It also has potential to spawn new greasy organisations that facilitate mass requests for personal info on your behalf which could lead to some new PPI-style compensation claim situations.
It's a good step for custody of identity information but I'm not sure impact has been completely thought through.
Guess we will see. I'm all for individual rights and privacy, but there should also be options that are reasonably achieved by all parties.
If we found that a group of companies had made a business model of dumping garbage in public areas through a legal loophole, Id hope that people wouldn't be saying that we have to figure out some solution that's reasonable for all parties when the government goes to stop that
That would be ideal solution for all this mass personal data collection and mishandling.
Another way of looking at it is that it adds significant incentives for organizations to make user data more easily accessible to users. There's no reason information requests _have_ to be expensive operations.
@vecna (https://github.com/vecna, former Hacking Team employee turned privacy activist) is working towards that, and I think he wouldn't mind contributions.