Dear @EUCommission — a proposal for a new directive called the

[jwildeboer@social.wildeboer.net]

Dear @EUCommission — a proposal for a new directive called the

#CIA, the Consumer Information Act.

Once a year on a fixed date, 1st of November, all companies with which you have a contract that involves payment must inform you via the consumers preferred contact method (e-mail, post) about what contract you have, the amount per year and the current conditions to cancel said contract. Banks, insurances, Telcos, social networks, streaming services, etc. Inspired by https://fosstodon.org/@grueproof/113527526441323269

[jwildeboer@social.wildeboer.net]

@EUCommission Could be extended to the

#CDIA — Consumer Data Information Act

that forces all companies that have data about the consumer to send a notice, once a year on the 1st of November, via the consumers preferred method of contact (e-mail, post) about the fact that they have data stored and the rights under #GDPR to receive said data or give notice about the consumer’s right to delete said data and how to do exactly that in a secure and verifiable way.

[wtebbens@social.coop]

@jwildeboer @EUCommission Maybe we should exclude the SMEs from this obligation, or they could be out of business if they'd need to send paper letters. Although VC-based startups also fall in that category. At least exclude all not for profit companies.

[jwildeboer@social.wildeboer.net]

@Wtebbens The EU (and/or its member states) could set up a system that (partly) pays for the costs of the process for SMEs and not-for-profits to ensure that consumers are informed citizens. (But honestly — why? If your business model is using my data, you should be obliged to inform me about that as cost of business) @EUCommission

[mmu_man@m.g3l.org]

@jwildeboer @EUCommission yay, more spam!

[jwildeboer@social.wildeboer.net]

@mmu_man How? Do you prefer to not be informed about who is using you and your data? @EUCommission

[dekkia@dekkia.com]

@jwildeboer
I feel like this could heavily backfire. Similar to the weponoized cookie-banners.

But a great middle ground would be a law that forces companies to inform people about it as soon as they get data about them the first time.
All the "Partner Companies" of data collectors would hate this, because until now most people aren't aware of them.

[jwildeboer@social.wildeboer.net]

@dekkia The "weaponised cookie banners" are a vicious reaction by the ad/tracking companies. No EU regulation demands them. That myth has been pushed successfully, though, I admit.

[dekkia@dekkia.com]

@jwildeboer

Yes, thats what I'm saying.
And Data-harvesting companies would respond to mandatory notifications once a year in the same malicious way.

[jwildeboer@social.wildeboer.net]

@dekkia They might. Or not. Worth trying, IMHO, as informed citizens still can make better decisions and that will always be my focus.

[dekkia@dekkia.com]

@jwildeboer Maybe I'm too pessimist here.
But when did the tech industry (or any other one) not react with either bare minimum or malicious compliance when faced with government regulations?

I feel like it's always the same playbook and I don't see why that time would be different.

[jwildeboer@social.wildeboer.net]

@dekkia GDPR was ridiculed by tech corps. Now many more countries have or are in the process of implementing similar laws and regulations. The Digital Markets Act has forced tech companies to be more transparent. Regulations work, IMHO, if they are well adjusted and enforced.