Court - TAoMA Partners EN\" \/>\n<meta property=\"og:description\" content=\"In a decision of April 17 2019, the French supreme administrative authority refused to overturn the sanctions imposed by the CNIL (the French data protection authority) on the OPTICAL CENTER company on the grounds that they were not preceded by a formal notice allowing the company to correct the problems. In 2017, a CNIL investigation [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/\" \/>\n<meta property=\"og:site_name\" content=\"TAoMA Partners EN\" \/>\n<meta property=\"article:published_time\" content=\"2019-06-14T09:19:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/taoma-partners.fr\/en\/wp-content\/uploads\/sites\/2\/2019\/03\/Test.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1586\" \/>\n\t<meta property=\"og:image:height\" content=\"1125\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"teamtaomanews\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"teamtaomanews\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/\"},\"author\":{\"name\":\"teamtaomanews\",\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/#\\\/schema\\\/person\\\/95311d2e07ed0365f28a34a6b2658b99\"},\"headline\":\"French Supervisory authority sanctions: no obligation of prior formal notice confirmed by the Administrative Supreme Court\",\"datePublished\":\"2019-06-14T09:19:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/\"},\"wordCount\":334,\"image\":{\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2019\\\/03\\\/Test.jpeg\",\"keywords\":[\"data processings\",\"GDPR\",\"personal data\"],\"articleSection\":[\"GDPR\",\"Personal data\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/\",\"url\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/\",\"name\":\"French Supervisory authority sanctions: no obligation of prior formal notice confirmed by the Administrative Supreme Court - TAoMA Partners EN\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2019\\\/03\\\/Test.jpeg\",\"datePublished\":\"2019-06-14T09:19:39+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/#\\\/schema\\\/person\\\/95311d2e07ed0365f28a34a6b2658b99\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/#primaryimage\",\"url\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2019\\\/03\\\/Test.jpeg\",\"contentUrl\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2019\\\/03\\\/Test.jpeg\",\"width\":1586,\"height\":1125},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/2019\\\/06\\\/14\\\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"French Supervisory authority sanctions: no obligation of prior formal notice confirmed by the Administrative Supreme Court\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/\",\"name\":\"TAoMA Partners EN\",\"description\":\"TAoMA Partners EN\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/#\\\/schema\\\/person\\\/95311d2e07ed0365f28a34a6b2658b99\",\"name\":\"teamtaomanews\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b423c71e16ff9acc6dd9a68027a5935449271a7fe479a01a422671afef820a59?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b423c71e16ff9acc6dd9a68027a5935449271a7fe479a01a422671afef820a59?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b423c71e16ff9acc6dd9a68027a5935449271a7fe479a01a422671afef820a59?s=96&d=mm&r=g\",\"caption\":\"teamtaomanews\"},\"url\":\"https:\\\/\\\/taoma-partners.fr\\\/en\\\/author\\\/teamtaomanews\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"French Supervisory authority sanctions: no obligation of prior formal notice confirmed by the Administrative Supreme Court - TAoMA Partners EN","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/","og_locale":"en_US","og_type":"article","og_title":"French Supervisory authority sanctions: no obligation of prior formal notice confirmed by the Administrative Supreme Court - TAoMA Partners EN","og_description":"In a decision of April 17 2019, the French supreme administrative authority refused to overturn the sanctions imposed by the CNIL (the French data protection authority) on the OPTICAL CENTER company on the grounds that they were not preceded by a formal notice allowing the company to correct the problems. In 2017, a CNIL investigation [&hellip;]","og_url":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/","og_site_name":"TAoMA Partners