The French watchdog, known as the CNIL, said today that it fined SERGIC on 28 May following an investigation into a 2018 data breach. It found that the company had committed two breaches of the GDPR by failing to stop users’ private documents being publicly accessed.

the agency originally suggested a fine of €900,000”

In Germany, one watchdog fined [a company] €20,000 for circumstances like this so the gap between the CNIL’s fines and other countries is becoming systemic.