Nowhere did I say anything about "...nothing to hide". I am saying we need to, via legislation, weaken governmental and corporate authority, and increase personal authority so that the data collected cannot be used to harm us. Because the real fantasy here is that there is some way the data is not going to be collected.
If we agree that data will be collected whatever laws we put in place, under the same premises can’t we agree that it will be misused as well ?
Problem with laws to me is that they are only binding to some portion of the actors. Some government actors have a mandate to work around the law, and other organisations have divisions dedicated to avoid triggering these laws. Regulation is only part of the solution.
Perhaps the genie isn't going back in the bottle, but rolling over and reiterating the 'if you have nothing to hide...' fallacy is not a productive course of action either.