France's data protection authority, the Commission nationale de l'informatique et des libertés, ordered an unidentified company to improve data minimization practices for employee and job candidate data. The CNIL said issued the order following a complaint the company collected unnecessary data from candidates.