Sanctions pronounced by the CNIL

The CNIL may [sanction](https://www.cnil.fr/en/les-missions) a data controller who has not taken the necessary measures to comply with the Data Protection Act and, from 25 May 2018, the General Data Protection Regulation (GDPR). The datasets presented concern the number of sanctions, pronounced by the restricted formation of the CNIL, notified each year since 2014 (and their breakdown by type of decision, which has evolved hence the publication of data with the new typology of sanctions as of 2019). In addition to the distribution of this game, the content of the **public** sanctions is available on [Legifrance] (https://www.legifrance.gouv.fr/initRechExpCnil.do). **Disclaimer**: for any questions about the operation of a file and the help that the CNIL can provide you, please do not use the "Discussions" below, which are visible to all and reserved for exchanges on published datasets; use the Need help service (https://www.cnil.fr/en/cnil-direct) or contact the CNIL on 01 53 73 22 22.