CNIL sanctions joint stock company for GDPR violations

France’s data protection authority, the Commission nationale de l’informatique et des libertés, issued a sanction of 3,000 euros against joint stock company the New Company of the French Directory for not complying with the EU General Data Protection Regulation. After receiving 16 complaints from 2018-19 explaining difficulties erasing and rectifying personal data, the CNIL conducted a review and ordered the company to comply with the GDPR within two months, which the authority said did not happen.