Should companies be required to pay customers when they misuse location data?

Not every location violation creates the same risk. A poorly worded consent screen is different from selling identifiable visits to a shelter. A flat payout could encourage nuisance claims while underpaying the worst cases. Regulators should keep the ability to choose refunds, as they did in the $245 million Epic order, rather than make one remedy mandatory.