> Legislation is a tool. It has lots of hangups, a legacy from thousands of years of history. It’s not always the best tool for the job. I’m not an anarchist, I

> Legislation is a tool. It has lots of hangups, a legacy from thousands of years of history. It’s not always the best tool for the job. I’m not an anarchist, I just feel we’re get more milage from better browser behaviour and defaults than laws in this particular instance. I care about a lot more than browser data, though. I don't really care how they're getting the data, I think they shouldn't be able to, and if they do it should be because they have to have it in order to provide a service to their customers, and they should be so strictly limited in what they can do with that data that conducting any business unrelated to it is incredibly risky even if they don't intentionally leverage it to their advantage. Credit card companies collecting & selling data, Google, Microsoft, Amazon, banks, magazines selling subscriber lists, cable companies selling your data, all of it should be banned. When collecting user data can't be avoided, it should come with scaling, large bond or escrow requirements to cover customer damages (which ought to be set at a high level with the leak itself considered damaging, no further proof of damage required) in the case of leaks. I want companies to treat personal data of users as something like nuclear waste: try not to make any if possible, and spend a lot of money making sure it's safe if you must keep it around.