France has a high standard regulation on personal data. The CNIL seems however to be tempted to preserve young innovative compagnies from serious sanctions. What is the proper arbitration between data privacy and support to innovating actor using data?

Sanctions adopted by the CNIL since 2014: https://www.data.gouv.fr/fr/datasets/sanctions-prononcees-par-la-cnil/

edited answer