France: CNIL publishes annual report for 2022

On May 23, 2023, the French data protection authority (CNIL) published its annual report for 2022.

CNIL highlighted that it had dealt with 13,160 complaints and that it had issued 21 sanctions and 147 formal notices, which amounted to a cumulative total of around €101 million. CNIL also emphasized that since the entry into force of the GDPR, the total amount of penalties issued has exceeded €500 million. CNIL further noted that 94% of investigations carried out resulted in compliance without CNIL resorting to sanctions.


Specifically, CNIL detailed a range of sanctions issued against Clearview AI Inc., TikTok Information Technologies UK Limited and TikTok Technology Limited, and DISCORD Inc., among others, for violation of the GDPR, including for cookies and advertisement purposes.


Notably, CNIL outlined the publication of online resources for the general public and professionals on artificial intelligence (AI), the adoption of an opinion on the European Health Data Area by the European data protection authorities, and the adoption of a position paper on the use of ‘augmented’ cameras in public spaces.

You can read the press release here, and download the annual report, available in French, here.