France’s privacy authority declares enhanced surveillance systems neither necessary nor proportionate for age verification, citing GDPR violations and surveillance concerns.