Thread by @profcarroll

As US states go all-in on sports betting, it’s worth taking a peek at the data market for pseudonymous identifiers pulsing behind the screen in Europe and then imagine practices that aren’t worried about national general data protection laws because they don’t really exist here.

https://twitter.com/WolfieChristl/status/1488168017729138689

(I would guess the GDPR does not provision for such a grotesque abuse of sensitive personal data, but as you can see in the thread, my lawyer @RaviNa1k is often batsignaled when the persistent questions of data protection enforcement arise.)

But my point is the same: the USA needs a GDPR. A generalized data protection regulation that applies nationally and horizontally. We do not need a data privacy law for sports betting. That is beyond pointless but that is what Congress knows how to do (lobby a bill with industry)

And per above, remember that the GDPR is not cookie clutter—that’s the darkpatternd maladaption—beset by challenge of enforcement across EU. The US would not struggle with GDPR’s which-member-state-should-enforce problem. But will staying on path of patchwork of statehouse bills.

@WolfieChristl has revealed how adtech works behind-the-screens, in this case, for sports betting, a vertical, but the basic model and players are generalized and horizontal across industries but our laws in the US are specialized and vertical. Guess who has the house advantage?

And if I haven’t yet fully illustrated the fundamental clash between the US and EU’s on this, but resolvable with a national generalized data protection we could call our own…fortune.com/2022/01/13/aus…