Daniel Solove argues in the Wall Street Journal (alternate link) that giving people control of their personal data is not an effective way to regulate privacy in this era. Instead, we need to hold companies accountable for their actions, similar to what we do with food and drug companies. Measures such as rigorous data minimization, fiduciary duties, liability for negligent or reckless technological design, liability for algorithms that cause harm, and multi-stakeholder review of technologies will be far more effective.

Paper.

Tags: academic papers, AI, privacy

Posted on July 16, 2026 at 10:34 AM • 4 Comments

Sidebar photo of Bruce Schneier by Joe MacInnis.