This is definitely a step forward in thinking regarding 'personal data control', but if you imagine 'data brokers' as the potential attacker here, and assume th

This is definitely a step forward in thinking regarding 'personal data control', but if you imagine 'data brokers' as the potential attacker here, and assume that their goal is to sell your information to the highest bidder, they still have some opportunity here. They could/would form 'data validation' companies who would investigate the plausibly-deniable facts you had been distributing. For example, the validator could buy your age from five different vendors and likely end up with a pretty good approximation of your real age. Ok, perhaps this creates a 'data marketplace' and there would be competition - but the situation is ultimately very similar to credit scoring agencies (Equifax et al), and clearly something is wrong in that industry. There'd be ample opportunity for these data validators to follow the same pattern as credit scoring agencies and charge third parties for access to the validated data. And possibly even charge people to have details corrected. Regulation might help, but regulatory capture happens. Some good ideas here and it'd be great to develop this further and make it more robust from attack.