While this may work for certain use cases, I don’t know that it is a stable definition of “my data”. One starts running into paradoxes when you consider data you generate when having a conversation with others, for example. I haven’t given this deep thought but perhaps our desire to use concepts or “property” is ill fated. On the other hand, a privacy lens can capture cases that “my data is what I generate” cannot adequately address, such as a friend snapping a picture of the inside of my house and posting it on social media.
What if that personal data is an autobiography that I have released under CC0? If the law says I still own it, can ask for it to be deleted, etc, then CC0 or any other creative commons license means nothing.
What we actually need is laws preventing people from getting arrested or losing access to housing, credit, or insurance based on warrantless data collection, rather than making the collection effectively impossible.
I don't want a world without CCTV cameras, where cell carriers don't know our last position if we get murdered, and where journlists can't report on things in public or look through a data breach.
I’m a bit skeptical that the shape of this concept as outlined will come to be, though maybe the framework and ideas can be used. It feels like they dove into the implementation, describing how it can be done, but haven’t addressed how to get companies on board nor provided incentives for them. We already have the technology for privacy and data control, what we really lack is the legal environment and proper incentives. In that sense I’d guess what we need is the strategy for how to pass these laws and establish incentives more than a description of the tech pipeline, no?