The pap.fr site (from individual to individual), specializing in real estate sales and rentals, received a fine of 100,000 euros from the National Commission for Information Technology and Liberties (Cnil) for breaches concerning personal data, announced the latter on Tuesday.
The sanction was imposed on the company on January 31, “in particular for not having respected its obligations in terms of data retention period and data security,” specifies the digital privacy watchdog in a press release.
Four breaches
In total, four breaches of the European Data Protection Regulation were noted and also concern a failure to inform users and the absence of information required by the GDPR in a contract with a subcontractor.
The CNIL indicates that the amount of the fine was determined by taking into account “the cooperation of the company and the measures it took during the procedure to comply with certain breaches of which it was accused”.