The point of the comment is that the CNIL handled the part that the "good architect" would have needed to do, thus saving the company 5-10k. The company "only"

The point of the comment is that the CNIL handled the part that the "good architect" would have needed to do, thus saving the company 5-10k. The company "only" needed to implement it, the other part was handled for them. The GP didn't mention fines, so I guess none were given out?