Hacker News new | past | comments | ask | show | jobs | submit login

It’s honestly crazy that we allow companies to sell our data — and even financially incentivize companies to share our data like this.





The problem is that to you it seems like your data but to Walgreens they see it as theirs. They generated it with their point of sale system.

The data is about a transaction that you made, but they generated all of it.

Until we have agreement as a society about what “my data” means, this kind of stuff is going to run rampant.


>what “my data” means

It makes me wonder, if everyone 'owned' their own data, I wonder if it could be used as a form of UBI. Everyone has data from using services, everyone owns it, everyone can sell it to make a living just doing whatever they are doing everyday.

This is only just a shower thought I had the other day though, there are probably many pitfalls when it comes to such an idea.


Like adverts in general the value of your data or your attention is tiny.

The average American spends $200 (via higher costs for products) for TV each year and receives how many hundreds of hours of adverts in return?

The superbowl for example gets $5 for every viewer, for about an hour of adverts. What’s the average hour of time worth?

Facebook might suck up your data and flog it for a few cents, you’ve probably got more cash down the back of the sofa.


If my attention is so cheap I would definitely like to pay $5/ year to not have to see ads.

...what about paying $5/year to "not" see ads, and also still see advertisements targeted to you?

Unlikely. I'd think the most valuable data is generally the type that can be used to extract money from you. Targeted ads and such. So, your data's value would increase in proportion with your spending power.

This idea is the subject of the 2013 book "Who Owns the Future?" By Jaron Lanier.

I don't support UBI but that's a fascinating idea. Unfortunately the data is worth micropennies in the individual, so only worth something in aggregate, like a class action settlement where you end up with a cheque for $0.34 for damages which makes it not even worth your time, it'd only be good as the backdrop for a science fiction novel or as an experiment by a YouTube video by a well known creator to see how little money it would make. I would read the hell out of that book and watch that video tho!

Connecting information to that kind of personal gains sounds dangerous. There is probably non-negligible abuse potential, like college kids legally printing money at weird scale.

You will never generate enough money from information about your consumption to fund your consumption. Obviously there's other data, but you get the point.

UBI isn’t meant to fully fund consumption. It’s “basic” income such as rent or groceries. I will accept that consumption data doesn’t cover consumption and that the value is already priced in but I don’t accept that it has no value or that UBI is meant as complete income replacement.

I guess I was responding to this:

> everyone can sell it to make a living just doing whatever they are doing everyday


Honestly the path to "UBI" is probably just socialized/subsidized basic needs.

Build masses of government housing, make a healthcare public option with sliding-scale costs, and you're 90% of the way there - food and decent low-end broadband are frankly already cheap enough for the government to cover with maybe some "Don't gouge Uncle Sam or else" clauses and that's about everything.


IDK, I think almost all interesting data has no obvious single owner, because it gets created as a side effect of an interaction between two or more parties.

Take the transaction information from example above. The record of you buying products X, Y, Z for total t=x+y+z at time T, with card C - both you and the store could argue they're entitled to it. It's about you and money you spent and products you received, but it's also about them and the money they received and the products that were taken off their inventory. Then the card issuer will interject saying, "hey, the customer uses a card we provide as a service, so we're at least entitled to know which card was use to pay, to whom, when, an what the total amount was!". Then both yours and stores' banks will chime in, and behind them, also the POS terminal provider.

Truth is, they all have a point. We like to think that paying for groceries with our watch is like a medieval peasant paying for fruit with metal coins at a town market. It's not. Electronic payments always involve multiple steps handled automatically, in the background, by half a dozen service providers linked by their own contracts and with their own legal reporting requirements, and each of them really do need to know at least some details about the payment they're participating in.

A simpler example: this comment. It's obviously mine. It's also a response to you, and it only makes sense in context of the whole subthread. Should anyone reply to it, they'll gain a stake in it, too - and then, arguably, everyone following this discussion have a right to read it, now and in the future. After I hit the "Reply" button, I can't in good conscience claim this comment is mine and only mine. This is why I'm personally against the practice of unilaterally mass-deleting of comments on open discussion boards, like e.g. plenty of people do on Reddit, forever ruining useful discussions for the public.

(It's also why I like HN's approach to GDPR, which is, you can get your account disassociated from your comments, and you can request potentially identifying content be removed, but the site won't just mass-delete your comments automatically.)


>to you it seems like your data but to Walgreens they see it as theirs

the value of this data comes from what did I buy, what else do I buy, where am I, who I am, etc.

to your point, Walgreens does not sell to their competitor CVS data about what they sell, when, and where.

so if that really is their argument, it's refutable.


This is fairly easily answered through legislation like the GDPR which classes this data as personal data if it’s associated with an identified or identifiable person.

A legislative body writing something down doesn’t mean society has agreed to it.

If someone journals and writes down everyone they met with locations and dates, they will laugh you out of the room if you tell them they are violating GDPR.

This also leads to stupid shit like people not being sure if they can point a camera at their driveway to catch vehicle break-ins.

Finally, classifying something as “personal data” because it’s about me still doesn’t make it “my data”.

Health data in the US is strictly regulated, very personal, but is definitely not mine. I cannot remove things from it or prevent it from being shared between healthcare institutions.


You seem not to know much of anything about the laws regarding personal information in the US or Europe.

It’s amazing how little control we have over information that is the most personal essence of our lives.

Why do we have zero insight, no control. Nothing.

I hate it so much.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: