Agreed. However, the punishment shouldn't just be financial, otherwise it will just be risk-assessed.
How about a ban on the data collection for a period, or lose the ability to use it.
How about a ban on the data collection for a period, or lose the ability to use it.
> otherwise it will just be risk-assessed.
The key is to make the cost so large that the risk isn't worth it.
What's my geolocation history worth to Google? $20? $200? Make them pay $2,000 if they lose or misuse it.
Sure, maybe they'll buy "data loss insurance". But even then, there will be motivation to do things better. Eg, the insurer will refuse to cover claims where proper encryption wasn't used, will prorate policies based on data collected, etc.
[0] https://en.wikipedia.org/wiki/General_Data_Protection_Regula...
Which I think would hit Apple rather hard.
Not especially hard; you send in auditors to delete the collected data from all servers. Oh, that kills the company? Too bad.
If they sell ad space based on your geolocation, is that a misuse?
If they sell your geolocation, ip address, and search history together, is that a misuse?