Failure to respect the rights of individuals: The CNIL fined EXTIA 300 000 EUR

Background informationDate of final decision: 21 July 2026National caseLegal Reference(s): Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure ‘right to be forgotten’)Decision: Administrative fineKey words: Data subject rightsSummary of the DecisionOrigin of the case  EXTIA, which specialises in IT and engineering, recruits consultants for various technical projects from its client companies. In 2024, the French Data Protection Authority (CNIL) received several complaints from former em...