I value my privacy. It is nearly always on my mind as I interact online, but also as I live in the so-called real world. In the evening, I pull the shades down. I just don't like having people watch me, whether I am reading a book, enjoying a television show, or walking the baby down to sleep. Privacy is essential, in my book.
Unfortunately, there are many out there who make business out of invading my privacy. As I browse the web, sites are dropping cookies which are read across domains, mapping out my every move. Other sites, under the guise of analytics or social media integrations, do the same but in different ways. I didn't ask for these. I didn't agree to these. Yet, despite that many companies do their best to know more about my habits online than I even know.
People are rightly upset at this. Worldwide, it seems, people are coming out to say that they are tired of it. If they are going to be tracked, they want to know. If their private posts and details are going to be shared, they want to know. If they're going to leave a site, they want to be able to delete their account and all of their data. The question then becomes, what should we do about it?
Unfortunately, many people are turning to government violence to solve these problems for them. Last year, California passed the California Consumer Privacy Act (or CCPA) which purportedly gave the people of California new privacy rights. According to Californians for Consumer Privacy, these include:
The right to know all data collected by a business on you, twice a year, free of charge.
The right to say no to the sale of your information.
The right to sue companies who collected your data, where that data was then stolen or disclosed because of carelessness or negligence on their part.
The right to delete data you have posted.
The right not to be discriminated against if you tell a company not to sell your personal information.
The right to be informed of what categories of data will be collected about you prior to its collection or at the point of collection, and to be informed of any changes to this collection.
The right to opt-in before sale of children's information (under the age of 16).
The right to know the categories of third parties with whom your data is shared
The right to know the categories of sources of information from whom your data was acquired.
The right to know the business or commercial purpose of collecting your information.
That is quite a list! The European Union has their own list, similar to that. As a software developer who develops applications for both desktops and for the web, this kind of legislation affects me directly. When I see this list, I have to wonder who this legislation really hurts and who it really helps. First, let's ask now, who does it hurt? I'm sure that it is onerous for Google and Facebook to comply with these rules, but are the rules going to put them out of business? Definitely not. These businesses are HUGE with enormous legal teams and everything else that they need to write up the necessary paperwork and check all their practices and such to make sure that they are compliant with the regulations.
Who these regulations really hurt are folks like me, small, self-funded shops who are trying to get off the ground. I don't have a legal team. I don't have the time to study up on regulations. I spend my days working so that I can make enough money to keep my family fed. I don't have the time or resources to figure out how to comply if I needed to. Some startups can afford to comply with these, but they are the ones who receive gobs of venture capital from east and west coast elites. If I made a site which picked up steam, I could potentially reach the threshold of Californian users necessary that these regulations would kick in,