---
id: "kerione-data-protection-missed-the-point-loyalty-gets-it-rig"
type: "article"
type_label: "Articles, press releases and opinion"
title: "Data Protection Missed the Point; Loyalty Gets It Right"
maintainer: "Phil Windley"
authors:
  - "Phil Windley"
date: "2026-04-30"
year: 2026
reading_level: "intro"
reading_level_label: "Introductory"
reading_level_meaning: "no prior knowledge of the suite"
evidence: "informative"
evidence_meaning: "an author's paper, deck, tutorial or post explaining the suite"
status: "active"
status_meaning: "changed within the last six months, or a live service"
access: "public"
access_meaning: "anyone with the link"
topics:
  - "policy"
  - "state"
roles:
  - "standards-policy"
  - "communications"
  - "investor"
  - "business-development"
source_url: "https://www.technometria.com/p/data-protection-missed-the-point"
source_license: null
source_license_note: null
found_on: "keri-one-resources"
kerisse_credit: false
abstract_license: "CC BY 4.0"
abstract_license_url: "https://creativecommons.org/licenses/by/4.0/"
abstract_attribution: "KSKB, the KERISuite Knowledge Base (https://kskb.dev/)"
last_checked: "2026-10-14"
kskb_url: "https://kskb.dev/cards/kerione-data-protection-missed-the-point-loyalty-gets-it-rig/"
kskb_app_url: "https://kskb.dev/#item/kerione-data-protection-missed-the-point-loyalty-gets-it-rig"
kskb_record_url: "https://kskb.dev/data/kskb/resources/kerione-data-protection-missed-the-point-loyalty-gets-it-rig"
kskb_markdown_url: "https://kskb.dev/export/cards/kerione-data-protection-missed-the-point-loyalty-gets-it-rig.md"
---

# Data Protection Missed the Point; Loyalty Gets It Right

A blog post on Phil Windley's Technometria arguing that privacy laws such as GDPR and CCPA regulate personal data when they should govern the relationships that give data meaning. Drawing on a Samuel M. Smith session at the Internet Identity Workshop and Hartzog and Richards's "Legislating Data Loyalty," it frames a duty of loyalty, presents Utah's State-Endorsed Digital Identity (SEDI) legislation as embodying it, and proposes MyTerms agreements to make it operational.

Labels: reading level Introductory; evidence informative (an author's paper, deck, tutorial or post explaining the suite).
Source: https://www.technometria.com/p/data-protection-missed-the-point (license not recorded).
The abstract is KSKB's own text under Creative Commons Attribution 4.0 (CC BY 4.0), https://creativecommons.org/licenses/by/4.0/; credit KSKB, the KERISuite Knowledge Base (https://kskb.dev/).