SUMMARY - Corporate Accountability in User Rights
A company violates privacy laws affecting 50 million users. Regulators investigate for three years, eventually imposing a fine that equals two weeks of revenue. The company issues a statement about taking privacy seriously while changing nothing about the practices that caused the violation. Users whose data was exposed receive notification, perhaps credit monitoring, but no compensation for harms that may unfold over years.