CNIL, aka the French Data Protection Authority, issued a staggering €486,839,500 ($579,990,705) in combined penalties last year compared to €55m ($65m) in 2024. A new report from the regulator shows CNIL also issued a total of 83 sanctions, where 16 were imposed by the restricted committee, and 67 under the simplified procedure.
The sanctions