Data Value. The right to sell our data to the highest bidder.

My comment addresses a sub-point, rather than a full point. To me, "data value" also includes the right to share in the profit of those "making hay" off of the data that I/you/we create as we trip across the web. Who says we have to sell anything? If I still own my data, and someone is using it, they owe me licensing fees.

I understand that this is next to impossible to assess. I.e. when Amazon aggregates my buying data and uses that to make higher profits because they can create better targetted recommendations, what portion of that better-targetted information is really attributed to my data? That can be very difficult to determine.

I also understand that some companies claim that they are already letting me share in the profits, simply by offering me services for free (e.g. Gmail) or giving me discounts for collecting my information (i.e. supermarket cards). But at a certain level, I don't buy those explanations. I still think there is monetary value in my data that I am not currently receiving, and there is more to it than just being able to sell my data to the highest bidder.

• Posted by: JG
• April 25, 2007 2:03 PM

I would add something about security. As the data owner, you have a right to expect that companies that have your data will properly safeguard it.

Also, I'm sure you're aware of this, but the concept of the consumer owning their own data is much more of a EU concept than a US one. Does this bill of rights (if implimented) kill the data broker business? If I allow a data broker to have my data, can I then limit their ability to transfer that data to only the third parties that I specify? If yes, that would seem to require an extremely complex permissioning system.

Would welcome the opp to discuss if you're so inclined...

• Posted by: Alan Chapell, CIPP
• April 25, 2007 3:33 PM

DATA Expiration Date

• Posted by: BODY GUARDS
• April 25, 2007 3:35 PM

You have deliberated upon an issue beautifully. This thought needs to be refined keeping in view what companies can accept and would let go. Data as a trade bargain hurts consumer privacy and on all counts of Data value and Data Permissions a framework is required. As Alan has has aptly elaborated "own data is much more of a EU concept than a US one" therefore a standard based on your view of Bill of data rights should be shared and we need to expand it to become a reality.

• Posted by: adonius
• April 26, 2007 12:06 AM

What I'm reading here implies that we are giving permision to a company (e.g. Google) to have ownership of this personal data. This is quite a scary proposition. While I think there is great convenience and value in being able to apply my past digital breadcrumbs against where I go next and what I see next on the web, it troubles me greatly that this data sits on some remote server (with God knows who being able to access it) and it isn't owned by me. I think the only way to make this work is if the data sat on my machine, so I have full control over what's in it and who has access to it. Only then do we have a privacy model that is secure enough to afford the convenience of a more personalized web experience.

• Posted by: Miriam Newton
• April 26, 2007 9:55 AM

You missed the obvious one: data opt-out. Ability to use services without having data collected at all. Any data that is collected can be misappropriated, intentionally or otherwise.

Allow people to use your services without collecting data on them. (To me this is different from data anonymity.)

• Posted by: Rocky Agrawal
• April 26, 2007 10:10 AM

Go for it! I'm sure that your struggle is not in vein
:)

• Posted by: FANNANA
• April 26, 2007 11:45 AM

Why does Yahoo mail charge for POP access, thereby holding my data hostage? I suspect it is to prevent defection to better products. Fortunately there are scrapers like freepops.org to get your data out.

If you wanted to migrate off of myspace, good luck. Channeling Marc Canter, we need the social networks to support import and export of network data.

• Posted by: Gregor J. Rothfuss
• April 28, 2007 4:47 PM

"Data Frugality" - collect only the data needed for the relationship established between the consumer and organization due to the action taken by the consumer. (As opposed to collecting more information that might help the organization build deeper involvement with the consumer. "Just take what is needed, no more.") Hope that makes sense! ;) Good stuff - thanks for sharing!

• Posted by: Amy Stephen
• April 28, 2007 8:47 PM

I think this is a noble idea, and I fully support it, but the most important thing you're missing is not a part of the content of the data bill of rights... it's the user leverage. Without enough users demanding for this bill of rights from the services they use (a la "I want my MTV"), then it's just a lot of idealism. The most important thing is to build in reasons why the average Google user (not Twitter user) wants/demands this Bill of Rights.

• Posted by: Andrew
• April 28, 2007 9:16 PM

John - we read with interest your data bill of rights and I'd like to point out that the TRUSTe program requirements - the rules that the TRUSTe sealholders must follow - hit on many of these: we require transparency on how personal identifying data will be used within a company and we require consent for 3rd party sharing. In addition, we also require security - the right for reasonable protection of the data, continued respect for the data rights in onward transfer (agents, etc.). Sealholders must also agree to engage with our Watchdog dispute resolution process to address issues of removal, correction, etc. Agree with you that more "sticky" issues remain such as access to profiling and behavioral targeting data (we require sealholders to disclose if they are using cookies or any other tracking technologies). Data retention and access are also issues that need to be considered more carefully by TRUSTe and others.

• Posted by: Fran Maier
• May 2, 2007 1:59 PM

Wesabe announced a "Data Bill of Rights" last November (at the Web 2.0 Summit, actually) covering the rights we promise the users of our personal finance application -- where data privacy and protection is obviously paramount. I wrote up the rights we chose and the Web 2.0 talk on blog.wesabe.com.

Marc Hedlund, Wesabe

• Posted by: Marc Hedlund
• May 9, 2007 10:12 PM