Interesting piece, that I am revisiting with the emergence of AI agents (poised to have access to A LOT of our personal data, concentrating this data in the hands of a few very powerful players, in an industry that has historically mismanaged our data).
OECD Privacy Principles were clear. At the same time, tech was able to meet, at a minimum, the calls, but it wasn't that great for users. Cookies were kind of... mismanaged, and a lot are built on dark practices. It's not super reliant on informed consent, as we know it (which requires users to actually understand what they are consenting to, allowing users to retract this consent at any point).
It's tough to make calls like this at scale. At a bare minimum, we need greater transparency around ToS and cookies, or at the very least, we need to more explicitly define consent, perhaps drawing from informed consent [in healthcare].
Interesting piece, that I am revisiting with the emergence of AI agents (poised to have access to A LOT of our personal data, concentrating this data in the hands of a few very powerful players, in an industry that has historically mismanaged our data).
OECD Privacy Principles were clear. At the same time, tech was able to meet, at a minimum, the calls, but it wasn't that great for users. Cookies were kind of... mismanaged, and a lot are built on dark practices. It's not super reliant on informed consent, as we know it (which requires users to actually understand what they are consenting to, allowing users to retract this consent at any point).
It's tough to make calls like this at scale. At a bare minimum, we need greater transparency around ToS and cookies, or at the very least, we need to more explicitly define consent, perhaps drawing from informed consent [in healthcare].