Major problem with a heavily underfunded understaffed company, they simply don't have the resources to put up any kind of legal resistance to this type of judicial pressure.
>they simply don't have the resources to put up any kind of legal resistance to this type of judicial pressure
a very simple solution to this, don't keep the data once you've provided a service to the customer. Or anonymize it and scrub any association.
It's never a question of "we don't have the resources to protect your data". The conclusion should be, if you don't have the ability to protect your customers you don't get to harvest their information.
This is the only way things will change. Companies need to be our in the position where holding personal data is a major liability. And not gpdr type that relies on admins or politicians. It needs to be something that excites the trial lawyers approaching the level of mesothelioma.
Idk how we get there, whether it be through the courts, Congress, or some other way. I think getting rid of third party doctrine will do more towards this goal than most people realize, but it has to be in a way that treats any data acquired by government as if it were collected by the government, to 4th amendment levels of scrutiny.
But if things are going to change, major liability on government and private sector will have to be the result, unless we want eventual relapse.
a very simple solution to this, don't keep the data once you've provided a service to the customer. Or anonymize it and scrub any association.
It's never a question of "we don't have the resources to protect your data". The conclusion should be, if you don't have the ability to protect your customers you don't get to harvest their information.