








Who the General Data Protection Law applies to
Find out who the data protection law applies to.


Who owns your data?
A Supreme Court case about a bank robbery could redefine your digital rights.

AI and Doctrinal Collapse
Artificial intelligence runs on data. But the two legal regimes that govern data—information privacy law and copyright law—are under pressure. Formally, each re
This seems like a crucial questions about what "data ownership" means for atproto. If the 3rd party doctrine applies, as Mike suggests, then I'm not sure it's possible to claim ownership unless it's self-hosted or it doesn't apply to your PDS host. Something to watch when permissioned data lands.
Tynan Purdy ⁂
@masnick.com I’m listening to your interview with @reckless.bsky.social. This third party doctrine is interesting. Do you think that atproto data would be considered properly owned by the account individual? Would be interesting implications if that public data fall under search and seizure rights.
Great question. My biggest takeaway: we need to come to an agreement on how to advertise PDS/service capabilities. MOST of the PDS implementations I'm testing support community.lexicon.service.describe, which works v well. #atproto
Scooter
So what were your major takeaways?
Is this a thing? Something about private data on AT Proto, where a person could purchase content and have a copy of said content injected into their Private Data, so it could not be removed without their consent? I’m thinking “I’ve bought a copy of a book, and now the book blob lives in my PDS”
I've been working on an "at protocol notion". One of the things that has been holding it up has been coming to terms with the oddities of putting this data on a PDS. A document is a collection of edits, whose edits we collect will change that document pretty substantially. This is a feature
An underappreciated #atproto feature is that whenever apps want to update your data: 1. they ask your PDS for permission, 2. your PDS asks you, 3. you can say no, + 4. your PDS enforces your wishes As of today, the @tranquil.farm PDS UX lets you give "partial no" answers to question 3. Bravo!
Trezy
This is awesome. I made a PR last week to add better support and display for permission-sets to the OAuth consent screen for @tranquil.farm. Now every time I log in to my Atmosphere account, I can actually see my fingerprints on Tranquil. 😍 #atproto
to reiterate on this, an AppView server should NOT be interposed between the user and the PDS: the client and PDS are in the user sphere of trust, but the service is adversarial. the PDS is the most important write sink and should be primary, since an app can't be trusted to not shut off PDS writes
mary🐇
doesn't mean i shouldn't try. mary.my.id/musings/atproto-and-oauth
What if a PDS became more than a repository for posts? We propose using AT Protocol as a creator-controlled publication layer for declaration metadata describing digital works, making rights, provenance, and other trusted metadata independently verifiable and easier to discover.
From Personal Data Server to Personal Metadata Server
liccium.leaflet.pubI think we need a "PDS as a Service". There are a bunch of little apps I'd love to make, but I don't want to have to host a PDS for each of them for anyone who doesn't already have an account. But I'd be fine with allowing them to register to a PDS with my app's domain and pay a fee per sign up.