|
|
|
|
|
by dreamfactory
4584 days ago
|
|
It doesn't really matter who is collecting. It's the aggregation and storage that is the root problem - because sooner or later that data will get into all the sufficiently determined wrong hands. If the NSA can't secure data or even know what has got out, California or 23andMe or Google have no chance. The problem we have is that it is now easier to collect everything than to be selective and this represents a huge risk to security down the line in all kinds of ways. You could say our data footprints have become a form of pollution. To mitigate we need to flip it and make non-collection the default - e.g. introduce strict regulations around destroying non-critical information with a very high bar for even temporary storage and anonymisation wherever possible. |
|
Do we just forgo all those benefits because of the risk of abuse or data compromise, by any entity anywhere down the line?
Or do we try to figure out the right checks, both in practices and law, to maximize the benefit and minimize the risks? I'm for that iterative discovery of the right balance. And, I think a for-profit company operating under the microscope of consumer/journalist/regulator scrutiny is more likely to find the optimal tradeoffs than a compulsory state collection program, or other solely bureaucratic and legislative processes.