What does it mean for users to be in full control over their data [pdf]

I’m a bit skeptical that the shape of this concept as outlined will come to be, though maybe the framework and ideas can be used. It feels like they dove into the implementation, describing how it can be done, but haven’t addressed how to get companies on board nor provided incentives for them. We already have the technology for privacy and data control, what we really lack is the legal environment and proper incentives. In that sense I’d guess what we need is the strategy for how to pass these laws and establish incentives more than a description of the tech pipeline, no?

You are not in control of what others know about your shopping history. Your shopping history _WILL_ change when life events start up, and that's enough for advertisers to target you with new ads.

I'm sure a private individual doesn't like "leaking" this kind of data to others. But even if you didn't have an account, Web Browsers have cookies, your computer and internet has IP addresses, your credit card numbers and bank accounts also track you. The store (Amazon) will know your change of behavior and use that to bombard you with baby clothes advertisements.

Other than that, very intriguing. I don't know if it's all workable but one has to start somewhere.

Even more problematic is: What about data stored on disk, for example, and in memory? That's two copies. Is that allowed? If so, how does that meet the requirement of "no copies allowed"?

Beside that to have our data, witch does not means privacy, does only means owning A COPY of our data in a fully locally usable form, we need home storage, desktops, home offline copies etc. We need to state a thing: to be Citizens in the digital world, as we need a home in the physical one we need a digital home that's OURS not rent from someone else. Witch means today having a home server for sharing purposes, with a static ip, enough upload, a domain name (or at least a subdomain) and so on.

WE CAN'T OWN anything on a mobile simply because the platform is managed/manageable from remote NOT under our control. We can't own anything on proprietary tools or services.

The dream have a name: classic internet. Witch means a network of interconnected hosts, where one of them is ours, down to the hw. A world of desktop computing where we both produce and consume, sharing between peers, the cloud at maximum reduced to "scalable cache/computing resources in the Plan 9 alike model" and so on. The rest is just marketing.

<https://news.ycombinator.com/item?id=31833026>

We should also have the right to not sell it. My ISP with their monopoly, Facebook shadow profiles, etc are blatant examples of theft of my personal property.

Apologies for length. I'm thinking that privacy solutions need their own version of the "why your anti-spam idea won't work" checklist, which would be shorter...

<https://trog.qgl.org/20081217/the-why-your-anti-spam-idea-wo...>

I've written a bit on the hierarchy of failure, or reversing the sign, the requisite success chain, in problem resolution:

<https://old.reddit.com/r/dredmorbius/comments/2fsr0g/hierarc...>

Schluss fails at stages 2 & 3 (diagnosis and etiology), fails to clearly define 4 (objective), and embarks on "garbage can theory" solutionism in 5 (redress), a/k/a "when you have a hammer, every problem is a nail". Specifically Schluss is applying techno-solutionism to a problem which, whilst it has a technical component is fundamentally grounded in commerce, law, and risk. Given these foundational failings, I'm confident in predicting that Schluss will fail in its (poorly-formed and poorly-communicated) objectives entirely. I say this with absolutely no joy.

Furthermore, Schluss's proposed solution fails because data simply don't work that way. The way information works is through records and transmission, where a record preserves a transmission and a transmission reads from and/or generates a record. The notion that a single canonical data store assures that by technical means alone further stores and transmissions don't happen evidences a grievous failure to grasp the problem.

I've compiled a set of early concerns (largely pre-1980) expressed over computerised data, which are recommended reading. In particular I point to the works of Paul Baran written whilst at RAND in the 1960s. For those unaware, Baran is one of the co-inventors of packet-switched data routing, an essential foundation of today's Internet.

<https://www.rand.org/pubs/authors/b/baran_paul.html>

<https://diaspora.glasswings.com/posts/bf4f5f10f6120138799c00...>

Today's extraordinarily invasive data-surveillance regime, in both its surveillance state and surveillance capitalism instantiations, arises from a set of factors:

- Data storage is cheap and immense. Total data storage has been doubling every few years (2--4 by a quick search), and has been for decades, dating to at least the 1960s.[1] Significant thresholds were crossed in the early 2000s when disk ("spinning rust") storage crossed the 1 GB threshold, with the emergence of SSD storage after about 2010, and with the increasing prevalence of multi-GB RAM storage, with 24 TiB presently among the highest-memory tiers available on Amazon AWS. Your Humble Correspondent recalls working on a shared-compute resource in the early 1990s with a score and a half other analysts which had an aggregate storage of about 2 GB, for a mid-sized data-heavy corporation.

