LAYER 1 — EXTERNAL WORLD (Public Sources)
Real decisions, regulations, and reports published in the world. All publicly accessible. All indexed.
CASE LAW
Meta Platforms v DPC / EDPB (Jan 2023)
€390M fine · EU · "contractual necessity" cannot substitute valid consent for ad targeting · Directly cited by Harvey re: consent vs. routing intent distinction · Source: EDPB press release, EU Official Journal
CASE LAW
Schrems II — CJEU C-311/18 (2020)
EU-US Privacy Shield invalidated · Principle: formal mechanisms cannot substitute genuine control · Underpins Harvey's "platform compliance consultation" strategy · Source: CJEU official judgment database
STATUTE
GDPR Articles 13–22 (2018, enforced)
Transparency, access, erasure, restriction, portability, right to object to automated decisions · Referenced as the regulatory framework Harvey maps corporate exposure to · Source: EUR-Lex
REGULATORY
Platform Business Model Analysis (public)
Google ad targeting architecture (public AdWords/Ads documentation) · Meta cross-platform data correlation (EDPB cross-platform investigation 2022) · Amazon supplier profiling (FTC findings) · Telco traffic shaping (net neutrality record) · All publicly documented
REPORT
DLA Piper Global Data Protection Report 2024
162 countries with data protection legislation · 71% have enforcement authority · Cited by CLO (not Harvey directly) for global enforceability claim · Publicly available PDF