@thegibson regulators being too soft... Maybe they suffer incompetence, negligence, corruption, starvation of resources or a misplaced focus on privacy only being an issue when financial damages can be identified. Whatever the case, their low activity means not only bad privacy, but the normalisation of unlawful corporate behaviour in any industry that can leverage misuse of personal data to develop an unfair market advantage (advertising, publishing, retail, software, ...)