GDPR sanction to a major hotel group

Written By

sacha bettach Module
Sacha Bettach

Senior Associate
France

As a senior associate in our Paris IT, commercial and dispute resolution teams, and a member of the Paris Bar, I advise our clients on both contentious and non-contentious matters.

alexandre vuchot module
Alexandre Vuchot

Partner
France

I'm a partner in our international Commercial group, based in Paris, where I provide our clients with strategic commercial advice.

The CNIL (the French Data Protection Authority), has issued a fine of 600,000 euros to a major hotel group.

The group was sanctioned (i) for having carried out commercial prospecting without the consent of the individuals concerned, (ii) for not having respected the rights of customers and prospects and (iii) for having carried out such commercial prospecting in many countries in the EU. 

The CNIL especially took account of:

  • the number of alleged breaches by the company, 
  • the fact that these breaches concerned several fundamental principles of personal data protection and that they constituted a substantial infringement of individuals' rights, 
  • the number of individuals concerned and;
  • the financial situation of the company.

Considering the fact that the group had brought itself into compliance on several points, the CNIL submitted a draft decision to the foreign data protection authorities concerned, before issuing its final decision. As one of these authorities disagreed with the draft decision, the matter was referred to the European Data Protection Board (EDPB). The Board has ordered the CNIL to reconsider and increase the amount of the fine, so that the measure taken would be more dissuasive.

This is the first time that a cooperated sanction across every EU Data Protection authority has been implemented.

Latest insights

More Insights
Curiosity line teal background

A Clearly Drafted Discretionary Bonus Clause Upholds Employer’s Right to Withhold Bonuses

Sep 20 2024

Read More
Curiosity line green background

A spotlight on Australia Privacy Reform: A long awaited first step – First tranche privacy reforms introduced to Parliament

Sep 12 2024

Read More
Curiosity line pink background

From Policy to Practice: Developing Robust Anti-Bribery Defence Measures against Australia’s Foreign Bribery Offences

Sep 11 2024

Read More