







The United States is requiring access to health data as part of lifesaving aid deals with African countries. The U.S. says the data will be aggregated and anonymized, but privacy experts fear the information could be misused or exploited.
Nonrivalry and the Economics of Data
(September 2020) - Data is nonrival: a person's location history, medical records, and driving data can be used by many firms simultaneously. Nonrivalry leads to increasing returns. As a result, there may be social gains to data being used broadly across firms, even in the presence of privacy considerations. Fearing creative destruction, firms may choose to hoard their data, leading to the inefficient use of nonrival data. Giving data property rights to consumers can generate allocations that are close to optimal. Consumers balance their concerns for privacy against the economic gains that come from selling data broadly.
Kenya’s Health Deal Is a Stress Test for the America First Global Health Strategy
U.S. agreements must contend with national data protection laws to make durable foreign policy instruments.
MyData
The human-centric approach to data is aimed at a fair, sustainable, and prosperous digital society. In such a society, people get value from their data and set the agenda on how it is used. And for organisations, the ethical use of data is always the most attractive option.

Digital identification: The hidden and visible implications
Countries are rolling out digital identification schemes, but citizens are protesting about loss of privacy and misuse of data. They may have a point.

Indigenous Data Sovereignty (DDN3-A11)
This article explores Indigenous data sovereignty, identifies some of the data-related challenges faced by Indigenous Peoples and highlights the work done to overcome these challenges.

Your data is everywhere. The government is buying it without a warrant
Data brokers buy up huge amounts of information from cell phones and browsers to sell for targeted advertising. But the government, including ICE, also buys the data.

Operationalizing the Legal Principle of Data Minimization for...
Article 5(1)(c) of the European Union's General Data Protection Regulation (GDPR) requires that "personal data shall be [...] adequate, relevant, and limited to what is necessary in relation to...

UK Biobank health data listed for sale in China, government confirms
The government said medical data of 500,000 people was affected but no personally identifiable information had been made available.

Who owns your data?
A Supreme Court case about a bank robbery could redefine your digital rights.

Data Minimisation: a Language-Based Approach (Long Version)
Data minimisation is a privacy-enhancing principle considered as one of the pillars of personal data regulations. This principle dictates that personal data collected should be no more than...

How to Enter the US With Your Digital Privacy Intact
Crossing into the United States has become increasingly dangerous for digital privacy. Here are a few steps you can take to minimize the risk of Customs and Border Protection accessing your data.

Astral's Blog
On July 8, Anthropic's updated privacy policy takes effect. Users flagged for potential policy violations will be required to upload a government ID, a selfie or video, and a face geometry template — biometric data processed through Persona, a third-party identity verification company backed by Founders Fund.
Preventing AI extractivism: the case for braiding indigenous data justice with ABS for stronger AI data governance
Artificial-intelligence systems are rapidly reproducing colonial extractivism by harvesting Indigenous linguistic, biometric, geospatial, and ecological data without consent, compensation, or accountability. Biotechnology offers a blueprint for curbing such practices: the Convention on Biological Diversity and its Nagoya Protocol obligate users of genetic resources to obtain Prior Informed Consent, negotiate Mutually Agreed Terms, and share benefits fairly. No comparable framework restrains the digital appropriation that underpins many AI products. Consequently, corporations and states monetize Indigenous knowledge systems under the banners of “open data” and “scientific neutrality,” eroding rights affirmed in the United Nations Declaration on the Rights of Indigenous Peoples (UNDRIP). In response to this rising risk of AI extractivism, we make the case for a binding, sui generis ABS protocol for AI data governance. First, through a series of case studies we demonstrate that AI extraction mirrors the colonial and biopiracy controversies that originally triggered Access‑and‑Benefit‑Sharing (ABS) rules in biotechnology. Second, we translate those rules into a digital register by braiding two Indigenous data‑governance frameworks—OCAP® (Ownership, Control, Access, Possession) and the CARE Principles (Collective Benefit, Authority to Control, Responsibility, Ethics)—inside the ABS triad of consent, terms, and benefit‑sharing. The resulting model grounds technical safeguards in relational accountability and Indigenous legal orders. Such an instrument would compel transparent negotiations with Indigenous rights‑holders, assign enforceable authority over data across the AI lifecycle, and require equitable redistribution of the economic value generated by models trained on Indigenous data. Embedding ABS principles into AI governance offers a decolonial pathway that centers Indigenous epistemologies, promotes ethical foresight, and transforms AI from a vehicle of digital colonialism into a space for algorithmic justice.

Who the General Data Protection Law applies to
Find out who the data protection law applies to.

The Limits of Data
Policymakers want to make decisions based on clear data, but important factors are lost when we rely solely on data. A philosopher writes:

Atmosphere is where you can login anywhere but keep all your shit in one spot and nobody owns it but you. We’ve seized the means of data sovereignty
daniel holmgren 🫠
& you lose if you say the word "protocol", "decentralized", "repo", or "pds" to illustrate: the cloud is "the thing where i keep my photos when i drop my phone in a lake". if you even mention a "server" while explaining the cloud then you lost the thread