FRCommission nationale de l’informatique et des libertés13 January 2026Data protection

Free Mobile and Free

CNIL fines Free Mobile and Free EUR 42 million for GDPR breaches.

EUR€42,000,000

Country: FR
Authority: Commission nationale de l’informatique et des libertés
Type: Data protection
Imposed: 13 January 2026
Added to register: 25 May 2026

Summary

France’s CNIL fined Free Mobile and Free a combined EUR 42 million for GDPR breaches linked to a 2024 data breach affecting more than 24 million users. The regulator found inadequate security measures and said Free Mobile unlawfully retained former subscribers’ data.

Grounds for the decision

Inadequate data security and unlawful retention of former subscribers’ data after the 2024 breach.