Should location privacy violations trigger automatic independent audits?

Right now the burden of discovering ongoing abuse falls on the public, which is absurd. The FTC had to sue the data broker Kochava in 2022 for allegedly selling location data that tracked people to sensitive places like reproductive health clinics, and cases like that take years while the data keeps flowing. An automatic audit flips the burden to where it belongs: the company that broke the rules pays to prove it stopped. Without that, a violator's promise to behave is worth exactly what its last promise was worth. Independent verification is the difference between a settlement and a press release. If a business cannot survive proving it deleted the data it was told to delete, it should not have been selling people's movements in the first place. FTC