Zoe Etc

Should location privacy violations trigger automatic independent audits?

Consistency matters. Marriott's order followed breaches affecting more than 344 million customers and imposed [20 years of obligations](https://www.debevoisedatablog.com/2025/01/30/ftcs-consent-order-against-marriott-expectations-for-reasonable-security/), while location-data cases can receive a different mix of remedies. A statute could require an initial audit for every violation, then scale the frequency and duration to severity and repeat conduct.