The status quo lack for user data protection is appalling.
The status quo lack for user data protection is appalling.
It seems like we have two issues: politicians who don't really understand the technical ramifications around the laws and issues; and politicians who don't really care and just want their funding. It feels like the only way to make them both really get it is to use some form of hacktivism. Would we like a law to prevent robocalling? Then use our technological expertise to robocall all numbers related to these officials non-stop and have the message be "Pass a law to stop robo-calling". Worried about ISPs selling your data? Then use our technological expertise to buy this data from the ISPs and correlate the data and make public all the details of the data about these politicians and those related. Maybe this is nonsense but it seems like the only way to make it real for them.
Convince some industry group to seed it with $20k or so, target a small state where campaign donation amounts are low and bam, you've got your first anti-robocalling law (with teeth) on the books.
Which is precisely why the GDPR's enormous maximum fines are a good thing, in my book. Minor and unintentional violations can be treated with leniency, but a large organization that's repeatedly and deliberately compromising the privacy of millions can wind up paying for it in an actually noticeable manner.