Discord — Enforcement

France's data protection authority (CNIL) fined Discord €800,000 for multiple GDPR violations. Discord had no written data retention policy, with 2.47 million French accounts inactive for over three years still in its database. The CNIL also found that Discord's voice channel behavior — where closing the app window kept users connected and audible — violated data protection by default principles, and that its six-character password minimum was insufficiently secure.