New blog: Beyond data ownership.
05 May 2026, 21:34
๐ New blog: Beyond data ownership
The data ownership conversation has been running for two decades and produced very few working primitives. On the recent Privacy Hour, Nick Ris reframed it: ownership is the wrong lens. The right primitives are consent, audit, and revocation.
โ Consent: W3C Verifiable Credentials, scoped and time-bounded
โ Audit: signed access logs the data subject can read directly
โ Revocation: W3C Bitstring Status List, propagates by design
Regulators are catching up. The vocabulary of "ownership" is being quietly retired across eIDAS 2, ENISA's SSI work, and ICO accountability guidance.
#4 of the Privacy Hour series.
Read: