I like the way they are punished: no fine, but CNIL ordered the firm to delete all data it had not already deleted (having judged collection illegal given

I like the way they are punished: no fine, but CNIL ordered the firm to delete all data it had not already deleted (having judged collection illegal given consent was not valid); and to stop processing data without consent. So this is a warning shot to them and the ad industry: If they change the way they do business, they were almost not hurt (There is probably the court costs to pay, plus their defence, plus opportunity costs). For now, the maximum fines seem to be just that, at least in France: Maxima, only for those who really do not want to mend their ways