"up to"
Are there any guidelines for determining actual compensation?
Are there any guidelines for determining actual compensation?
>Additionally, if a data breach occurs, the law permits consumers to recover up to $750 per incident (or actual damages, if greater).
So that might just be $750 as part of a punitive fee.
The idea with statutory damages is that determining the actual damages can be difficult and uncertain, so some laws allow plaintiffs to elect to ask for damages from a standard range, and the court will decide where damages should fall in that range based. It's basically saying "just give me about what is typical for cases like this one".
"Leaked (e-mail) adresses"
to
"Leaked nude photographs".
At least in the US, rest of the world isn't that shocked of our natural form.