CNIL flags inadequate victim notification in French cyberattacks

France's CNIL has publicly criticized Free and Hôpital privé de la Loire for incomplete or delayed victim notification after cyberattacks, leaving affected individuals exposed. This marks a regulatory push to enforce timely and comprehensive disclosure, potentially setting a precedent for stricter enforcement. The development underscores a systemic gap in crisis management, increasing legal and reputational risk for breached entities.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works