An interesting approach, this Data Care Act, but I fear it would fail the Cambridge Analytica litmus test because it does not include a Right of Access (in new California privacy law, GDPR, etc) to force disclosure required to pursue a valid complaint. techcrunch.com/2018/12/12/sen…
The Data Care Act bill also exempts non-profits…and ISPs* from FTC penalties…which is kind of a big loophole imho
* FCC regulates ISPs…but remember when that Broadband Privacy rule was repealed because FTC regulates privacy Ajit Pai insisted…uh oh.
<cough>USA needs a GDPR.
* FCC regulates ISPs…but remember when that Broadband Privacy rule was repealed because FTC regulates privacy Ajit Pai insisted…uh oh.
<cough>USA needs a GDPR.
But the most concerning reason why Data Care Act would seem not to prevent another Cambridge Analytica crisis is that it defines an end-user too narrowly. 200M+ voters were never end-users of Cambridge Analytica. Seems to exempt much of the data broker industry that way. 
Needs some language to expand situations where identifying data is collected on people who aren’t necessarily “users” but who were profiled by blending/matching acquired data, such as to voter files or other semi-public records.
(tbh sometimes i think the best idea is simply to tax personal data and exempt non-personal de-identified data to nudge the industry away from surveillance capitalism or at least price its externalities)
I think we’re gonna like Wyden’s data privacy bill better folks. theverge.com/2018/11/1/1805…
Had a great discussion with a Schatz staffer and better understand the Data Care Act and offered my suggestions regarding what I’ve learned thru my Cambridge Analytica battle.
