Sorry, we've wronged too many people to be held accountable! What a wild argument.
Sorry, we've wronged too many people to be held accountable! What a wild argument.
Plucky startup takes the 'ask forgiveness rather than permission' approach and ignores a bunch of regulations, legal system doesn't care because they're just a plucky startup.
10 or so years later plucky startup is a massive corpo, another 5 or so years later the legal system catches up but they're a massive corpo making piles of cash and the worst the legal system can do at that point is penalize them with the equivalent of pocket change compared to the piles of cash they made while ignoring those regulations.
Examples? Usually when I see this argument being brought up, it's usually something like "[multinational megacorp] fined $x for breaking Belgian privacy laws", and then people pile in saying how "$x is 1% of [multinational megacorp]'s turnover" and therefore the fine is just "a cost of doing business", but neglecting to account for how much % of their revenue is in Belgium, or how much money they could have plausibly gained from the offenses in question.
Apparently, your personal information is worth about $2.90.
How much money did they make from the breach though? The argument made by the gp was that the fines were "pocket change compared to the piles of cash they made while ignoring those regulations.". According to FTC's press release, they were fined at least $575M for "failure to take reasonable steps to secure its network". How much do you think did you think equifax saved by skimping on security? Probably not $575M. They got pwned by an outdated third party library. There's no way keeping your libraries up to date is going to cost anywhere near that amount.
1. O'Connor v. Uber Technologies, Inc (2013): So far as I can tell, they settled for $20M, but the settlement allowed uber to continue classifying drivers as contractors. You might be able to spin this as how uber is above the law or whatever, but the alternate take is that the drivers had a weak case, and were settling for whatever they could get. Not the best case to argue that companies are fined too little.
2. New York AG vs Uber: it seems like the settlement was two parts: a cash payout for past drivers and additional benefits to drivers going forward. Digging deeper into the settlement, it looks like for the former like uber's crime was improperly deducting sales taxes and black car fees[1], rather than failing to pay benefits. It doesn't look like uber got fined at all for not providing benefits. Again, you can frame this as uber being so above the law that they got fined $0 (!), but the argument from above applies. Maybe the NY AG had a weak case. Clearly they're willing to fine uber for something as vague as improper sales tax deductions, so why didn't they go for damages for uber not paying benefits?
[1] https://ubernyagsettlement.com/Portals/0/Document%20Files/NY...
In cases companies megacorps are clearly breaking laws, they're appropriately fined. eg. https://news.ycombinator.com/item?id=44767461
Maybe all of this basically cashes out to "the worst the legal system can do at that point is penalize them with the equivalent of pocket change" to you, but to me this looks like a functioning legal system where defendants actually have a fair chance of winning.
Also, it's not only about the cost avoided, but about the damage to the people while you were doing that. If you're making money moving logging trucks, you skimp 50 dollars per trip in some straps to fix the load, and then a couple logs fall, run over a car, and almost kill a bunch of people, I'm not expecting you to pay just for the 50 dollars and the car repair.
Not always! lawyers representing classes in class actions don't always negotiate as hard as they could or should during settlements. You're probably familiar with federal judge Lucy Koh's prominent cases.
Not really understanding your argument that everything is fine, and there's nothing to see here.
I took their post to mean that the $2.90 figure included damages.
In your words, how much will the ensuing fraud, identity theft, and spam cost me?
That's not what the legal departments seem to be used for though.
Again, how much do you think Equifax saved from skimping on security? Sure, spending $575M would have prevented the hack, but how much did they have to spend to be considered not negligent?
What relevance does their plausible earnings via the offense have to the fine for the offense?
The harm suffered by the people whose privacy was violated is still there regardless of how much money was made through the violation.
We don't know if that was due to legal departments or other factors, so claiming it was due to legal departments seems more like hope/wishing/assuming rather than actual knowledge. :(
Ubercab. Later sued and changed to Uber.
Now, too big to fail.
Basically is illegal unlicensed uninsured scam cab company.