The problem is these think-tanks or variants thereof might end up representing the tech industry in most places where it matters anyway, just like how most of the standard bodies have been taken over by them and now slowly approve of features that further their business motives (I am looking at you ITU).
Two ways (there must be more?) I can think of to fix the behaviour of these behemoths:
1. External: Internet Activism. This has been well underway for a long time now but the corporates are patient beasts. The problem always remains gathering enough support [1] and generally the short attention span of the larger populace.
2. Internal: The employees. Be critical, put yourselves in akward situations, start demanding answers [2]. The problem might be risking job security? That could be offset by forming a large enough group?
--
[0] https://news.ycombinator.com/item?id=17420849
[1] Btw, the signees of this letter care about your privacy: https://www.eff.org/document/december-2018-preemption-letter
[2] https://demandprogress.org
/offtopic https://firstlook.media is doing a great job. Almost all their articles are of high quality.
I mean, we seem to be following a pattern:
Big power wants something that directly and negatively impact the quality of life of the majority of the populace.
Populace rises up against this.
Big power 'loses'.
Big power makes the push again next year. People rise up, but a little less.
Big power 'loses'.
Repeat until popular power is worn out and big power gets what they want.
Once passed, popular outrage won't remove it, it's way harder to get support for repealing than for approving.
So...
I'd like to support something that changes that system from working that way.
I'd think an expiration date would due... but I'm open to supporting anything that would break this pattern.
It can be (and has been for some laws) done. In the past, it's been done by including "sunset provisions" in the law itself, where the law must be periodically confirmed by a new vote or it automatically ceases to have force of law.
It would also be legally possible to create a law that places sunset provisions on all subsequent laws. I have been in favor of this approach for a very long time. Practically, it's not going to happen, though.
There are obviously huge challenges associated with this as we are living in a dynamic world but I would love to see a push towards more evidence based politics and more rational discussions around the often implicit assumptions underlying specific legislation.
INAL and maybe there is something like this going on internally in politics but I think there is more to be done in making this accessible to the public and giving it more room in political discussions.
I can't recommend Jacques Ellul and his "The Technological Society" any higher. He traces it back to the early stages of the industrial revolution. Also his "Propaganda, The formation of Mans attitudes"[2] is unfortunately not wide enough known in the English speaking world.
[1] https://archive.org/details/JacquesEllulTheTechnologicalSoci...
The problem with your cited pattern isn't the duration of laws. It's the founding principle of the "big power" to only serve its own interests. With that founding principle, it can only ever require constant vigilance to push back. One possible alternative founding principle is the "benefit corporation" that requires by company charter, to have social benefit in addition to seeking profit.
One would think we need interest groups more.
You're talking about workplace organizing to mitigate reprisal risk when taking direct action, aka "sabotage".
The IWW has literature on how to engage in such endeavors, and a good relationship with the TWC, who're organizing the tech industry in such a manner.
Please note I've so far omitted the word "union", although it's a concept adjacent to what you're reaching for.
1. https://www.iww.org/PDF/Official/IWW_organizing_manual.pdf
That said, what specifically are we aiming for. Privacy laws? Is there a bullet point of what these laws prohibit/require? Enforcement mechanisms? Standards? Protocols?
"Pro-privacy" isn't really enough, for a political program.
It would be great if one of these think tanks could put forward a specific agenda, preferably one that a large portion of us can support. What is it we want achieved?
I doubt this clear definition is impractical or utopian and could very well be implemented, so I doubt effective privacy legislation needs to be extensive. People consent to share information all the time. That would of course cost an industry that has stakes in information about you, even if that is not their primary business.
Furthermore it is worth to think about if there is any information about you which you are not eligible to share.
It is not trivial to determine if information is personal. Perhaps there should be a formal process to determine that.
But in the US that isn't true even outside of the internet. If you walk outside of your home/land, I can legally photograph and record video of you. I can write down what you're wearing, make assumptions about your income based on your address, record you gender/age/etc. All of that is 100% legal - you willingly give up information about yourself when you go to public places.
You could argue the internet is not a public space but that counters most pro-privacy people's opinions on free speech/etc online.
Do you "own" server logs simply because they reference your user id or an action you performed? Do you own the model architecture of machine learning models that may have incorporated your data?
The idea that you should own any information relating to you is entirely impractical, and completely disregards any notion of intellectual property too. There needs to be some protections for users with respect to privacy, absolutely, but it cannot be anywhere close to that one sided.
In particular, if you as a user want to use a service, you must agree that some data derived or about you is going to be kept private, because it is combined with IP of the company providing the service to you. It's reasonable to limit what companies providing services can do with such data, but at a minimum "providing the service to you" must be protected.
- US equivalent of GDPR: A law that would guarantee us the right to control data about us, be informed of data collected on us, and request a copy or delete that data. The critical impact here is to protect our privacy with regards to corporations.
- A generally-defined right to privacy: The EU enshrines privacy as a fundamental human right, the US equivalent would be for us to define a general right to privacy as an amendment to the Constitution. Much like the original Bill of Rights, I would like a right to privacy which is more solidified than the implied one built on other existing rights, but open to interpretation enough to allow for it to adapt to changing situations in the future. The core concept here is to protect our privacy with regards to the government.
The consent/privacy elements are near useless, imo. In practice, they amount to a "we value your privacy" notice. I don't think individually "negotiated" consent for users visiting a website or downloading an app is useful or privacy promoting. It just amounts to "tick this box to use this app," most of the time. Other times, there is a UI actively directing the large majority of people away from the rational choice.
I can only offer my bullet point: true consent should be required for anybody to collect or use data that relates to me or my equipment.
Does anyone know if the law includes the ability to demand that data third parties have collected be deleted as well? Will I be able to tell what third parties already have my data from the source of collection?
It is even more sad that I'm not the least bit surprised by this.
What I am really curious about, are any of these companies linked to Apple?
Considering the very public stance they have been recently taking. The article does not specifically mention them either way (and they are the only of the big ones missing).
The thing with money and speech in politics is that speech must be loud enough in order to be an effective agent for change whereas the effectiveness of money is considerably more independent that. By loud, I mean a quality more like the amount public awareness and genuine understanding a given issue has.
A law that prevents corporations from spending resources on politics would do this. Or low contribution limits could work, to limit billionaire influence.
A lot of comments in this and other privacy threads correctly worry about the combination of "diffuse costs, concentrated benefits" and the electorate's short attention vs sustained private lobbying. My feeling is those effects cannot be overcome once in effect, so we have to roll back to prevent the effects in the first place.
Sounds politically unlikely, but stranger things have happened in American politics.
I've been wondering lately if the solution to politics (at least at the state and federal level) would be to have a two level representative democracy. Meaning instead of one person getting the vote for 700K people and being very bribe-able (1 of 435), you have one person actually at the legislature but they have a different role. They must negotiate based on another set of real representatives. They must collect facts and evaluate laws for this other set. These 14 (e.g.) people would be responsible for a much smaller number of people (50K) and have a much smaller geographical region. These 14 would be the ones who actually vote for/against the laws and the top level must cast their vote in their stead. The top level could also be elected and serve at the discretion of this set of 14. Each representative has a smaller sphere of influence and concern. Bribing (lobbying) becomes much harder since it goes up by a factor of 7 (or more). Gerrymandering becomes much much harder because of all the little sub-districts that would be created. It also helps give a truer voice of the people unlike certain states/districts where you may be blue in a sea of red or vice-versa. Of course, the powers that be would never let this happen but I think it is at least an interesting thought experiment.
