CNIL.
COMMISSION NATIONALE
INFORMATIQUE & LIBERTÉS
The Chair
Registered letter with acknowledgement of receipt
AR No: 2C 151 941 6673
Investigation of the case:
Ref. No.:
Referral no.:
(to be quoted in all correspondence)
Paris, on
28 JUIL. 2022
Dear Sir,
I am following up on the complaint sent to the Commission nationale de l'informatique et des libertés (CNIL) by the Commission nationale pour la protection des données du Grand-Duché de Luxembourg (CNPD) in application of the provisions of Article 56.1 of the General Data Protection Regulation (GDPR).
According to the information provided by the CNPD, an email from the dated 27 August 2021, entitled was sent to a list of "unencrypted" email addresses.
The exchanges that have taken place between the CNIL and the Data Protection Officer (DPO) of the in the context of the investigation of this complaint lead me, in agreement with the other European data protection authorities concerned, to close this complaint.
I have taken note of the notification of data breach No. submitted to the Commission, as well as of the various steps taken by the following this complaint, with regard to identifying the data breach and analysing the risk for the data subjects, or the implementation of measures to prevent the breach from being repeated (regulatory and methodological reminders to all the teams in the training department, to all the staff in the education departments of the training components and to the staff in contact with applicants, etc.).
All these elements lead me to close this complaint against the
However, if there are new complaints, the CNIL reserves the right to make use of all the powers granted to it by the GDPR and the French Data Protection Act of 6 January 1978 as amended.
Yours sincerely,
Marie-Laure Denis
Copy to
Data Protection Officer of
RÉPUBLIQUE FRANÇAISE
3 Place de Fontenoy, TSA 80715 - 75334 PARIS CEDEX 07 - 01 53 73 22 22 - www.cnil.fr
Les données personnelles nécessaires à l'accomplissement des missions de la CNIL sont traitées dans des fichiers destinés à son usage exclusif. Les personnes concernées peuvent exercer leurs droits Informatique et Libertés en s'adressant ou délégué à la protection des données (DPO) de la CNIL via un formulaire en ligne ou par courrier postal. Pour en savoir plus : www.cnil.fr/donnees personnelles.