article thumbnail

Over-Retention of Personal Data

Data Protection Report

The matter involved one of France’s largest insurers, SGAM AG2R LA MONDIALE, which was subject to an inspection by the French data protection authority (the CNIL), in 2019. customer data retained for excessive periods of time includes data of a sensitive nature, bank details and information relating to customers’ personal lives.”.