France's data protection authority, the Commission nationale de l'informatique et des libertés, fined rental scooter company Cityscoot 125,000 euros for collecting and maintaining a record of vehicles' geolocation data. The CNIL said Cityscoot failed to comply with data minimization and contractual framework obligations under the EU General Data Protection Regulation, and also violated the French Data Protection Act by failing to inform users and obtain consent to access the data.
29 March 2023
CNIL fines rental scooter company over geolocation data collection
Related stories
A view from Brussels: Putting AI to the test on EU privacy, data protection developments
Why organizations should prioritize employee data protection to combat spear phishing
Notes from the Asia-Pacific region: Santa's on his way, bringing guidance from Singapore's PDPC, adoption of Vietnam's Data Law and more
EDPB weighs in on key questions on personal data in AI models
New tools aim to improve data activity monitoring, compliance efficiency