Fine · France
FRANCE TRAVAIL: EUR 5,000,000
- Authority
- Commission nationale de l'informatique et des libertés (CNIL)
- Country
- France
- Date
- Decision of 22 January 2026
- Amount
- EUR 5,000,000, as imposed (not converted)
- Appeal status
- Unknown
- Provisions cited
- Article 32
What the fine was for (summary, not the official text)
Public employment service: weak authentication, poor logging and over-broad access rights let attackers using social engineering reach data on everyone registered over 20 years.
Checked against the official source on 28 October 2026.
Only the authority's decision is authoritative. This is reference material, not legal advice.