>I'd like to see secondary markets for PID banned outright, personally.
I totally agree with this, but I think it'd be terribly hard to implement in practice. How would you eliminate the rise of a single large body that partners with everyone during data consent forms? Sort of like a VISA for personal data. The result is the same, or arguably worse, but wouldn't be banned under your scheme.
Regulatory capture, which is the broad umbrella I'd put that under, is a problem with any attempt at regulation, I agree.
We can imagine a better regime, which could say "if you attempt to cheat or skirt around on this, we're going to hammer you harder than if you just break the rules", but how to actually get it is pretty murky. Easy to aim for that, and land in a situation where shadowy individuals wield great and capricious power.
I totally agree with this, but I think it'd be terribly hard to implement in practice. How would you eliminate the rise of a single large body that partners with everyone during data consent forms? Sort of like a VISA for personal data. The result is the same, or arguably worse, but wouldn't be banned under your scheme.