Thread · 2 tweets · 27 May 2021

Using the vanilla GDPR, no, but I wonder if this couldn't be an area for Art40 to help with. If businesses came together to establish credible use and guardrails for this specific area (not one business but a large enough group), and DPAs kicked the hell out of it…

…to make sure it's safe, respectful, solid, and accountable, would this not be better? Nothing is perfect, but I will take strenuous expert oversight, especially with a democratic component from DPAs, over offloading this to people and hoping they can act.