6 ms·

I think there needs to be some kind of "responsible and clear disclosure" laws that require companies to very clearly and overtly disclose what data they're col

by cj 3y ago

I think there needs to be some kind of "responsible and clear disclosure" laws that require companies to very clearly and overtly disclose what data they're collecting and how they're using it. Some kind of standardized "label" (something like the standardized nutritional facts on food products) that is easy for consumers to read and comprehend, not buried in pages of paperwork, without needing to read a 20 page TOS / Privacy Policy. The legal problem is everyone is "consenting" to data collection by accepting a TOS which protects companies and makes it "legally acceptable". The real problem that needs solving is consumers are rarely aware of what they're consenting to. Companies might not hoover up and sell as much data if they were required to clearly tell everyone they're doing it. Basically, let's get rid of this idea that agreeing to a 20 page TOS / Privacy Policy is legally binding when < 1% of people actually read what they're agreeing to.

JohnFen 3y ago
> The real problem that needs solving is consumers are rarely aware of what they're consenting to. Right, which means consent was never actually given. In order for it to be consent, you have to be fully informed of and understand what you're being asked to consent to, and there has to be a realistic and meaningful way to withhold that consent.
- HeatrayEnjoyer 3y ago
  There's so many adults that were clearly never taught F.R.I.E.S. and it's both depressing and horrifying. Freely Given Reversible Informed Enthusiastic Specific
- godelski 3y ago
  > you have to be fully informed of and understand what you're being asked to consent to This really makes it seem like only a very limited set of contracts would actually be legal. To me a big problem we have is that we act as if there is a fair "fight" between a mega corporation with a expensive team of lawyers, expert psychologists, and supercomputers against ... my gandma who googles to get to google. I think we all know that nearly no one reads pretty much anything they sign and if they did it is not clear that they are fully informed, understand, or are not under pressure (clear case might be medical consent forms authorizing something like a emergency surgery. I'd find it impossible to convince me the person signing was well informed and not under duress. I'd rather case like that revolve around expert of doctors determining if an action was reasonable to another doctor rather than have anything to do with a patient or surrogate signing a document. Seems to just waste time). It really would be great if the crack team of lawyers was required to put terms and conditions into text that is understandable by an average person in a reasonable amount of time.
  - HeatrayEnjoyer 3y ago
    >This really makes it seem like only a very limited set of contracts would actually be legal. Correct. There is an abject lack of respect and even basic understanding of consent in society, especially in the business world. It's a massive problem that does not receive anywhere near the attention it deserves.
Eji1700 3y ago
I honestly don’t think this would work. The number of “well why should I care if they have the data” conversations I’ve had is just depressing.
- cj 3y ago
  We can't force people to care about privacy. That's not the goal. If someone is clearly informed and they still don't care, that's totally fine. The problem is people aren't being clearly informed.
  - thfuran 3y ago
    No, the problem is that they don't really have an alternative. To give none of your information to banks, email providers, ISPs, cell service providers, etc. is to remove yourself from society.
    - JohnFen 3y ago
      > the problem is that they don't really have an alternative. In situations where there isn't an alternative, consent is impossible.
      - 20after4 3y ago
        Companies, courts, and for the most part the congress, obviously don't seem to care. (In the USA, at least. Europe sort of seems to care but even then I'm not sure the solutions have been adequate / appropriate)
    - 20after4 3y ago
      This is the key right here. There should be a clear way to withhold consent because implicit agreement isn't good enough for the kind of data collection and aggregation that is happening.
    - lumb63 3y ago
      I’m not sure of your personal skills, abilities, and background, so this is more of a general call to action: Why not create an alternative? I’ve often heard people talk of a lack of alternatives to certain services, so they use them begrudgingly, or boycott them at large personal cost. But it doesn’t have to be this way. There is nothing that I’m aware of that says banks or digital service providers need to collect any more information than is necessary to provide the service they offer. It seems to me that, at least in a this niche community there is a desire for privacy-respecting products and services. A company that oriented itself around meeting that demand would be, I suspect, very lucrative.
20after4 3y ago
A TOS is absolutely not a contract that people enter into fully aware of the implications. We should have granular control over the permissions we give companies in how they use data. I don't feel it is enough to require clear disclosure of the ways a company uses data, I think they should require explicit and knowing consent from the user, and the user should have a meaningful way to withhold consent other than to abstain entirely from using any online services. It is hardly fair or equitable, and surely should not be legal that a company can, without any meaningful way for a user to withhold their consent, declare & demand unlimited control and benefit (of/from the user's data) for any purpose whatsoever, including sharing and selling said data for a profit to data brokers who have no contractual obligation to the user once they obtain the data.
- godelski 3y ago
  I'm fully with you, but my question is how you actually inform people at the power of their data? I often pressure people into chatting with me through Signal and I'll be honest, there is often a defeatist or lack of knowledge at what this data can be used for even among graduate CS students. Honestly, I think one of the major issues is that the world is exceptionally complex these days (well, always has been, but surely there's more now). Our entire world runs on specialization but we often act as if one needs to be an expert in nearly every domain. Is not the definition of an expert someone who understands the nuances and complexities of said niche? It would then seem de facto unreasonable for people to have a nuanced understanding of practically any given subject. Because of this, I want to question the common framing about focusing on informing people. I don't want to stop informing people, to be clear. But I think we should look for solutions that are not reliant upon people being informed, as this is clearly not a scalable nor stable mechanism for creatures with finite ̶t̶a̶p̶e̶ ̶ knowledge and finite time.
  - 20after4 3y ago
    The thing is, people don't have the ability to withhold consent. I don't think people would need to be fully informed to realize that withholding consent is better than giving it, if that was actually a viable choice to make. I mostly trust Mozilla but I still turn off all of their data collection in Firefox. This wasn't always my default but it is now my default in any place where I am given the choice. It really is difficult to understand all of the implications and it's taken me years of experience to realize that I should just default to presuming that data collection is going to be bad for me in the long run. When there is a complex and nuanced situation involving a binary choice then all you really need to know is which of the two choices is generally more likely to be in your best interest, then always choose that one. For data collection the safe bet is always "no"

by cj 3y ago

JohnFen 3y ago

> The real problem that needs solving is consumers are rarely aware of what they're consenting to. Right, which means consent was never actually given. In order for it to be consent, you have to be fully informed of and understand what you're being asked to consent to, and there has to be a realistic and meaningful way to withhold that consent.

