The French regulator that fined Discord €800,000 in November 2022 was CNIL.
CNIL is the acronym for the Commission nationale de l’informatique et des libertés, France’s independent data-protection authority. It oversees compliance with French and European privacy rules, including the General Data Protection Regulation, or GDPR.
The fine followed findings about Discord’s privacy practices. CNIL said the application could continue running in the background after being closed, fail to disconnect a user from a voice chat, and permit passwords as short as six characters. These issues were treated as GDPR-related violations.
The answer is not AMF, ANSSI, or ARCOM. AMF regulates financial markets, ANSSI focuses on cybersecurity and information-system security, and ARCOM regulates audiovisual and digital communications. CNIL’s remit is personal-data protection, which is why it handled the Discord case.