EN","article_published_time":"2019-06-14T09:19:39+00:00","og_image":[{"width":1586,"height":1125,"url":"https:\/\/taoma-partners.fr\/en\/wp-content\/uploads\/sites\/2\/2019\/03\/Test.jpeg","type":"image\/jpeg"}],"author":"teamtaomanews","twitter_card":"summary_large_image","twitter_misc":{"Written by":"teamtaomanews","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/#article","isPartOf":{"@id":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/"},"author":{"name":"teamtaomanews","@id":"https:\/\/taoma-partners.fr\/en\/#\/schema\/person\/95311d2e07ed0365f28a34a6b2658b99"},"headline":"French Supervisory authority sanctions: no obligation of prior formal notice confirmed by the Administrative Supreme Court","datePublished":"2019-06-14T09:19:39+00:00","mainEntityOfPage":{"@id":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/"},"wordCount":334,"image":{"@id":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/#primaryimage"},"thumbnailUrl":"https:\/\/taoma-partners.fr\/en\/wp-content\/uploads\/sites\/2\/2019\/03\/Test.jpeg","keywords":["data processings","GDPR","personal data"],"articleSection":["GDPR","Personal data"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/","url":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/","name":"French Supervisory authority sanctions: no obligation of prior formal notice confirmed by the Administrative Supreme Court - TAoMA Partners EN","isPartOf":{"@id":"https:\/\/taoma-partners.fr\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/#primaryimage"},"image":{"@id":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/#primaryimage"},"thumbnailUrl":"https:\/\/taoma-partners.fr\/en\/wp-content\/uploads\/sites\/2\/2019\/03\/Test.jpeg","datePublished":"2019-06-14T09:19:39+00:00","author":{"@id":"https:\/\/taoma-partners.fr\/en\/#\/schema\/person\/95311d2e07ed0365f28a34a6b2658b99"},"breadcrumb":{"@id":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/#primaryimage","url":"https:\/\/taoma-partners.fr\/en\/wp-content\/uploads\/sites\/2\/2019\/03\/Test.jpeg","contentUrl":"https:\/\/taoma-partners.fr\/en\/wp-content\/uploads\/sites\/2\/2019\/03\/Test.jpeg","width":1586,"height":1125},{"@type":"BreadcrumbList","@id":"https:\/\/taoma-partners.fr\/en\/2019\/06\/14\/french-supervisory-authority-sanctions-no-obligation-of-prior-formal-notice-confirmed-by-the-administrative-supreme-court\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/taoma-partners.fr\/en\/"},{"@type":"ListItem","position":2,"name":"French Supervisory authority sanctions: no obligation of prior formal notice confirmed by the Administrative Supreme Court"}]},{"@type":"WebSite","@id":"https:\/\/taoma-partners.fr\/en\/#website","url":"https:\/\/taoma-partners.fr\/en\/","name":"TAoMA Partners EN","description":"TAoMA Partners EN","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/taoma-partners.fr\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/taoma-partners.fr\/en\/#\/schema\/person\/95311d2e07ed0365f28a34a6b2658b99","name":"teamtaomanews","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/b423c71e16ff9acc6dd9a68027a5935449271a7fe479a01a422671afef820a59?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b423c71e16ff9acc6dd9a68027a5935449271a7fe479a01a422671afef820a59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b423c71e16ff9acc6dd9a68027a5935449271a7fe479a01a422671afef820a59?s=96&d=mm&r=g","caption":"teamtaomanews"},"url":"https:\/\/taoma-partners.fr\/en\/author\/teamtaomanews\/"}]}},"_links":{"self":[{"href":"https:\/\/taoma-partners.fr\/en\/wp-json\/wp\/v2\/posts\/2011","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/taoma-partners.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/taoma-partners.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/taoma-partners.fr\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/taoma-partners.fr\/en\/wp-json\/wp\/v2\/comments?post=2011"}],"version-history":[{"count":1,"href":"https:\/\/taoma-partners.fr\/en\/wp-json\/wp\/v2\/posts\/2011\/revisions"}],"predecessor-version":[{"id":2012,"href":"https:\/\/taoma-partners.fr\/en\/wp-json\/wp\/v2\/posts\/2011\/revisions\/2012"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/taoma-partners.fr\/en\/wp-json\/wp\/v2\/media\/1994"}],"wp:attachment":[{"href":"https:\/\/taoma-partners.fr\/en\/wp-json\/wp\/v2\/media?parent=2011"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/taoma-partners.fr\/en\/wp-json\/wp\/v2\/categories?post=2011"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/taoma-partners.fr\/en\/wp-json\/wp\/v2\/tags?post=2011"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}