The CNIL announced on Thursday the closing of a formal notice targeting Engie.
The French data protection gendarme believes that the breaches concerning the management of personal data collected by Linky meters "have ceased".
A similar decision concerning EDF was taken last February.
At the beginning of 2020, the Cnil had pointed out shortcomings in the way in which Engie and EDF obtained consumers' consent concerning the collection of their consumption data by Linky meters.
The commission also denounced an “excessive retention period” of this data.
Deficiencies corrected by the two companies
These data can give information on the private life of the inhabitants: times of getting up and going to bed, periods of absence, number of people present… From now on, the CNIL considers that “the elements of response provided by the company have made it possible to demonstrate that the deficiencies noted during the control have since ceased ”.
Engie has "put online a new consent process" allowing the customer to "consent to the monitoring of his daily consumption without also having to consent to the monitoring of his consumption on the half-hour basis", indicates the CNIL.
A new data retention policy has also been put in place to limit its duration.
In February 2020, the commission gave the two companies three months to comply with its expectations.
This deadline has been extended due to the health crisis linked to Covid-19, said the CNIL.
Society
"Smart home": Why electricity storage is one of the keystones
Society
Le Havre: Twelve years after receiving a water bill of 28,948 euros, an individual finally compensated
Personal data
Justice
EDF
Engie
Linky counter
CNIL