I have put some thought into the possibility of implementing this requirement "client side". In other words I wanted to think through what would be needed to im

I have put some thought into the possibility of implementing this requirement "client side". In other words I wanted to think through what would be needed to implement this for myself. I think an access point with the ability to proxy requests with tls termination support could be used to decrypt/encrypt all traffic inbound and outbound. This has two problems. First this would not allow visibility into messages where the encrypted payload was itself encrypted. Second this would only be as trustworthy as the hardware, drivers and operating system. In other words, unless you have the ability to build the hardware yourself or knew a trustworthy manufacture you could never be 100% that you are aware of all collected data. This also addresses less than half of the issue. To know when your data is being used the best way would be to catalog, index and correlate all known information about the business in question including all official filings, mergers, acquisitions and any trustworthy news reports or blog posts. This information could be mined for possible disclosures of your information. This algorithm would of course have to be recursive to provide insight after the data leaves the hands of the original collectors. Now comes the fun part, information is gathered about us in multiple ways including tax filings, credit card purchases, facial recognition within photos (which you may only be in the background). All of that leads me to believe that this is not something which can be done alone. What I believe we need is a law which would guarantee us the right to receive notifications when data concerning us has been collected, used or sold. As far as a regularatory body, that would be nice and could be used as a trusted third party to collect all the information which should be reported to individuals, this could lead to a web portal which aggregates all disclosures for us. This however is not necessarily needed in the short-term, I believe if such a law was passed we could rely on whistle-blowers to report transgressions. The important thing would be to establish the right, we can worry about enforcement at a later point.