What happened
The French data protection authority CNIL closed the injunction it issued on 15 May 2025 after the company demonstrated measures to verify the validity of consent obtained by its data‑broker partners. The original sanction included a €900,000 fine and a daily penalty of €10,000 for non‑compliance. CNIL reminded the company remains responsible for ensuring valid consent for its electronic prospecting activities.
Why it matters for trust and compliance
- Its status is decided. The case has an outcome that others may cite.
- The decision underscores CNIL's enforcement of GDPR consent requirements for commercial prospecting and the accountability of controllers for partner‑collected data.
- Takes effect September 17, 2026.
Who is affected
technology advertising controller processor data broker SOLOCAL MARKETING SERVICES
Recommended actions
- Review consent, cookie and tracking practices against the requirement.
- Check that privacy notices describe the practices this addresses.
How this has moved
-
Date not stated · version 1
Enforcement Action · in effect
CNIL closes injunction against Solocal Marketing Services
-
Date not stated · version 2
Enforcement Action · decided