On November 17, 2008, the CNIL issued a press release regarding its previous public warning against a French website (“entreparticuliers. com”) which specializes in connecting real estate owners with real estate agents and potential buyers. Following an investigation on the premises of the data controller, the CNIL found that a failure in the web platform’s security system made it possible for anyone to access the personal space of advertisers, access their personal data, and change the content of the advertisements. The CNIL found that there had been additional breaches of the Data Protection Act, the absence of specific data retention periods, insufficient information of the data subjects, and the carrying out of marketing campaigns via email and SMS without the prior consent of the data subjects. More information is available (in French) here.