Privacy is a fundamental right in the EU. Data protection law is not consumer protection law, and thf. "consumer harm" is the wrong lens.
I don't read French and so haven't read the complaint, but I am a data lawyer, so I can make a fair guess. The harm alleged to have been suffered is likely to be that persons have been tracked and profiled without their consent, in breach of their legal right not to be, and so have suffered an unwarranted intrusion into their private life.
To those from countries whose legal systems treat privacy as a consumer or constitutional right, this may seem anti-intuitive. Even within the EU, there is plenty of controversy around some of the legal points at issue in these types of cases/complaints. Regulators are not always immune from doctrinal thinking.
It will be interesting to read the full findings of this specific regulator when available.
I don't read French and so haven't read the complaint, but I am a data lawyer, so I can make a fair guess. The harm alleged to have been suffered is likely to be that persons have been tracked and profiled without their consent, in breach of their legal right not to be, and so have suffered an unwarranted intrusion into their private life.
To those from countries whose legal systems treat privacy as a consumer or constitutional right, this may seem anti-intuitive. Even within the EU, there is plenty of controversy around some of the legal points at issue in these types of cases/complaints. Regulators are not always immune from doctrinal thinking.
It will be interesting to read the full findings of this specific regulator when available.