Maybe it’s time to create some rules about data brokering? It’s not really about tracking and consent, it’s about who can sell what data about whom to what parties.

It’s become an enormous business, it deals with you and I, it delights in living in the shadows, and it is almost completely unregulated. I don’t really care if Toyota records my data, I care that it’s allowed to sell it or share it.

I think a reasonable first step would be that all data about a specific person belongs to that person and nobody else. We have rules about photos, we need to expand them to data brokering, because the problem is the same: if you can be identified and placed, you are at risk.