“Framing the corporate legal defeat and regulatory failure as a systemic concern regarding data privacy and accountability.”