Information brokers are a most cancers. There is a direct line from the unrestricted assortment, retention and processing of our knowledge to a number of evils, from deepfake porn to phishing scams; from racial discrimination in hiring to ICE roundups of migrants; from focused election interference to id theft:
https://pluralistic.internet/2023/12/06/privacy-first/#but-not-just-privacy
Why do knowledge brokers exist? As a result of we allow them to. Congress hasn’t handed a brand new federal client privateness regulation since 1988, after they made it unlawful for video shops to reveal your VHS leases. All different acts of client surveillance are authorized. Information brokers spy on us for a similar purpose your canine licks its balls: as a result of they’ll, and we do not cease them:
https://pluralistic.internet/2026/03/10/ice-tech/#foreseeable-outcomes
Eliminating knowledge brokers would not remedy all our issues, however it certain would go an extended method to fixing a lot of them. Quite than legally requiring platforms to spy on youngsters (to exclude them from being focused by platforms’ algorithms), we might prohibit platforms from spying on anybody, together with youngsters, that means youngsters could not be recognized (a lot much less focused) by algorithms or adverts:
https://pluralistic.internet/2026/06/23/destroy-the-village/#to-save-it
Information brokers produce mountains of uncooked materials used for each type of rip-off and torture. It is knowledge brokers who energy the gig financial system’s “algorithmic wage discrimination” system, the place nurses and different staff are provided much less pay primarily based on how a lot bank card debt they’re carrying:
https://pluralistic.internet/2024/12/18/loose-flapping-ends/#luigi-has-a-point
Banning knowledge brokers would make nice sense, which is why Biden’s CFPB banned knowledge brokers (solely to have Trump un-ban them):
https://pluralistic.internet/2025/05/15/asshole-to-appetite/#ssn-for-sale
So the feds (each Congress and the chief department) have surrendered, and that leaves states alone on the battlefield combating the privateness wars alone. State legislatures have taken some large steps, however – crucially – they’ve stopped in need of banning knowledge brokers from working inside their borders. Having taken a ban on knowledge brokers off the desk, states are left with complicated, usually unworkable “compromises” that go nowhere.
That is the place DROP is available in. DROP stands for “Delete Request and Choose-out Platform,” and it is a new section of California’s privateness regime that kicks off subsequent month. Beneath DROP, you fill in some paperwork after which the state requires each knowledge brokerage working in California to delete your knowledge, in addition to any inferences they’ve made about you primarily based on that knowledge:
https://www.eff.org/deeplinks/2026/07/what-you-need-know-about-californias-drop-tool
Implementing DROP is nowhere close to nearly as good as banning knowledge brokers. The concept knowledge brokers ought to have the ability to accumulate, retain and course of your knowledge until you inform them to not implies that everybody begins off eager to be spied on, and subsequently knowledge brokers ought to assume that until they hear in any other case, we’re delighted to be the topic of economic surveillance. That is an extremely silly supposition, contradicted by all obtainable proof. For instance, when Apple provided iPhone homeowners a one-click choice to dam Fb from spying on them, 96% of iPhone homeowners clicked the button:
https://applescoop.org/story/facebook-must-inflict-pain-on-apple-says-mark-zuckerberg
Certainly, given this truth, one wonders why Apple bothers with the “do not spy on me” button in any respect. Why not have a “do spy on me” button that’s unchecked by default, and go away customers to dig by way of their settings to seek out the choice to choose in to being surveilled? In fact, then it might make the truth that Apple spies on its prospects and makes use of the info to focus on adverts (with no method to choose out) somewhat awkward:
https://pluralistic.internet/2022/11/14/luxury-surveillance/#liar-liar
Within the absence of a ban on surveillance with out specific, opt-in consent, we’re left with the weird fiction that almost all of us wish to be spied on, a fiction that pervades the DROP course of, making your complete process almost inconceivable to finish.
To start out the DROP course of, you have to first create a Login.gov ID. That is an extremely invasive course of that includes photographing a number of items of ID and taking a number of selfies utilizing particular apps and webpages that hijack your gadget’s digital camera and processor in a bid to forestall unhealthy actors from spoofing the method. There is a believable purpose for this rigmarole: Login.gov is the authentication system for a number of federal, state and native IT techniques within the US, so a pretend or stolen Login.gov ID may very well be used to entry your IRS, Social Safety, and different very delicate accounts.
The corollary of that is the promise of Login.gov: when you create your ID (a prolonged, multi-stage course of) you will not have to leap by way of numerous painful bureaucratic hoops to entry all kinds of presidency providers.
DROP did not get the memo.
After you log in to DROP by way of Login.gov, you might be despatched a textual content message – to the cellphone quantity in your Login.gov profile – with a hyperlink to entry a “safe” web site that takes over your digital camera to allow you to take a “safe” photograph of the back and front of your California driver’s license or your US passport. What if you do not have both of these? I suppose which means you wish to be spied on by knowledge brokers.
Be aware that these are the identical credentials you need to provide to get the Login.gov ID that you have simply used to get to this step within the course of. In different phrases, as a way to get to the stage the place they ask you to {photograph} your driver’s license, you need to have already photographed and validated your driver’s license.
