The first principle should be to separate "documents" from "webapps". An article on NYTimes should be classified as a document which comes with a sandbox with m

The first principle should be to separate "documents" from "webapps". An article on NYTimes should be classified as a document which comes with a sandbox with minimal data collection. Of course, as things stand, every site wants to become an app because that's how the incentives are set up. "Apps" - which can collect more data - should come with significant user friction: permissions dialog, standardized ToS, disclosures etc. Similarly, sites that offer "documents" (i.e. no tracking), should be incentivized in other ways (share button, micropayments etc). There's a lot that can be done.