Thread · 2 tweets · 21 May 2021

Replying to @RobertJBateman and @alexanderhanff, @neilmrichards

That's exactly the angle that PUP is taking. I believe that as a framework it is compatible with the GDPR, but it assumes different guidance that offloads less responsibility to people. Consent should be a red flag, not a catch-all.
In fact, the initial 3 tiers came from GDPR, with default being LI, essential being Art21, and the high tier being consented. But with a view that the high tier should almost never happen and that LI should be built from ethics instead of cop outs like "direct marketing".