5 ms·
The thing is, I don't actually have my data. Perhaps if I collected it and stored it, perhaps put it behind an accessible API and supplied Google et al with an
by crispyporkbites 9y ago
The thing is, I don't actually have my data.
Perhaps if I collected it and stored it, perhaps put it behind an accessible API and supplied Google et al with an API key to access it I might have a case for charging them for it.
- specialist 9y agoIt's worse than that. We currently don't even have the right to determine who has our data, or how its being exploited. The remedy, of course, is to establish intrinsic properties rights over our own data. No different than copyrights. Maybe we need a new catchphrase. I propose bodyrights. It captures the notions of self, privacy, identity, and sovereignty all in one.
- gipp 9y agoOkay, but like operationally, what does that even mean? How do we establish a legal definition of what "your data" even is? When we talk about "big data" and data collection, the vast majority of what we're talking about basically just boils down to web logs, and derived data that's inferred from those logs. So is an entry in a web log that corresponds to something you did now your property? Is anything someone writes down about me now my property? If I walk in a store and the store owner writes down that I was there, is that my property?
- specialist 9y agoCan those bits of data be tied back to people?
- politician 9y agoThe GDPR clearly lays out the definition of personal data, and the regulations are actually pretty easy to read. https://gdpr-info.eu/chapter-1/ https://gdpr-info.eu/chapter-1/ PS: GDPR says that "Yes, entries in web logs that can personally identify a data subject is personal data"
- pbhjpbhj 9y agoPII, Personal Identifiable Information, is the phrase I know for this. I'd like to see a requirement for all companies receiving PII to issue an account of how they use it and who it's sold to, those receiving your PII would also have an obligation to notify you, and offer access to the same audit data (how they're using it, who they got it from, who they gave/sold it to). Legit companies would then leak information, by design, showing companies using/selling your data without notifying you. Real fines like those anticipated in the GDPR would be needed to encourage companies to adhere to the legislation. /ifiwereemperoroftheworld
- specialist 9y agoAgreed. I insist that all demographic data at rest is encrypted. I currently believe our objectives are complimentary.
- s73v3r_ 9y agoYou forgot the all important requirement to be able to force them to delete it. I never once chose to do business with Equifax. But, due to their extreme incompetence, now I'm the one that has to suffer.
- PeterisP 9y agoIMHO lots of the valuable data that the original article is about isn't necessarily PII. That is, even if they're linked with PII right now, they need not be so and the article's argument would still make sense in that case. E.g. sensor-mapping data gathered by Tesla from your driving is extremely valuable even if you absolutely dissociate it from anything personally identifiable. Facebook would have immensely valuable aggregate data about how people are likely to react when seeing a particular piece of content even if they would (or would be required to) not link the event to anything personally identifiable and just keep the aggregate. Etc, etc, etc.