Cnil imposes a fine of 250,000 euros on the Infogreffe website

According to a consultation published on Tuesday, Cnil imposed a fine of €250,000 on Infogreffe for keeping the personal data of its website users too long and insecurely. The National Commission on Accounts and Freedoms received a complaint from an Infogreffe user who denounced the ease with which his password was accessed by third parties.

Then he remarked.a number of shortcomings related to the processing of personal data of service users“, which allows for a fee to get acquainted with legal information about companies and to order documents certified by commercial court registries, he explains in a press release. This refers to the storage of bank information, surnames, names, addresses, etc. For accounts inactive beyond 36 months provided by the site, which concerned a quarter of users, and the lack of an automatic anonymization procedure.

“Lack of sufficient means to guarantee data security”.

Also in Cnil’s view, the absence of ‘sufficient means to guarantee the security of members’ and users’ dataFrom Infogreffe. He was remarkable3.7 million accounts are unable to enter a secure password due to their account size limitCnil notes.

In addition, Infogreffe “transmitted by plain text, email, non-temporary passwords that allow access to accountsand stored them, still unencrypted, in its database. Created in 1986 by the clerks of the commercial courts, the GIE (group of economic interests) Infogreffe in turn started since control;Clearing accounts that are inactive for more than 36 months“and”performed certain actions“In terms of security, according to Cnil.

This was the penaltyundertaken in cooperation with other European authorities concernedwebsite with user accounts in all EU member states. he”can be appealed to the State Council“Is it clarified in the consultation within two months?”