I think the pipeline needs to be plugged at both ends. We shouldnt allow this data to be sold without express consent. And we shouldnt allow the government to purchase this sort of data regardless of consent, protected under the 4th amendment. unless, iguess, express consent is given to be used by the government for investigative purposes, which no one would give since they dont have to under the 5th amendment
> And we shouldnt allow the government to purchase this sort of data regardless of consent
Fine, we'll force companies to allow a small little box to be added to their data center. Don't worry about what it does, but you cannot disconnect network/power to it once it is installed. Once it is operational, you'll no longer need to think about it ever again, and we recommend that you don't. You should also not talk about this box to users/customers/clients. In fact, you'd be better off if you didn't talk to your employees about it either.
I think sale and purchase are too hard to police. Possession of data should be illegal, with a level of statutory damages that invites litigation.
I think the user should be paid for the data that is being gathered up. If we want a source of UBI for the future where AI is replacing every job, well here is a potential source to fund it.
Don't forget the initial collection. Nobody is forcing these app developer to link the HarvestCustomerLocation.lib module to their app. They're doing it voluntarily, likely financially incentivized. Don't let them off the hook.