StealthGPT vs Super Humanizer

Digital Privacy Laws Face a Borderless Data Economy

Privacy laws can be important. But privacy is complicated and evolving quickly, and laws have their limits. For instance, laws often apply to data based on the location of the user, the location or type of data-holder, and other considerations.

For example, the European Union’s General Data Protection Regulation (GDPR) and California’s privacy law give people some control over their data and require companies to tell users what data they’re collecting and why. They allow people to gain access to their data and request that it be deleted. But these rights apply in limited circumstances, and the right to deletion, for instance, might apply to your data with one company, but not others who may be allowed to retain some of your data for business, legal, or security reasons. Some laws do not apply to government agencies, or to certain industries that are regulated in other ways. Deleting your account with a major company is unlikely to delete all copies of your data. And, if consent is required, users often must “agree” to continue using services that are essential for school, work, or other aspects of everyday life.

While companies are required to explain how they use people’s data, these terms can be challenging to understand and compare. Consent isn’t always meaningful if a company follows the law, but users don’t understand what can be learned from their purchases, browsing, or locations. Laws can be challenging to enforce, particularly against companies that offer services around the world, collect lots of different kinds of data, and continually change their technical systems. Larger companies are more likely to have legal teams and compliance budgets, making it difficult for regulators to ensure everyone’s playing by the rules. And, laws that impose fines for collecting and using data inappropriately generally only take effect after your data has been shared or leaked.

Meanwhile, new technologies are making it possible to learn sensitive information from seemingly innocuous bits of personal data, especially through new AI applications. Privacy laws can be challenging to apply to brokers who buy and sell data from a variety of sources, making it hard for people to know who has information about them. And, products are often built to collect lots of data by default, which means that privacy rights don’t go very far on their own.

That said, laws can be effective. Giving people more access to their own data, limiting what can be collected, and giving regulators more authority can all influence company decisions. Clearer laws that shift away from consent and place more responsibilities on companies to protect people’s data, justify its collection and use, and minimize and protect data can go further. Effective oversight and privacy-focused product design can help people feel more in control of their data.

International Data Economy Challenges Digital Privacy Regulation

Digital privacy laws offer individuals more ownership over their personal data. But when our data zips across apps, to advertisers, to brokers, to governments, those assurances are complex to exercise, complicated to uphold and tricky to decipher.

Laws like the European Union's General Data Protection Regulation and California's privacy law obligate companies to tell you about their data use and to give individuals rights over that data, like being able to access or erase it. Whether the laws apply to you depends on your state, where the data is collected and who controls it.

The result: some users may enjoy varying levels of protection for the same activity. An individual might be allowed to have their profile deleted by one provider but discover that another can keep that person's records for security, legal or commercial reasons. And deleting data from one service doesn't necessarily delete it from its partners.

Another restriction is consent. Privacy notices can inform us of the intended use of data but they are lengthy and challenging to respond to. So, we often require a service to conduct business, go to school or even get through the day and "agree" can be less voluntary than you might think. Even when a business meets the requirements for disclosures, customers may not understand what can be deduced from their location, shopping or browsing activity.

Enforcing the rules, too, will be difficult. Regulators must scrutinize high-tech systems that evolve rapidly and on an international scale. Bigger businesses often employ lawyers and compliance staff that their smaller counterparts cannot afford; and most consequences come long after the data has been collected or compromised.

Unintended consequences New technology introduces new variables. AI can identify insights within datasets that on their own seem innocent. Data brokers have the power to pool data from various sources, making it difficult to know who knows what about you. Other privacy regulation have loopholes for government operations and in certain industries governed by separate regulation.

That's not to say that privacy law is broken. Access controls, data minimization, and fining companies are powerful levers for transforming corporate incentives, and available to regulators. But rights alone are not enough to protect privacy when products are designed to default to high levels of data collection.

The discussion is also beginning to shift, with some arguing that governments need to do less to seek individuals' permission and more to require organizations to collect less, protect data, and demonstrate that they have a good reason to process it. Stricter laws, regulatory capacity, and privacy by default will help close the gap between the rights people have and their online control.

So, for the time being, the law is still in a position where it can keep a lid on digital privacy, with this simple limitation: Information can be transmitted, duplicated and uncovered in ways that the source might not want.