Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
JoinJoin
REGULATORY WATCH BRIEF Moderate 48 🧭 Regulatory Guidance published

CNIL outlines its status, organization and sanction powers

The notice details CNIL’s enforcement authority and the maximum GDPR fines, important for data protection compliance.

ADTP Regulatory Watch · September 17, 2026 · CNIL
ImpactModerate 48
Type🧭 Regulatory Guidance
Statuspublished enacted, check the effective date
JurisdictionEU-FR

What happened

The CNIL, created by the 1978 Loi Informatique et Libertés, is an independent administrative authority composed of a college of 18 members. Its restricted board can impose fines up to €20 million or 4 % of global annual turnover under the GDPR. The page notes a sanction against SOLOCAL MARKETING SERVICES on 24 September 2026.

Penalty

le montant des sanctions pécuniaires peut s’élever jusqu’à 20 millions d’euros ou dans le cas d’une entreprise jusqu’à 4 % du chiffre d’affaires annuel mondial.

Why it matters for trust and compliance

  • Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
  • The notice details CNIL’s enforcement authority and the maximum GDPR fines, important for data protection compliance.
  • Penalty: le montant des sanctions pécuniaires peut s’élever jusqu’à 20 millions d’euros ou dans le cas d’une entreprise jusqu’à 4 % du chiffre d’affaires annuel mondial..

Who is affected

CNIL SOLOCAL MARKETING SERVICES

Recommended actions

  1. Check that privacy notices describe the practices this addresses.
  2. Map the security requirements to existing controls and close gaps.