France’s data protection authority has imposed cumulative fines of €42 million on Free Mobile and its parent company, Free, after determining that inadequate cybersecurity safeguards led to the exposure of personal data belonging to tens of millions of customers.