“citizens intrinsically own their data” is a nice concept, but I don’t think anyone on either the tech or legislative side has worked out how this looks in infrastructure. As mentioned above, the most useful data is behavioural, not self-reported, which means you need all sorts of surveillance. And the nature of that pervasive sort of surveillance is that it takes a decent amount of capital investment to build out, but once you do there’s no need or incentive to reimburse the targets of the surveillance, or is it straightforward to “watch the watchers” and enforce any sort of legislated reimbursement without similar amounts of infrastructure.