4 ms·
As a California resident who regularly opts out of data collection (and also, incidentally, works in tech), as a consumer I don't really care what you or your c
by agar 3y ago
As a California resident who regularly opts out of data collection (and also, incidentally, works in tech), as a consumer I don't really care what you or your clients think. I just want you to comply with the law.
A remarkably high percentage of our legal framework is designed to protect a very small number of people from being exploited by another small number of people. Yes, the costs of implementing these laws are high, but the societal benefits are, in aggregate, huge.
My personal information is my own, just like my house, my car, my investments, my copyrights, and bank accounts. And I expect there to be laws that protect it, allow me to control it, and restrict how others can use it just as there are for my other assets.
If applying these laws is inconvenient, then that speaks volumes as to how overdue these laws were.
- johndhi 3y agoI completely disagree that the benefits are huge. I like laws that say we can opt out of and must consent to email marketing. It leaves companies freedom to implement however they want. CCPA requires complete deletion, which isn't easy to achieve these days, of data that no one is using in an out of the way data store that otherwise wouldn't need to be touched. It's just a lot of effort for no benefit. I think you should be allowed to tell a company not to use your information. You shouldn't be able to tell them how not to use it.
- agar 3y agoHard disagree. Many security "breaches" are really the discovery of customer data in an S3 bucket "that no one is using in an out of the way data store that otherwise wouldn't need to be touched." Forcing companies to track and manage the data in their stewardship is necessary because clearly the economic incentive is not high enough - by your own admission. It's easier (and cheaper) to just leave around. But - when, not if - it's hacked, /I/ bear the cost of their negligence, not them. This is exactly why consumer protection laws are needed.
- johndhi 3y agoI think we're forcing them to manage the data in their stewardship inefficiently. I'd actually love a law that says if my data gets stolen from a company and a hacker uses that stolen data to harm me, the company must pay for (some portion of) those harms. But today it's setup so even if I don't get harmed they pay some lawyers to make the case go away.