3 ms·
This would be a lot easier for me to digest if YC could ask their companies going forward to pledge to treat all user data as PII.
by aestetix 10y ago
This would be a lot easier for me to digest if YC could ask their companies going forward to pledge to treat all user data as PII.
- tlb 10y agoI'm interested in this idea, but I'm not sure exactly what to suggest that companies do. Can you recommend some guidelines on how to treat user data that will reduce the harm caused by the way startups currently treat user data?
- aestetix 10y agoTwo immediate suggestions: 1. Use a Ulysses pact[1] explaining how data is and will be used. Assure users that the company won't turn into a data broker[2]. 2. Either lobby local/state/federal government to create legal data protections, or publicly support existing efforts. Europe is not perfect, but the ECHR and German data protection laws are a fantastic model to follow. There are a lot of more technical suggestions involving data sanitizing and security, but for a startup that just needs to get up to speed quickly, those are two suggestions that would go a long way. Leading by example might bring the entire industry forward in a positive way. [1]https://en.wikipedia.org/wiki/Ulysses_pact https://en.wikipedia.org/wiki/Ulysses_pact [2]https://www.technologyreview.com/s/601506/23andme-sells-data-for-drug-search/ https://www.technologyreview.com/s/601506/23andme-sells-data...