The Cnil, guardian of the personal data of the French, pronounced 21 sanctions in 2022 for a total amount of more than 101 million euros, a decrease compared to previous years, she announced Tuesday in a press release.
The cumulative amount of fines had reached a record level of 214 million euros in 2021, after 138 million euros in 2020.
But in 2022, the Cnil's repressive activity was above all "
marked by a major reform of corrective procedures
", with "
a record number of formal notices
" (147 against 135 in 2021 and around fifty in previous years).
These measures, facilitated by the law on criminal liability and internal security, concerned the obligation to appoint a data protection officer, the application of the rules on commercial prospecting, or the transfer of data overseas. Atlantic.
72 of them contain at least one breach related to cybersecurity, specifies the Cnil.
"
This new procedure was created in particular to deal with files that do not present any particular difficulty, and thus allow the CNIL to better act in the face of the increasing number of complaints
,” according to the Commission.
More than 500 million euros fine
In 2022, it received 12,000 complaints and processed 13,000, thus succeeding for the first time in reducing the stock of some 7,000 reports still pending, explained to AFP its secretary general Louis Dutheillet de Lamothe.
Since the entry into force of the European Data Protection Regulation (GDPR) in 2018, the CNIL has imposed a fine of just over 500 million euros, i.e. a fifth of the total fines decided by the European authorities ( 2.5 billion euros).
The Gafams were particularly targeted on compliance with the rules concerning prior information and consent to the deposit of tracers allowing targeted advertising, subjects on which the Cnil considers itself competent under the ePrivacy directive.
Read alsoCo-ownership: data protection decrypted by the Cnil
In 2022, this was the case of Microsoft, sanctioned by a fine of 60 million euros, the largest of the year, made public at the end of December, then of Apple, with a recent fine of 8 million euros that the company intends to contest.
Finally, the CNIL adopted 3 decisions “
in cooperation with its European counterparts
” and “
actively participated in 5 procedures
” initiated at European level to settle disputes over draft decisions.