- Legal theories, most especially "Third Party Doctrine" in the US, which holds that "people who voluntarily give information to third parties—such as banks, phone companies, internet service providers (ISPs), and e-mail servers—have 'no reasonable expectation of privacy' in that information." <https://en.wikipedia.org/wiki/Third-party_doctrine>[2]. Given the practical impossibility of conducting a normal life without use of such services, the doctrine effectively establishes a national surveillance apparatus and abrogates Constitutional guarantees of privacy.[3]

- A compelling commercial case. There are critics of surveillance capitalism's actual effectiveness, notably Cory Doctorow.[4] His case boils down to 1) influences are at best marginal and 2) it's a grift, mostly against advertisers. To which I respond that margins matter and advertising is an $800 billion global industry, costing roughly $100 per head, most of which is actually allocated to the 1 billion richest people on Earth, so if you're reading this figure your "free Internet" (and television, radio, and legacy print media) are costing you $800 per year, for each member of your household. Free ain't cheap. And it's remarkably corrosive in terms of privacy, manipulation, dark UI/UX patterns, and shitty, shitty content.

- Legally-permitted data exchange. Data-based credit risk assessment dates to the dawn of modern banking (a fuzzy line, as are most, but let's posit 12th century Italy), with currently extant firms such as Dun & Bradstreet tracing their origins to the early 19th century.[5] Practices such as ethnic, religious, racial, and "old-boy" network profiling led to outcomes such as redlining (mentioned by Baran in his writings, again, highly recommended). Modern data-based predictions utilising machine learning result in what Cathy O'Neil has colourfully termed "weapons of math destruction" in her book of the same name.[6]

- Effectively no liability for misuse, leakage, or exfiltration of data. I've long since stopped tracking major commercial data breaches. I strongly suspect Wikipedia's list is grossly incomplete.[7] The modern corporation is a liability-externalising engine, and there are few liabilities more effectively externalised than data loss, and its various fellow travelers of fraud, "identity theft" (that is: fraud), phishing (that is, fraud), impersonation (that is: fraud), social engineering (that is: fraud), and ... well, more fraud. Defences and consequences are pushed to the individual, precisely the level at which they are both most damaging and least-effectively addressed.

IF we are going to tackle this problem, THEN these underlying foundations must be attacked.

Data exchange must be greatly limited. Whilst data are cheap individually, large scale data aggregation does remain expensive, and if not justifiable based on commercial value, it will cease.

Liability for unauthorised disclosure and abuse must be entirely revised. "Data are liability" has been my own watchword for much of the past decade. Legally it has far less validity than I'd like.

Practices based on data aggregation must be both closely regulated and highly taxed. The taxes serve both to reduce the profitability of such businesses, and to provide an additional legal tool for prosecution against offenders. The old saw about Al Capone stands.[8]

Individuals must be granted strong legal protections to correct, or remove, data absent a compelling public interest in that data being available. I'm well aware that this sets up a conflict between privacy and free speech rights. Those are inherent and unavoidable, the question is where one finds a balance.[9]

I also hold that privacy is an emergent response to changes in informational landscapes and increased capacities in capture, storage, transmission, and processing. As such, evolution of privacy follows rather than leads such technologies, it is inherently* reactive, no preemptive. I'm not aware of an explicit similar statement from others though Jeffrey Rosen's The Unwanted Gaze, much of the work of Daniel J. Solove and Helen Nissenbaum have struck me as above par. Harvard historian Jill Lepore has an excellent biography: <https://scholar.harvard.edu/files/jlepore/files/lepore_secre...> (PDF).

Above all: Privacy is fundamentally the ability to define and enforce limits on information disclosure. Approaches to improving it must account for both elements. Schluss's proposal by contrast fails both.

Why would someone think this is true or even could be true?

Whoops, I just shared their personal data. "You can only be fully in control when you are in full control of the originals of your data – and no copies are allowed to exist."

Privacy and other fundamental rights are sometimes at odds. Privacy and realism are sometimes at odds.