La Commission nationale de l'informatique et des libertés s’est réunie le jeudi 8 octobre 2026 à 9 h 30 avec l’ordre du jour suivant :

Par délibération du 23 septembre 2026, la CNIL a clos l’injonction prononcée le 22 janvier 2026 à l’encontre de FRANCE TRAVAIL, sans liquider l’astreinte prévue compte tenu de sa mise en conformité.

Background informationDate of final decision: 22/09/2026National caseLegal Reference(s): Article 32 (Security of processing)Decision: Administrative fineWebsite topics: Cybersecurity, personal data breachesSummary of the DecisionOrigin of the caseIn August 2025, the IT service provider Miljödata was targeted in a cyberattack, during which a malicious actor gained access to a large volume of...

Background informationDate of final decision: 28/07/2026National caseController: Ministry of Social Cohesion and Family AffairsLegal Reference(s): Article 25 (Data protection by design and by default), Article 28 (Processor), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority) and Article 34 (Communication of a...

Background informationCross-border caseLegal Reference(s): Article 22 (Automated individual decision making, including profiling) and Article 13 (Information to be provided where personal data are collected from the data subject)Decision: Administrative fineKey words: Automated decision making, profiling and online tracking, finesSummary of the DecisionThe Autoriteit Persoonsgegevens (AP), the Dutch data protection authority,...

Meta’s AI assistant Muse builds detailed dossiers on users and their contacts, tracking relationships, goals and behaviour. Internal instructions reveal how it collects, stores and shares user insights. The post Report: How Meta’s Muse AI is building a detailed dossier on you using chats, emails, and relationships appeared first on...