When you full this (pointless, redundant) step, you are directed again to your pc, the place the method continues. Right here, you have to fill in every kind of biographical element, in addition to specialised items of knowledge, together with your automotive’s VIN. This can be a piece of knowledge that most individuals haven’t got – however which the California DMV does have and will auto-feed into the system, given that you have repeatedly affirmatively recognized your self to the service.
You even have to supply your cellular promoting identifier, an extended, distinctive quantity that you could be or might not have the ability to extract out of your cellphone, relying on the mannequin and the OS model. If you cannot get it that method, you may set up an app like AAID, which comes with an extended checklist of – you guessed it – permissions to extract, retailer and course of your non-public info.
This is the factor: the entire level of a cellular advert identifier is that apps can entry it (that is how they establish and observe you). That step, the place the system made you turn to your cellphone and use your digital camera to {photograph} your driver’s license? That step might have mechanically pulled this knowledge off your gadget. That is the entire fucking level of this train: that web-pages and apps can request your cellular advert identifier.
As an alternative, DROP needs customers to dig by way of their cellphone’s deepest settings and/or set up an app to retrieve a 32-digit quantity, which they then should key right into a webform on their pc or in a special app on their cellphone.
As soon as you have executed this, you have to fill in one other web page of biographical info, together with info that you have already offered to Login.gov and knowledge you have already crammed in on earlier screens.
On this display screen, you have to additionally confirm your cellphone quantity by sending your self a textual content after which pasting in a novel quantity the system sends to you. However keep in mind how this entire factor began? Step one is that you simply authenticate with Login.gov, which sends a textual content to your cellphone so you may take a (redundant) image of your driver’s license. There isn’t a method you may get this far within the course of until you managed the cellphone quantity you have simply “verified” with the system.
Subsequent, you have to confirm your e-mail handle, by receiving an e-mail with a novel code in it and keying or pasting that into the webform, too. Once more, keep in mind how this course of began: with you logging in with Login.gov, utilizing your e-mail handle, which the system has already handled as verified for the reason that very begin of this (very) lengthy and (very) sophisticated course of.
This entire factor is horrible, and it’s predicated on the absurd premise that Californians need to be defended from the specter of strangers who fake to be them as a way to sneakily choose them out of surveillance. DROP requires stronger authentication than another US authorities system I’ve ever interacted with. I file my tax returns with fewer authentication steps. I renew my automotive’s DMV registration with fewer authentication steps. I grew to become a US citizen with fewer authentication steps.
That is both a system with no coherent menace mannequin, or (way more in all probability), its menace mannequin is that folks will use it. That is California’s reply to “a locked submitting cupboard caught in a disused toilet with an indication on the door saying ‘Watch out for the Leopard'”:
https://en.wikiquote.org/wiki/The_Hitchhikerpercent27s_Guide_to_the_Galaxy
It is particularly instructive to match this course of to the steps you need to take as a way to “choose in” to having a knowledge dealer open a file on you and stuff it stuffed with your delicate, private info, which is then bought to all comers:
It is also instructive to match this course of to the steps a knowledge dealer has to take to spy on you and promote your knowledge:
Although there are a lot of apparent methods this may very well be made higher, I wish to stress right here that you simply should not have to do that in any respect. It is completely backwards. The method for not being spied on ought to seem like this:
If anybody goes to be compelled to leap by way of hoops to take part within the mass assortment and catastrophic mishandling of personal knowledge, it ought to be the info brokers, not the folks they spy on.
This type of malicious compliance is the inevitable consequence of a course of that begins by taking the apparent greatest measure off the desk. The reply to the issue of information brokers is banning knowledge brokers, not making a demented hairball of form-filling that maintains the fiction that knowledge dealer surveillance is consensual.
In its personal method, this course of jogs my memory of the entire “carbon credit score” fiasco. The reply to too many carbon emissions is to democratically resolve to ban sure sorts of carbon emissions. However that may require states to do issues, slightly than merely “nudging” a course of that’s guided by “the market.” So we find yourself with these junk “credit” that corporations manufacture by promising to not log forests, a lot of that are already wildlife preserves and/or subsequently burn down:
https://pluralistic.internet/2023/10/31/carbon-upsets/#big-tradeoff
The very best critique of this entire factor got here in 2021 from the Local weather Advert Undertaking, who produced a brief video by which folks have been allowed to kill each other offered they bought “homicide offsets”:
https://pluralistic.internet/2021/04/14/for-sale-green-indulgences/#killer-analogy
In a state of nature, homicide exists. We, as a society, have determined that is unhealthy. Quite than creating “incentives” to not homicide, we simply banned homicide. Admittedly, we nonetheless get some murders, however when these occur, we do not deal with it as “a mispricing of the anti-murder incentive” – we deal with it as against the law.
