CNIL Reports Record Number of Complaints and Data Breaches in 2023

Overview of Increased Complaints and Data Breaches

The National Commission for Information Technology and Liberties (CNIL), France's privacy watchdog, has reported a significant increase in complaints and data breaches in 2023. According to their annual report released on Tuesday, the authority received 16,433 complaints, marking a 35% increase from 2022. Additionally, about 4,600 data breaches were reported, showing a 14% rise from the previous year.

Cyberattacks and Surveillance Concerns

The report highlights that over half of the data breaches involved hacking incidents, primarily through ransomware or phishing. Notable cyberattacks at the beginning of 2024 targeted France Travail and two third-party payment operators, Viamedis and Almerys. The CNIL president, Marie-Laure Denis, emphasized the widespread impact of these attacks, stating that "one in two French people have seen their personal data compromised" within just two months.

Preparations for the Paris Olympic Games

With the upcoming Paris Olympic and Paralympic Games, the CNIL is focusing on ensuring a balance between robust data protection and the respect for public freedoms. Denis reassured that all necessary measures are in place to protect the data of the French public, athletes, and visitors during the event.

Record Fines and Regulatory Actions

In terms of enforcement, the CNIL carried out 340 checks and issued 42 sanctions in 2023, accumulating fines of over 89 million euros. High-profile fines included 40 million euros for Criteo and 32 million euros for Amazon France Logistique, due to a surveillance system deemed excessively intrusive.

Focus on Mobile Apps and Simplified Sanctions

Looking ahead, the CNIL aims to intensify its focus on mobile applications, which are seen as a priority due to the sensitive personal data they handle. The authority is also pleased with the implementation of the "simplified sanctions" procedure, which led to 24 sanctions in 2023, and plans to continue refining this approach to handle cases more efficiently.

The CNIL's actions and strategies highlight the growing public and regulatory focus on data protection and privacy issues in France, especially in the context of increasing digital threats and upcoming international events like the Paris Olympics.