The assumption is that all users are actively making a choice. Many are not aware of the choices they are making, and I think it's wrong to punish them for it -- when companies profit off this lack of literacy and people rush to their defense whenever people start talking about regulation.

I don't want companies like Google and Amazon to be able to hoard massive amounts of personal information about a large portion of the world's population, and not have to respect the rights of the people whose information they have acquired.

> You want a spectrum of financial products that depositors can choose from according to their risk tolerance.

If effectively everyone of importance just uses Amazon (or Google) ads then you don't get a "spectrum" and there's no choice involved. You have an option to either use or not use a majority of the internet. Yes, you can use ad-blockers but that's not a long-term solution.

> A site sending your browser Amazon ads does not oblige it to execute or display them. And this isn't some secret backend upload. If someone is willing to use a site with this revenue model, why is that your business?

Most users are not aware of how these things work. I agree that if everyone knew how to block those ads and what the actual problems are with them, then things like GDPR might be less necessary (though the right to retract consent is something that should be enforced).

But even then, ad-blockers are a defense against an industry that is over-stepping ethical boundaries every day. At which point do you say that companies which inflict systemic violations of ethics on billions of people should be held accountable? Or is it always the fault of the people because they didn't care enough about their personal information?

What ethical boundaries do you think are being overstepped through advertising?

I could imagine a major ad campaing where this question is posted all over the city:

"What ethical boundaries do you think are being overstepped through advertising?

Think for yourselves, don't let the government tell you what to think!

Sincerly, your friends the advertising business"

That's a hard fucking question for me to answer concisely, so I wont do that. Sry.

The current state of data privacy doesn't even include the spike.

As you point out, education is a fine idea, but it isn't going to work if there is a major industry based on it not working.

Are you going to stop using all these services that track you some way or another?

Most digital companies wouldn't exist if they weren't allowed to use the data.

So instead of just blanket calling it something it isn't and something that certainly isn't unique to FB or Google why not actually discuss the fundamentals rather than scapegoting someone just because they are some of the most successful.

This is a statement you're not possibly able to prove, and you've even left "the data" open, so you can quibble about the definition in future replies (despite the GDPR clearly giving one).

Terminating replies here due to the gross intellectual dishonesty; have a great night.

> Most digital companies wouldn't exist if they weren't allowed to use the data.

GDPR does not deny you the right to use user data, it regulates usage. This is such a ridiculous strawman that it doesn't even classify as a fallacy, it's just simply a lie.

> Are you going to stop using all these services that track you some way or another?

(I have stopped using many of the services you mentioned, but you're actually touching on the reason why regulation is necessary.) It is unreasonable to tell the general public they should stop using the internet if they want to maintain their privacy and dignity. And that's why there need to be regulations to provide protections for the general public when using a technology that is so central to the modern world.

You are still using them one of the biggest users of personal data your ISP and that's a service you pay for.

Don't pretend you are stating facts when you are just stating you personal opinion.

I had the impression that this is rather clearly regulated by the GDPR. A user has to consent to each use of her data. And you have to explain the use in an understandable way, no legalese. Just make a list where you explain in simple words how you want to use the data and add a checkbox to each item (default not checked). I don’t see how this could hurt any ethical business model.

If I refuse tracking for ads, then a newspaper can’t refuse me access to their articles.

This arbitrarily limits the range of businesses that can exist. For the sake of people who value their privacy having nothing denied to them, it reduces the services available to everyone.

they can. a business does not even need to do business with you. it's not a right that a business needs to service you. and btw. this is german law.

heck they can even rely on other laws to cancel your service any time they want.

in the next years GDPR will change nearly nothing. except that it will kill some smaller businesses.

GDPR is not strongly enforceable, if people think they have a right to something they still need to go to court.

the only thing which might change is that it will be easier to delete accounts and data (which is a good thing).

Even better, it requires the use to say “yes”.

It won’t. It will just replace the common “no one reads but clicks” TOS. And the user can change her mind anytime she wants.

> The amount of "no clue what this is" among non technical people I know is 100%.

If you can’t explain a non engineer or scientist how personal is collected and used it’s probably not a bad idea to outlaw this practice.

> But the EU pats itself on the back cause they're tackling privacy issues. It's a joke.

It’s certainly not enough but a step in the right direction.

I'm actually pro-GDPR but this needs to be kept in mind.

This is a misunderstanding. Consent is only one acceptable legal basis for processing personal data under the GDPR. Almost everyone is going to use it as little as possible in future because of all the extra red tape involved. Ironically, that probably means a lot of organisations will now be straining to justify processing on some other basis and to minimise use of data subjects' explicit consent and exposure to the associated subject rights.

Just make a list where you explain in simple words how you want to use the data and add a checkbox to each item (default not checked).

It's not that simple, because for example organisations may have legal obligations or legitimate interests in processing data about someone even though it may not be in that person's interest. Consider these:

[ ] I agree that my bank may keep records of the money I owe them.

[ ] I agree that the car rental firm may keep a record of me borrowing their vehicle.

[ ] I agree that the school where I'm applying for a job may do a background check before trusting me to look after kids.

Obviously there are many issues like this where consent for the data processing can't be voluntary and independent of everything else that is going on.

Speaking of false dichotomies...

I think you'll find that self-directed brokerage accounts have more regulations than checking accounts because they provide more opportunity to commit fraud.