Can state law compel a federal agency to do anything?
Within the jurisdiction of a state, probably. States rights should have precedent over federal except in cases that involve interstate activity. This is being tested in Texas right now with various firearm laws that are meant for items made in and staying within Texas.
The second piece about comparing the government to a business isn't valid. There exist many laws and rules that apply only to the government.
Not that I agree with the distinction. I think companies larger than the US government at formation should probably have rules to keep them good for humanity.
Realistically, scraping people for their data like this should just not be allowed at all. People are more important than corporations.
Although you may have miss the tamer recent version where Ebay sent "a bloody pig mask, a funeral wreath, and a book entitled “Grief Diaries: Surviving Loss of a Spouse", practiced installing a GPS tracker and then travelled 3000 miles to install one, "The Defendants also posted the Steiner’s address on Craigslist and other websites, inviting strangers to the Steiners’ home for sex parties, and advertising yard sales".
The story has a happy ending though as "Defendant Wenig departed eBay with a $57 million severance package.".
> https://www.techdirt.com/2021/07/29/exec-that-tried-to-send-...
> https://storage.courtlistener.com/recap/gov.uscourts.mad.236...
At least one person went to prison, so there's that.
This is in contrast to militaries who are assumed to operate as legitimate extensions of foreign policy.
Good luck with that. You cannot delete something which "doesn't exists". /s
It is an unconstitutional practice. If they didn’t think it was they wouldn’t go through the extra steps to get the data. Outsourcing one part of the illegal enterprise doesn’t make the whole thing legal.
But if they want to play this game, an interesting way to bait a Supreme Court case might be to request a CCPA delete for the NSAs “commercial” data.