The CNIL has fined a business registry with millions of account holders for password security failings, as well as for holding the personal data of inactive users beyond legal limits. Filed under European Union France IT & Data Protection Topics Data protection and privacy Enforcement Industries Technology