“Data protection” is a joke and you’re the punchline.
“Data protection” assumes that data is collected to begin with and that that’s just “how things are.” It makes no attempt to change that.
What you’re looking for is data minimisation.
@aral yes!! I'm in the middle of writing a paper on how technical regulation of data can solve a lot of "ethical" issues. I will cite you!
@KatrinaMatheson Neat; would love to read it when you’re done :)
@aral yeah, you got it!
@aral I was just reading the Brazilian General Data Protection Law that seems to, at least in writing, address this by requiring:
adequacy: compatibility of the processing with the purposes communicated to the data subject, in accordance with the context of the processing (it seems this's to prevent data reselling to third parties)
necessity: limitation of the processing to the minimum necessary to achieve its purposes, covering data that're relevant, proportional, non-excessive