CNIL releases report on sanctions, corrective measures

France's data protection authority, the Commission nationale de l'informatique et des libertés, released a report on sanctions and corrective measures taken in 2022. The CNIL said a record 147 formal notices and 21 sanctions were adopted and fines exceeded 100 million euros. Penalty decisions and formal notices concerned various sectors and issues, including 22 decisions against municipalities that failed to appoint data protection officers. The CNIL said it is "continuing the substantial increase in the number of formal notices adopted, which began in 2021."