CNIL France
cnil-fr · A · active
https://www.cnil.fr/fr/actualites
French data-protection authority. /en (homepage) carries general announcements and is rarely useful for breach/enforcement coverage; /en/news lists actual press releases. For enforcement actions specifically, also check /en/sanctions-and-corrective-measures and the French-language /sanctions-prononcees-par-la-cnil (richer than the English mirror, translate findings to English in the brief). | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → webfetch https://www.cnil.fr/en/news (then webfetch per-article URL for body). AVOID: /en homepage carries general announcements, use /en/news for press releases. English mirror is thinner than the French sanctions page.. | 2026-07-05 admiralty audit: A; French DPA is the primary/definitive authority for its own sanctions and breach-enforcement decisions in-jurisdiction; live and drillable, no change (active). | 2026-09-22: the French-language /sanctions-prononcees-par-la-cnil path now returns 404 (recipe drift); the English /en/news path is unaffected. Not demoted (single-path drift on an active, otherwise-live source); needs a recipe check on a later run. | 2026-09-30 intel run: the French-language listing that works is https://www.cnil.fr/fr/actualites (extract, dated items); /fr/sanctions-prononcees-par-la-cnil and /fr/tous-les-communiques-de-presse return 404; English /en/news stays valid. | 2026-10-12: S4: `extract https://www.cnil.fr/fr/actualites` returns dated items (newest 2026-10-09 on 2026-10-12); fetch_method moved from webfetch to bridge because the direct transport reads the page. | 2026-10-15 health check: the record's url pointed at /en/news, which returned a shell; url moved to the French listing https://www.cnil.fr/fr/actualites that `extract` read with dated items on 2026-10-12. Both paths answered 503 with the site-wide maintenance page ('Le site de la CNIL est actuellement en maintenance') on every transport on 2026-10-15, a transient outage, so no demotion; re-check on the next sweep. | 2026-10-17 (2026-10-17T0256Z-intel): S2: the 503 maintenance of 2026-10-15 is over; `extract https://www.cnil.fr/fr/actualites` returns dated items. | 2026-10-22 (S4): origin 503 maintenance page again on 2026-10-22 on `extract` (which fell to the metered reader and spent credit on the 503 page) and on WebFetch; when WebFetch shows 503, do not call `extract` on this host. | 2026-10-23 (S4): WebFetch of https://www.cnil.fr/fr/actualites worked on 2026-10-23 (no 503): twelve items with relative hrefs. | 2026-11-02 intel run (S4): `url https://www.cnil.fr/fr/actualites` returned a full dated listing.
Cited in 3 entries
Citation cadence
Citation days per ISO week (15 weeks of coverage span, total 3).
- CNIL fines Hôpital privé de la Loire EUR 500,000 over a 727,000-record breach through one user account on an external-access path with no VPN or MFA2026-09-04
- EDPB adopts a harmonised GDPR Article 33 breach-notification template; consultation open to 5 August2026-06-11
- CNIL fines IQVIA Operations France €5M for health data warehouse security failures: no MFA, no log monitoring, no network segmentation2026-05-30