I think that the Cnil should lead by example and I suspect that a lot of people see the irony. If they show what can be done, or even better, open-source a working solution, that could disprove the “everyone does it” argument which… hasn’t exactly proven sturdy to even minimal ethical testing so far.
I lived in an asian city where private buses could be fined even if they have one person extra than total seating capacity. Meanwhile govt buses could be so over crowded that people can fall off the door and bus wouldn't stop over that incident.
So government and bureaucracies can be impervious to rules they expect everyone to follows. This site seems humongous fan of bureaucracy as long as it is european.