So my point is that the Privacy Commissioner has yet to even slap them on the wrist.
A law that has no teeth to it is useless. Like a car warranty that you cannot claim against.
Unfortunately, most companies do not pay attention unless their is a monetary penalty associated with doing something wrong.
How much should they be fined? That's a good question that should be spelled out in the law.
PS: Of the $80 Million levied in the US, Canada gets zip
Have to agree that most folks do not read the EULAs but then again most 13 year olds won't understand them.