Failure to respect the rights of individuals: EUR 300,000 fine against EXTIA
France's data protection authority, the CNIL, fined consulting firm EXTIA €300,000 for failing to respect individuals' rights under data protection law. The penalty reflects a formal finding that the company did not meet its legal obligations toward the people whose data it held.
Why this matters: When a company holds your personal data, you have rights — to access it, correct it, delete it, or object to how it is used. Those rights mean nothing if companies can ignore them without consequence. A €300,000 fine signals that regulators are willing to punish not just data breaches, but the quieter failure of simply not treating people as if their rights matter. That is the accountability piece most companies still underestimate.
Who should care: Lawyers · Privacy officers · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.