Introductory informative
A blog post on Phil Windley's Technometria arguing that privacy laws such as GDPR and CCPA regulate personal data when they should govern the relationships that give data meaning. Drawing on a Samuel M. Smith session at the Internet Identity Workshop and Hartzog and Richards's "Legislating Data Loyalty," it frames a duty of loyalty, presents Utah's State-Endorsed Digital Identity (SEDI) legislation as embodying it, and proposes MyTerms agreements to make it operational.