The Discourse of Control and Consent Over Data in EU Data Protection Law and Beyond

Across the United States and Europe, the act of clicking “I have read and agree” to terms of service is the central legitimating device for global tech platforms’ data-driven activities. In the European Union, the General Data Protection Regulation has recently come into force, introducing stringent new criteria for consent and stronger protections for individuals. Yet the entrenched long-term focus on users’ control and consent fails to protect consumers who face increasingly intrusive data collection practices.

The Discourse of Control and Consent Over Data in EU Data Protection Law and Beyond by Hoover Institution on Scribd