The industrial surveillance business might not be a felony enterprise (but), however it’s the supply of a torrent of crime, a flood of crime, a tsunami of crime. Every bit of your info {that a} knowledge dealer possesses exposes you to the chance of being victimized by a felony. For that reason, I strongly consider that you must undergo the tedious, performatively tough DROP course of:
https://client.drop.privateness.ca.gov/
However let’s not fake that that is good – and even ample. There isn’t a demand for being spied on. There isn’t a foundation for taking such monumental care in ensuring folks aren’t maliciously faraway from surveillance databases. If these databases exist in any respect (they need to not), then we must always make spies undergo all this paperwork, to show that you simply do wish to be spied on, and until they handle it, then spying on us ought to be handled because the crime it’s.
#20yrsago Steady Partial Consideration wiki https://net.archive.org/net/20060806014946/http://continuouspartialattention.jot.com/WikiHome
#10yrsago Congress: TSA is worst place to work in USG, almost half of staff cited for misconduct; it’s getting worse https://net.archive.org/net/20160721120714/https://www.cntraveler.com/tales/2016-07-14/almost-half-of-all-tsa-employees-have-been-cited-for-misconduct
#1yrago Trump’s FCC abandons the long run https://pluralistic.internet/2025/07/24/geometry-hates-cars/#dogshit-unit-economics
“The Reverse-Centaur’s Information to AI,” a brief e book about being a greater AI critic, Farrar, Straus and Giroux, June 2026https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/
“Canny Valley”: A restricted version assortment of the collages I create for Pluralistic, self-published, September 2025 https://pluralistic.internet/2025/09/04/illustrious/#chairman-bruce
“Enshittification: Why All the pieces Instantly Bought Worse and What to Do About It,” Farrar, Straus, Giroux, October 7 2025https://us.macmillan.com/books/9780374619329/enshittification/
“Picks and Shovels”: a sequel to “Pink Group Blues,” in regards to the heroic period of the PC, Tor Books (US), Head of Zeus (UK), February 2025 (https://us.macmillan.com/books/9781250865908/picksandshovels).
“The Bezzle”: a sequel to “Pink Group Blues,” about prison-tech and different grifts, Tor Books (US), Head of Zeus (UK), February 2024 (thebezzle.org).
“The Misplaced Trigger:” a solarpunk novel of hope within the local weather emergency, Tor Books (US), Head of Zeus (UK), November 2023 (http://lost-cause.org).
“The Web Con”: A nonfiction e book about interoperability and Massive Tech (Verso) September 2023 (http://seizethemeansofcomputation.org). Signed copies at E-book Soup (https://www.booksoup.com/e book/9781804291245).
“Pink Group Blues”: “A grabby, compulsive thriller that can go away you understanding extra about how the world works than you probably did earlier than.” Tor Books http://redteamblues.com.
“Chokepoint Capitalism: Easy methods to Beat Massive Tech, Tame Massive Content material, and Get Artists Paid, with Rebecca Giblin”, on how you can unrig the markets for artistic labor, Beacon Press/Scribe 2022 https://chokepointcapitalism.com
“The Publish-American Web,” a geopolitical sequel of kinds to Enshittification, Farrar, Straus and Giroux, 2027
“Unauthorized Bread”: a middle-grades graphic novel tailored from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027
“Enshittification, Why All the pieces Instantly Bought Worse and What to Do About It” (the graphic novel), Firstsecond, 2027
“The Memex Technique,” Farrar, Straus, Giroux, 2027
As we speak’s prime sources:
At the moment writing: “The Publish-American Web,” a sequel to “Enshittification,” in regards to the higher world the remainder of us get to have now that Trump has torched America. Fourth draft accomplished. Submitted to editor.
A Little Brother brief story about DIY insulin PLANNING
This work – excluding any serialized fiction – is licensed below a Artistic Commons Attribution 4.0 license. Which means you should utilize it any method you want, together with commercially, offered that you simply attribute it to me, Cory Doctorow, and embody a hyperlink to pluralistic.internet.
https://creativecommons.org/licenses/by/4.0/
Quotations and pictures will not be included on this license; they’re included both below a limitation or exception to copyright, or on the premise of a separate license. Please train warning.
Weblog (no adverts, monitoring, or data-collection):
Pluralistic.internet
Publication (no adverts, monitoring, or data-collection):
https://pluralistic.internet/plura-list
Mastodon (no adverts, monitoring, or data-collection):
https://mamot.fr/@pluralistic
Bluesky (no adverts, potential monitoring and data-collection):
https://bsky.app/profile/doctorow.pluralistic.internet
Medium (no adverts, paywalled):
https://doctorow.medium.com/
Tumblr (mass-scale, unrestricted, third-party surveillance and promoting):
https://mostlysignssomeportents.tumblr.com/tagged/pluralistic
“When life offers you SARS, you make sarsaparilla” -Joey “Accordion Man” DeVilla
READ CAREFULLY: By studying this, you agree, on behalf of your employer, to launch me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use insurance policies (“BOGUS AGREEMENTS”) that I’ve entered into together with your employer, its companions, licensors, brokers and assigns, in perpetuity, with out prejudice to my ongoing rights and privileges. You additional signify that you’ve the authority to launch me from any BOGUS AGREEMENTS on behalf of your employer.
ISSN: 3066-764X
