Data privacy

Protecting your data instead of selling it.

Company actions

10 actions

What the business itself does.

  1. Builds or deploys biometric surveillance Catalog definition — not a live check The company builds, embeds, or deploys facial recognition or another biometric identification system for a company operation or product.
  2. Faces privacy enforcement action or allegations Catalog definition — not a live check A data-protection authority, court, legislature, or substantiated investigation identifies the company as the subject of an unresolved privacy matter — a filed suit, opened investigation, regulatory complaint, or documented allegation of unlawful collection, sharing, or retention.
  3. Is held responsible for privacy violations Certified live check A final regulator or court action, stipulated judgment, or completed settlement penalizes or orders the company to remedy documented privacy, data-security, or data-protection claims or violations.
  4. Limits collection and retention of customer data Catalog definition — not a live check The company verifiably limits what customer data it collects, retains, or shares.
  5. Limits tracking without user consent Catalog definition — not a live check The company requires affirmative user consent before apps, advertisers, or other third parties track a person across apps, websites, or services.
  6. Releases advanced AI without independent safety testing Catalog definition — not a live check The company releases or materially expands access to an advanced AI system without publishing or commissioning independent pre-release safety testing for documented high-impact risks.
  7. Reports a breach exposing customer data Certified live check The company or a regulator reports a confirmed security incident in which customer personal data was taken, accessed without authorization, or publicly exposed.
  8. Sells or shares customer data for advertising Catalog definition — not a live check The company sells customer data or shares it with third parties for targeted advertising.
  9. Supplies facial-recognition tools to police Catalog definition — not a live check The company sells, licenses, or otherwise provides a facial-recognition system to a police or law-enforcement agency for identifying or tracking people.
  10. Uses AI for consequential decisions without meaningful human review Catalog definition — not a live check The company uses an automated system to make hiring, firing, credit, insurance, housing, health, or similar consequential decisions without meaningful human review or appeal.

Leadership actions

3 actions

What its executives, founders and board do.

  1. Leader authorizes biometric-surveillance deployment Catalog definition — not a live check A named executive, director, or founder authorizes, continues, or publicly defends deployment of facial or other biometric identification that can identify people in homes, public spaces, or law-enforcement footage.
  2. Leader is personally subject to a final privacy remedy Catalog definition — not a live check A privacy or consumer-protection regulator enters a final order or completed settlement that personally binds a named leader for deceptive collection, surveillance, sharing, retention, or inadequate safeguarding of personal data.
  3. Leader publicly advocates for user privacy Catalog definition — not a live check A named executive, director, or founder takes a dated, independently reported public position defending user privacy — testimony, a signed op-ed, or a refusal to weaken encryption or hand over user data.