Everything should be opt-in. Burden should be on them, something like, "We want to share your data and if you agree here are the benefits to you."
Anything shy is begging companies to dark-engineer patterns around obtaining it.
https://pasteboard.co/rrL2bpmiE6Zq.png
And most you can't reject
Even more hilarious. pageboard itself said 847 partners!
I.e. all companies really want to be in the business of tracking customers, because they can repackage derivative products and increase their revenue.
So the "subscription" option ends up experiencing a lack of support, mysterious technical issues, underinvestment, etc.
End result, customers don't choose it, which businesses use to lobby for further eroding mandates.
You can't force a company to provide and support a product they don't want to. You can force them to turn one off.
The first reg this happens in will I think make billions the world over realize this is what the template of all opt-in online regulation has to be and will hopefully change the world.
If you boil the lobster all at once, the huge ad industry will ensure such regulation never passes.
If you gradually increase regulation, then it stands a change of actually passing, and eventually accomplishes the same goal (even if over a longer timeframe).
Getting everyone to agree that a mandatory, regulated prompt is required is step 1.
Me? I just use cash everywhere and now the guy at harbor freight knows I'm the guy who says 'I dont have a cell phone number'.
Contracts you know, they need to benefit both sides.
Opt-in doesn't fix anything. Only by making these practices illegal (and aggressively enforcing the law) can this be stopped.
I'd like auditable data. I should have an easy way to discover everyone with my data (including things like IP logs), see how it's used (at the level of source), and have it destroyed.