A proposed Massachusetts law would limit the collection
and use of personal
information.
The bill is weak because businesses could effectively punch holes in
it by saying, "If you don't agree to all if this, we will simply close
your account."
I don't think the bill covers deduced information, such as the
conclusion that you are pregnant, or gay, or disabled, based on
tracking your interests. But I can't be sure about that.
In addition, it covers only disclosure to other businesses, not
disclosure to the forces of potential repression. It would not make
me feel safe with collection of data about me. I want to be free to
do things anonymously.
One detail: it says the company must give you a chance to
refuse distribution of data about you to other companies.
But if it distributes data to 3 other companies, does it
have to let you say yes or no to each other company?
Suppose one company is Facebook, one is Google, and one is
your insurance company. You need to permit giving the data
to your insurance company. If the options offered to you
are yes-yes-yes and no-no-no, you can't approve that
without also approving distribution to Facebook and Google too.