I think the conclusions here are the right ones. In particular, ensuring privacy by design is a far better strategy than pushing for informed consent, because the vast majority of people are not informed about the implications of data collection (even without considering Gen-Z's ambient comfort with the idea of being tracked). And DEI in the context of trust and safety is an obvious and hard requirement.

These are not standards the industry will come to voluntarily. Regulation is required in every jurisdiction and eventually as an international agreement. Without international cooperation, it'll be too easy for companies (and governments) to hop jurisdictions and use locales that are convenient for their data collection needs. #Technology

[Link]