Retailer Boulanger risks €9m fine in French privacy case over data breach (update*)

By Matthew Newman ( October 22, 2026, 13:10 GMT | Insight) -- French electronics retailer Boulanger should be fined €9 million for several violations of EU data protection rules for failing to secure customers’ data and using weak passwords, a French privacy official said at a hearing in Paris on Thursday. The official who proposed the sanctions to the restricted committee of the CNIL said the security lapses, exposed during a data breach, put at risk the personal data of 2 million clients.French electronics retailer Boulanger should be fined €9 million ($10 million) for several violations of EU data protection rules for failing to secure customers’ data and using weak passwords, a French privacy official told a hearing in Paris on Thursday....

Prepare for tomorrow’s regulatory change, today

MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.


Know what others in the room don’t, with features including:

  • Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
  • Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
  • Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
  • Curated case files bringing together news, analysis and source documents in a single timeline

Experience MLex today with a 14-day free trial.

Start Free Trial

Already a subscriber? Click here to login