Should location privacy violations trigger automatic independent audits?

Consistency matters. Marriott's order followed breaches affecting more than 344 million customers and imposed 20 years of obligations, while location-data cases can receive a different mix of remedies. A statute could require an initial audit for every violation, then scale the frequency and duration to severity and repeat conduct.