The decision comes amid increasing scrutiny over tech companies' handling of personal data and their obligation to protect user privacy.