What I'm trying to understand is when you talk about having, for instance, law enforcement be in charge of the investigation and then law enforcement is trying to prove intent. I appreciate that for a company that in good faith honestly tries to observe people's privacy and they develop a system and in the end it's found not to be adequate, slapping them with the maximum fine may not be fair treatment.
