Cases
Each case card is a reference document based exclusively on regulatory decisions, court records, investigative journalism, academic research and whistleblower disclosures. All figures and dates are verified against at least two independent sources.
"Local Mess"
Meta and Yandex tracked Android browsers via localhost
Cambridge Analytica
87 million Facebook profiles and the 2016 election
Onavo and Facebook Research VPN (Project Atlas)
paying teenagers to be spied on
Leak of 533 million Facebook phone numbers (including 2.67 million Poles)
Facebook scraping flaw exposed 2.67 million Polish users among others.
Facebook Files
Frances Haugen and the largest leak of Meta documents
Emotional Contagion
Facebook manipulated the emotions of 689,000 users
Meta EUR 1.2 bn DPC
Record GDPR fine for data transfers to the United States
New Mexico v. Meta
The first jury verdict against Big Tech over harms to children
€390M DPC fine
The end of "performance of contract" for Meta's behavioral advertising
European Commission's €200 million DMA fine
"consent or pay" does not meet DMA requirements
Google Street View Wi-Spy
Google cars harvested private data from Wi-Fi networks
Google Safari Workaround
Circumventing the default privacy settings of iPhones
Google+ API bugs
Concealing the leak and shutting down the platform
Google Location History
Tracking despite the setting being turned off
Brown v. Google
Incognito mode is not private
Project Dragonfly
Google's censored search engine for China
Apple Batterygate
Deliberate slowdown of older iPhones
Apple Siri Grading
Contractors listened in on intimate conversations
Apple CSAM
The unshipped photo scanner as a collision between privacy and child protection
Microsoft Recall
AI-powered screenshots of everything you do on your computer
LinkedIn AI Training
€310M fine (GDPR behavioral ads, Oct 2024) + DPC monitoring of AI training (Nov 2025)
Amazon Ring
Employees spied on customers, hackers threatened children
Amazon Alexa
Human review of recordings from kitchens, bedrooms, and private conversations
Amazon Alexa & COPPA
Children's data kept "forever" despite parents' deletion requests
Uber God View
An internal tool for tracking journalists and customers
Uber Greyball
A tool for evading regulators in cities where Uber was banned
Uber 2016 breach
Joe Sullivan concealed the breach of 57 million records — the world's first CISO convicted of a crime
TikTok / ByteDance
Surveillance of journalists by Chinese and American employees
TikTok — children's data
Fines for children's data — DPC EUR 345M, ICO GBP 12.7M
TikTok — transfers to China
EUR 530M for transfers to China + PAFACA ban in the US
X / Grok
Non-consensual deepfakes and the DSA investigation
Clearview AI
30 billion scraped face photos
Zoom
False "end-to-end encryption" and servers in China