The French regulator also said that even after users indicated they no longer wanted cookies, or tracking code, following them on the web, Orange allowed previously stored cookies to continue capturing their internet activity, a violation of the French Data Protection Act.
Good, but a fine seems like they got off easy. Someone made the decision. Where are their consequences?