[lifeisstillgood]

It’s hard to enforce a law so we should not have the law seems a poor argument.

Let’s say we define personal data about, generated by or inferred from the actions of a natural person as owned by the society as a whole. And misuse is liable to 5% of annual turnover. It’s more or less GDPR. That seems viable - and I am sure an army of class action lawyers will be happy to help out

(Ok I need to work on a better proposal but I think this is more doable than you are allowing for)

[ajb]

I don't think we necessarily disagree. I am pessimistic about laws being effective in this case, but that doesn't mean we should not try to find ones that are. I like your idea. Thinking and trials in that direction would be good.

Data using organisations often seem to prefer fig-leaf laws that aren't effective, and lobby against ones that might be effective. "My data use is a good use, therefore I should not be subject to restrictions and oversight". Instead, anyone with a use of data which is valuable to the public should not see themselves as on the same side as the advertisers and surveillance vendors. They should see themselves as on the opposite side.