On March 27, 2009, the French Data Protection Authority (CNIL) issued a press release regarding a €30,000 fine imposed on “Centre E.Leclerc” supermarket stores in 2008 (Délibération no. 2008-187 du 3 juillet 2008) for violation of the French Data Protection Act. The company had failed to comply with several obligations, in particular: (a) had failed to notify data processing and use of CCTV; (b) had failed to determine data retention periods; (c) had omitted to notify the data subjects; and (d) had used discriminatory remarks in the free text zones of its database. The company had disregarded the CNIL’s previous warning and was subsequently fined. The full decision of the CNIL is available (in French) here.