Yeah, and those parts of CCPA I support. I also support the data deletion stuff. Everyone should be able to revoke consent at any time. What I object to is the "you must continue to provide service after opt-out". I think you should be able to say what you're willing to accept and get appropriate service.

In fact, ideally, the User Agent would advertise our privileges. Like a DNT option and websites would respond with a paywall or something instead and be expected (by law) to respect the DNT. Then, on first load, browsers could say, "Do you wish to allow tracking?" and warn about the added paywall cost vs. the tracking cost.

> What I object to is the "you must continue to provide service after opt-out".

Well, I quite like that part. It pushes content providers to look for surveillance free business models, such as content based ads that aren't personalized. Why should selling your data vs. paywall be the only options? To protect Google's ad cartel?

Well, then, I suppose that's where our disagreement lies. I would prefer to minimize regulation controlling people so long as harm is not being done (hence I'm pro-CCPA in the ways it protects people from being harmed and disagree with it where does not actively protect from harm) and you have a different bar.

> I would prefer to minimize regulation controlling people

That seems like a weird spin. Businesses are being regulated here, not individuals. I don't see how the law would control me.

Okay, I'm happy to rewrite that whichever way you like, but I believe businesses are just groups of people. If you wish, consider that 'prefer to minimize regulation binding units of people or groups of people acting in concert'. I'm also content with it just being 'prefer to minimize regulation binding businesses or people so long as no active harm yada yada'.

I would submit that mass surveillance is doing harm, see Cambridge Analytica and other recent scandals.

Those were non-consensual, so yes, I'm on board with not allowing them.

The core disagreement is that I might want to pay with data only for services to me, and this new standard practically mandates that free riders are allowed.

> this new standard practically mandates that free riders are allowed.

It doesn't. That's merely one way how businesses could comply with the law, the other option would be to look for better business models as I said in the comment you replied to.