Submission + - EFF Proposes Addressing Online Harms With Privacy-First Policies (eff.org)
As for the content of the policies, EFF says:
What would this comprehensive privacy law look like? We believe it must include these components:
- No online behavioral ads.
- Data minimization.
- Opt-in consent.
- User rights to access, port, correct, and delete information.
- No preemption of state laws.
- Strong enforcement with a private right to action.
- No pay-for-privacy schemes.
- No deceptive design.
A strong comprehensive data privacy law promotes privacy, free expression, and security. It can also help protect children, support journalism, protect access to health care, foster digital justice, limit private data collection to train generative AI, limit foreign government surveillance, and strengthen competition. These are all issues on which lawmakers are actively pushing legislation—both good and bad.
Privacy online has certainly eroded drastically over the last 20 years and it often appears that most regulation of the Internet is drafted by the very entities which benefit from reduced privacy and individual online freedom. Would taking a privacy-first approach and introducing strong regulatory protection for it into law help address the problems raised by citizens and legislators?
