New blog: Beyond data ownership.

05 May 2026, 21:34
๐Ÿ†• New blog: Beyond data ownership The data ownership conversation has been running for two decades and produced very few working primitives. On the recent Privacy Hour, Nick Ris reframed it: ownership is the wrong lens. The right primitives are consent, audit, and revocation. โ†’ Consent: W3C Verifiable Credentials, scoped and time-bounded โ†’ Audit: signed access logs the data subject can read directly โ†’ Revocation: W3C Bitstring Status List, propagates by design Regulators are catching up. The vocabulary of "ownership" is being quietly retired across eIDAS 2, ENISA's SSI work, and ICO accountability guidance. #4 of the Privacy Hour series. Read: