Data Collection, not Data Handling is the Problem

Gerry Gebel from the Burton Group points out the relevance of the principle of data minimization. Nothing exactly new, but nicely phrased:

Typical privacy policies have two sections: the first section expresses the sincere concern of the internet property when handling your personal data and they share at least some of their intended uses of your data. The second part of the policy then goes on to say exactly how the internet property is going to violate your privacy by evaluating traffic patterns, sharing data with partners, etc. (...)

[I]t's not the privacy policy that is at issue. It's the data collection policy that must be examined - especially as it relates to transaction metadata. Now is the time to think about new data models that are better suited to 21st century commerce.