In an email sent to customers earlier this week viewed by Engadget, the company announced that it had made updates to the “Dispute Resolution and Arbitration section” of its terms of service that would prevent customers from filing class action lawsuits.
Have they ever been audited?
How does the legal authority work with GDPR if the company’s physical and financial operations are entirely within the US? Would the GDPR even be allowed to audit them without their consent?
No idea if they’ve been audited. GDPR doesn’t require it. My understanding is that American companies doing any business or having any users in the EU need to be GDPR compliant for those users. I don’t think that’s been challenged in any courts yet.