Comprehensive Consumer Data Privacy

Definition

Comprehensive consumer data privacy is a privacy-law approach that constrains collection, targeting, retention, sharing, and user control across data systems rather than relying only on narrow product bans or after-the-fact remedies.

Current Synthesis

The concept began as an alternative to broad youth social-media bans: Aaron Mackey argues that platform harms should be addressed through limits on invasive data practices rather than by making lawful speech access depend on age verification. Later sources widen the frame. Federal data trust, child-bedroom monitoring, and DHS/ICE DNA collection show that comprehensive privacy logic also needs purpose limits, retention limits, and accountability where people cannot realistically opt out.

Key Claims

• Collection and targeting limits can address platform harms without turning speech access into an identity-check system.
• Transparency and user control are incomplete unless paired with purpose limits, retention limits, and accountability.
• Sensitive data categories include not only ad profiles, but also child-bedroom data, health-adjacent signals, benefit data, and bodily identity data.
• Public-sector privacy belongs in the same synthesis when agency data use can chill benefits, immigration safety, or civil liberties.
• Comprehensive privacy can complement product-liability litigation but should not be reduced to case-by-case lawsuits.

Evidence

• Platform regulation alternative - Would banning teens from social media violate their First Amendment rights? presents comprehensive privacy as EFF’s preferred route over under-16 social-media bans and parental-consent gates.
• Public-sector trust - Trust in government data practices is rapidly deteriorating says federal data practices and enforcement-agency sharing can discourage public-benefit use.
• Child-bedroom data - AI subscriptions are rapidly taking over baby nurseries shows subscription baby tech collecting and interpreting intimate household and child data beyond ordinary ad targeting.
• Bodily identity data - ICE is collecting DNA from detainees for future policing extends the sensitivity ladder to compelled DNA collection, indefinite CODIS retention concerns, and relatives’ exposure.

Counterevidence & Qualifications

The concept’s title remains consumer-focused, while some evidence is public-sector or law-enforcement centered. That does not make every government biometric practice a consumer privacy issue; it shows that comprehensive privacy principles are incomplete if they exclude non-optional data relationships where people have less choice than consumers do.

What Changed

• Migrated the concept to synthesis-v1.
• Added compelled DNA and CODIS retention as an outer boundary for comprehensive privacy principles around sensitive personal data.

Related Concepts

• Platform Data Regulation - platform-business-model branch that comprehensive privacy originally targets.
• Civil Liberties Surveillance Risk - broader rights consequence when privacy controls fail.
• Federal Data Practice Trust - public-sector trust condition requiring similar purpose and accountability limits.
• Child Bedroom Data Privacy - intimate household-data case within consumer technology.
• Genetic Lineup Privacy Risk - bodily and family identity-data risk that tests the reach of privacy governance.