>The website should be the one to inform me that they are actually using the audio api for tracking and not just playing audio. With a large penalty for lying.

>The website should be the one to inform me that they are actually using the audio api for tracking and not just playing audio. With a large penalty for lying. The website can't do anything without your browser cooperating. The website can request the audio API as much as it wants but if your browser had a same configuration then it would just ignore it. You're asking for legislation on a problem with a global scope. Countries that ignore your laws will still do all of this as long as your browser lets them. >If we were talking about the issue of people being stabbed you don't suggest "Why should the stabber be penalized? The victim should have been wearing a Kevlar vest that doesn't allow them to be stabbed. This is such a poor analogy. The server doesn't do anything without a client asking for something. In your case the victim went to the stabber and started the interaction. Then the victim's electric scooter (browser) malfunctioned or was poorly configured and drove into the stabber's knife. Of course the server isn't blameless, because they are most likely knowingly exploiting this. But to suggest that the user has no control over this is foolish. It implies that the user can't be blamed for anything their computer does.