The CNIL found that AG2R LA MONDIALE had failed to comply with RGPD obligations relating to retention periods and the provision of information to individuals.
- On the principle of limiting the duration of data retentionThe CNIL found that although AG2R La Mondiale had defined retention periods, these were not implemented in its systems.
- On the obligation to inform people when they are canvassed by telephoneCNIL has identified a number of shortcomings:
- Incomplete information and lack of access to more complete information;
- The failure to inform individuals of the potential recording of telephone calls or of their right to object;
- Lack of information about the processing of their personal data or their other rights.
As a result, the CNIL has issued a public fine of 1.75 million euros against AG2R LA MONDIALE.