Company
Non disponible
Non-compliance with general data processing principles
Date de décision
5 juin 2024
Autorité
French Data Protection Authority (CNIL)
FR
Secteur
Industry and Commerce
Pays
HU
Droit
GDPRStatut
FINALDescription
The French DPA has imposed a fine on a company operating a call center. The controller had systematically recorded all incoming and outgoing calls for training, evaluation and dispute purposes. The CNIL found that such comprehensive recording violated the principle of data minimization and that random and selective recording for training purposes was sufficient.
Citations légales
Art. 5 (1)
Questions et violations
Non-compliance with general data processing principles