HeatrayEnjoyer 3y ago
There's so many adults that were clearly never taught F.R.I.E.S. and it's both depressing and horrifying. Freely Given Reversible Informed Enthusiastic Specific
godelski 3y ago
> you have to be fully informed of and understand what you're being asked to consent to This really makes it seem like only a very limited set of contracts would actually be legal. To me a big problem we have is that we act as if there is a fair "fight" between a mega corporation with a expensive team of lawyers, expert psychologists, and supercomputers against ... my gandma who googles to get to google. I think we all know that nearly no one reads pretty much anything they sign and if they did it is not clear that they are fully informed, understand, or are not under pressure (clear case might be medical consent forms authorizing something like a emergency surgery. I'd find it impossible to convince me the person signing was well informed and not under duress. I'd rather case like that revolve around expert of doctors determining if an action was reasonable to another doctor rather than have anything to do with a patient or surrogate signing a document. Seems to just waste time). It really would be great if the crack team of lawyers was required to put terms and conditions into text that is understandable by an average person in a reasonable amount of time.
- HeatrayEnjoyer 3y ago
  >This really makes it seem like only a very limited set of contracts would actually be legal. Correct. There is an abject lack of respect and even basic understanding of consent in society, especially in the business world. It's a massive problem that does not receive anywhere near the attention it deserves.

Eji1700 3y ago

I honestly don’t think this would work. The number of “well why should I care if they have the data” conversations I’ve had is just depressing.

cj 3y ago
We can't force people to care about privacy. That's not the goal. If someone is clearly informed and they still don't care, that's totally fine. The problem is people aren't being clearly informed.
- thfuran 3y ago
  No, the problem is that they don't really have an alternative. To give none of your information to banks, email providers, ISPs, cell service providers, etc. is to remove yourself from society.
  - JohnFen 3y ago
    > the problem is that they don't really have an alternative. In situations where there isn't an alternative, consent is impossible.
    - 20after4 3y ago
      Companies, courts, and for the most part the congress, obviously don't seem to care. (In the USA, at least. Europe sort of seems to care but even then I'm not sure the solutions have been adequate / appropriate)
  - 20after4 3y ago
    This is the key right here. There should be a clear way to withhold consent because implicit agreement isn't good enough for the kind of data collection and aggregation that is happening.
  - lumb63 3y ago
    I’m not sure of your personal skills, abilities, and background, so this is more of a general call to action: Why not create an alternative? I’ve often heard people talk of a lack of alternatives to certain services, so they use them begrudgingly, or boycott them at large personal cost. But it doesn’t have to be this way. There is nothing that I’m aware of that says banks or digital service providers need to collect any more information than is necessary to provide the service they offer. It seems to me that, at least in a this niche community there is a desire for privacy-respecting products and services. A company that oriented itself around meeting that demand would be, I suspect, very lucrative.

20after4 3y ago

A TOS is absolutely not a contract that people enter into fully aware of the implications. We should have granular control over the permissions we give companies in how they use data. I don't feel it is enough to require clear disclosure of the ways a company uses data, I think they should require explicit and knowing consent from the user, and the user should have a meaningful way to withhold consent other than to abstain entirely from using any online services. It is hardly fair or equitable, and surely should not be legal that a company can, without any meaningful way for a user to withhold their consent, declare & demand unlimited control and benefit (of/from the user's data) for any purpose whatsoever, including sharing and selling said data for a profit to data brokers who have no contractual obligation to the user once they obtain the data.

godelski 3y ago
I'm fully with you, but my question is how you actually inform people at the power of their data? I often pressure people into chatting with me through Signal and I'll be honest, there is often a defeatist or lack of knowledge at what this data can be used for even among graduate CS students. Honestly, I think one of the major issues is that the world is exceptionally complex these days (well, always has been, but surely there's more now). Our entire world runs on specialization but we often act as if one needs to be an expert in nearly every domain. Is not the definition of an expert someone who understands the nuances and complexities of said niche? It would then seem de facto unreasonable for people to have a nuanced understanding of practically any given subject. Because of this, I want to question the common framing about focusing on informing people. I don't want to stop informing people, to be clear. But I think we should look for solutions that are not reliant upon people being informed, as this is clearly not a scalable nor stable mechanism for creatures with finite ̶t̶a̶p̶e̶ ̶ knowledge and finite time.
- 20after4 3y ago
  The thing is, people don't have the ability to withhold consent. I don't think people would need to be fully informed to realize that withholding consent is better than giving it, if that was actually a viable choice to make. I mostly trust Mozilla but I still turn off all of their data collection in Firefox. This wasn't always my default but it is now my default in any place where I am given the choice. It really is difficult to understand all of the implications and it's taken me years of experience to realize that I should just default to presuming that data collection is going to be bad for me in the long run. When there is a complex and nuanced situation involving a binary choice then all you really need to know is which of the two choices is generally more likely to be in your best interest, then always choose that one. For data collection the safe bet is always "no"