4 ms·
So let's work through a scenario here. Assume you are Verizon (or any other carrier). I pay you for cell phone voice & internet service. As part of that exchan
by newman314 11y ago
So let's work through a scenario here.
Assume you are Verizon (or any other carrier). I pay you for cell phone voice & internet service. As part of that exchange, I provide billing info etc. etc.
Are you saying that I don't own said information and that you are free to derive additional revenue by selling it to someone else? To me, I paid for a service, thereby a single transaction. My expectation is that as part of that transaction, the other party should not have to the ability to derive secondary benefit without explicit consent. Particularly, since I don't see any upside to secondary/tertiary usage.
I guess I'm much more for the European vision of personal data privacy (you own your own data and grant it for specific use) vs. the US version (anything goes).
- rayiner 11y agoYou can't own facts (such as the fact you live at 123 XYZ Street or that you made a 4 minute call last week to your mother). You can own documents (digital or otherwise) containing facts. But the documents you're talking about here are Verizon's database files. You have no right to them. I'm not familiar with European data privacy laws, but I imagine they're like U.S. privacy laws in the sense that they're not based on ownership. E.g. it's illegal for schools to disclose your educational information to third parties. But your student records are still the school's records, not yours.
- newman314 11y agoEU style grants much more in terms of data ownership for an individual. So, comprehensive vs. patchwork coverage. From the EU DPD (1 of 2 key documents), "Pursuant to the Directive 1995/46/EC, the data controller should ensure compliance with several principles relating to data quality. These principles include: (1) the collected data should be processed fairly and lawfully; (2) the collected data should be collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes; (3) the collected data should be adequate, relevant, and not excessive in relation to the purposes for which they are collected and/or further processed; (4) the collected data should be accurate and, where necessary, kept up to date, and; (5) the collected data should be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data were collected or for which they are further processed." * http://resources.infosecinstitute.com/differences-privacy-laws-in-eu-and-us/ http://resources.infosecinstitute.com/differences-privacy-la... * http://politicsandpolicy.org/article/european-union-and-internet-data-privacy http://politicsandpolicy.org/article/european-union-and-inte... * http://www.nbcnews.com/id/15221111/ns/technology_and_science-privacy_lost/t/la-difference-stark-eu-us-privacy-laws/ http://www.nbcnews.com/id/15221111/ns/technology_and_science... * http://privacylawblog.fieldfisher.com/2014/how-do-eu-and-us-privacy-regimes-compare http://privacylawblog.fieldfisher.com/2014/how-do-eu-and-us-... * http://www.wsj.com/articles/SB10001424127887324338604578328393797127094 http://www.wsj.com/articles/SB100014241278873243386045783283... PS. This is not a wholesale endorsement of EU style privacy, there are things that need to be fixed too but IMO is much more respectful of the individual in general.