Apologies for length. I'm thinking that privacy solutions need their own version of the "why your anti-spam idea won't work" checklist, which would be shorter...

<https://trog.qgl.org/20081217/the-why-your-anti-spam-idea-wo...>

I've written a bit on the hierarchy of failure, or reversing the sign, the requisite success chain, in problem resolution:

<https://old.reddit.com/r/dredmorbius/comments/2fsr0g/hierarc...>

Schluss fails at stages 2 & 3 (diagnosis and etiology), fails to clearly define 4 (objective), and embarks on "garbage can theory" solutionism in 5 (redress), a/k/a "when you have a hammer, every problem is a nail". Specifically Schluss is applying techno-solutionism to a problem which, whilst it has a technical component is fundamentally grounded in commerce, law, and risk. Given these foundational failings, I'm confident in predicting that Schluss will fail in its (poorly-formed and poorly-communicated) objectives entirely. I say this with absolutely no joy.

Furthermore, Schluss's proposed solution fails because data simply don't work that way. The way information works is through records and transmission, where a record preserves a transmission and a transmission reads from and/or generates a record. The notion that a single canonical data store assures that by technical means alone further stores and transmissions don't happen evidences a grievous failure to grasp the problem.

I've compiled a set of early concerns (largely pre-1980) expressed over computerised data, which are recommended reading. In particular I point to the works of Paul Baran written whilst at RAND in the 1960s. For those unaware, Baran is one of the co-inventors of packet-switched data routing, an essential foundation of today's Internet.

<https://www.rand.org/pubs/authors/b/baran_paul.html>

<https://diaspora.glasswings.com/posts/bf4f5f10f6120138799c00...>

Today's extraordinarily invasive data-surveillance regime, in both its surveillance state and surveillance capitalism instantiations, arises from a set of factors:

- Data storage is cheap and immense. Total data storage has been doubling every few years (2--4 by a quick search), and has been for decades, dating to at least the 1960s.[1] Significant thresholds were crossed in the early 2000s when disk ("spinning rust") storage crossed the 1 GB threshold, with the emergence of SSD storage after about 2010, and with the increasing prevalence of multi-GB RAM storage, with 24 TiB presently among the highest-memory tiers available on Amazon AWS. Your Humble Correspondent recalls working on a shared-compute resource in the early 1990s with a score and a half other analysts which had an aggregate storage of about 2 GB, for a mid-sized data-heavy corporation.

- Legal theories, most especially "Third Party Doctrine" in the US, which holds that "people who voluntarily give information to third parties—such as banks, phone companies, internet service providers (ISPs), and e-mail servers—have 'no reasonable expectation of privacy' in that information." <https://en.wikipedia.org/wiki/Third-party_doctrine>[2]. Given the practical impossibility of conducting a normal life without use of such services, the doctrine effectively establishes a national surveillance apparatus and abrogates Constitutional guarantees of privacy.[3]

- A compelling commercial case. There are critics of surveillance capitalism's actual effectiveness, notably Cory Doctorow.[4] His case boils down to 1) influences are at best marginal and 2) it's a grift, mostly against advertisers. To which I respond that margins matter and advertising is an $800 billion global industry, costing roughly $100 per head, most of which is actually allocated to the 1 billion richest people on Earth, so if you're reading this figure your "free Internet" (and television, radio, and legacy print media) are costing you $800 per year, for each member of your household. Free ain't cheap. And it's remarkably corrosive in terms of privacy, manipulation, dark UI/UX patterns, and shitty, shitty content.

- Legally-permitted data exchange. Data-based credit risk assessment dates to the dawn of modern banking (a fuzzy line, as are most, but let's posit 12th century Italy), with currently extant firms such as Dun & Bradstreet tracing their origins to the early 19th century.[5] Practices such as ethnic, religious, racial, and "old-boy" network profiling led to outcomes such as redlining (mentioned by Baran in his writings, again, highly recommended). Modern data-based predictions utilising machine learning result in what Cathy O'Neil has colourfully termed "weapons of math destruction" in her book of the same name.[6]

- Effectively no liability for misuse, leakage, or exfiltration of data. I've long since stopped tracking major commercial data breaches. I strongly suspect Wikipedia's list is grossly incomplete.[7] The modern corporation is a liability-externalising engine, and there are few liabilities more effectively externalised than data loss, and its various fellow travelers of fraud, "identity theft" (that is: fraud), phishing (that is, fraud), impersonation (that is: fraud), social engineering (that is: fraud), and ... well, more fraud. Defences and consequences are pushed to the individual, precisely the level at which they are both most damaging and least-effectively addressed.

IF we are going to tackle this problem, THEN these underlying foundations must be attacked.

Data exchange must be greatly limited. Whilst data are cheap individually, large scale data aggregation does remain expensive, and if not justifiable based on commercial value, it will cease.

Liability for unauthorised disclosure and abuse must be entirely revised. "Data are liability" has been my own watchword for much of the past decade. Legally it has far less validity than I'd like.

Practices based on data aggregation must be both closely regulated and highly taxed. The taxes serve both to reduce the profitability of such businesses, and to provide an additional legal tool for prosecution against offenders. The old saw about Al Capone stands.[8]

Individuals must be granted strong legal protections to correct, or remove, data absent a compelling public interest in that data being available. I'm well aware that this sets up a conflict between privacy and free speech rights. Those are inherent and unavoidable, the question is where one finds a balance.[9]

I also hold that privacy is an emergent response to changes in informational landscapes and increased capacities in capture, storage, transmission, and processing. As such, evolution of privacy follows rather than leads such technologies, it is inherently* reactive, no preemptive. I'm not aware of an explicit similar statement from others though Jeffrey Rosen's The Unwanted Gaze, much of the work of Daniel J. Solove and Helen Nissenbaum have struck me as above par. Harvard historian Jill Lepore has an excellent biography: <https://scholar.harvard.edu/files/jlepore/files/lepore_secre...> (PDF).

Above all: Privacy is fundamentally the ability to define and enforce limits on information disclosure. Approaches to improving it must account for both elements. Schluss's proposal by contrast fails both.