A complaint concerning the receipt of commercial mailings advertising insurance services for foreigners led the French data protection authority (CNIL) to impose a €15,000 fine on two companies. Impact Net had created a database with addresses of foreigners, and this was used by FAC International to advertise visa insurances and assistance and repatriation services. Both companies had thus violated the prohibition on processing sensitive data without the explicit consent of the data subject.

The CNIL press release (in French) is available at: