Thread

Seattle City Council votes to ban surveillance pricing in sale of groceries

395 points · 229 comments · ortusdux

jsrozner · 1790181848 · focus · HN ↗
The best solution is a constitutional amendment that actually enshrines a right to privacy. Among other things, the retention, aggregation, correlation of any personal data should be illegal (including for commercial purposes). (Storage on behalf of users in encrypted form could be made OK. Could also be refined to support retention of data of the medical, legal, etc kind with the attendant non-admissibility protections.)
This would fix this issue, it would destroy the surveillance models of Google/Facebook, and it would fix the Flock issue, etc. It would also fix the Roe v Wade issue: women would be able to get abortions in the first couple months of pregnancy without the possibility of harassment, since law enforcement would have no capacity to detect pregnancy until then.
Also, tech won't save us had a podcast on the dynamic pricing topic: <a href="https://podcasts.apple.com/us/podcast/how-data-is-changing-air-travel-w-amanda-mull/id1507621076?i=1000680112948" rel="nofollow">https://podcasts.apple.com/us/podcast/how-data-is-changing-a...
1. twoodfin · 1790183497 · focus · HN ↗
  This is simply untenable. Institutions of all kinds have been keeping records connected to individuals for millennia.
  Try to run a school when you can’t maintain data on the students.
  1. cogman10 · 1790184001 · focus · HN ↗
    You can have privacy and an institution can collect data.
    HIPAA is an example of that.
    All personal data should be treated with at or near HIPAA levels of security. If I give my personal information to my bank, or google, that's fine for them to look at it, but it's not ok if that information magically lands in the hands of Coca Cola for marketing.
    jsrozner · 1790184566 · focus · HN ↗
    Yes, mostly, but google shouldn't be able to "look" at it either. No entity should be able to derive a commercial benefit from my data; any commercial value of my own data should accrue entirely to me.
    You could build a test: the company should not be able to derive any additional value from 100 fully anonymized interactions with the same person as from 100 interactions with a deanonymized individual. Google obviously fails this test since targeted advertising is much more valuable if you have non-anonymized entities.
    The doctor can store my data because it is necessary to provide me with the service, but the doctor shouldn't be able to sell my data, nor correlate it with their other patients' data.
    Of course, a doctor will learn from treating me and become a better doctor, so you can't actually enforce this totally in practice. But it's like porn - you know when you see the violation.
    classichasclass · 1790196784 · focus · HN ↗
    > nor correlate it with their other patients' data.
    Halting that would pretty much be the end of public health analysis or real-world work on medication effectiveness/adverse reactions. We do a lot of work with deidenitifed data to find health patterns in populations.
    jsrozner · 1790201400 · focus · HN ↗
    I agree. One of the things this debate reflects is that societies really do need substantial trust: I want to trust that if my healthcare data is aggregated, then it will actually be used to serve society (and me).
    In practice, data is often aggregated and then used to deprive some folks of healthcare, or sold to a pharma company below cost, with the pharma company then turning around and maximizing drug profits, where the drug was developed from the underpriced public data.
    LocalH · 1790208556 · focus · HN ↗
    Maybe the law needs to be more like code and less up to the whims of whatever judicial interests are present at the time.
    Tracing code manually isn’t hard for a seasoned dev. Write it in BASIC if you have to lmao

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.