# Failure to respect the rights of individuals: The CNIL fined EXTIA 300 000 EUR

- Type: News
- Source: European Data Protection Board
- Date: 2026-09-11
- Original: https://www.edpb.europa.eu/news/failure-to-respect-the-rights-of-individuals-the-cnil-fined-extia-300-000-eur_en
- Canonical: https://overview.legal/posts/353914
- Topics: Personal Data, Right to be Forgotten, Supervision, Right to Erasure, Supervisory Authorities, Mutual Assistance Procedures and Mechanisms, Cross-Border Cooperation Among Digital Services Coordinators, Joint Investigations Procedures and Coordination, Investigation Cooperation and Coordination Procedures, Information Provision Modalities and Communication Methods

## Summary

Background informationDate of final decision: 21 July 2026National caseLegal Reference(s): Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure ‘right to be forgotten’)Decision: Administrative fineKey words: Data subject rightsSummary of the DecisionOrigin of the case EXTIA, which specialises in IT and engineering, recruits consultants for various technical projects from its client companies. In 2024,

## Full text

Background informationDate of final decision: 21 July 2026National caseLegal Reference(s): Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure ‘right to be forgotten’)Decision: Administrative fineKey words: Data subject rightsSummary of the DecisionOrigin of the case EXTIA, which specialises in IT and engineering, recruits consultants for various technical projects from its client companies. In 2024, the French Data Protection Authority (CNIL) received several complaints from former employees or candidates, relating to difficulties encountered in exercising their right to erasure or ‘right to be forgotten’. With a view to investigating these complaints, and also in the context of the Coordinated Enforcement Framework action on the ‘Right to erasure’ launched on the initiative of the European Data Protection Board in 2025, an audit of EXTIA was carried out in April 2025. It identified breache

## Cited law provisions (2)

### GDPR — gdpr-art-12-en

Transparent information, communication and modalities for the exercise of the rights of the data subject

### GDPR — gdpr-art-17-en

Right to erasure (‘right to be forgotten’)

---
Generated by overview.legal · https://overview.legal/posts/353914 · 2026-09-12