We have to face the fact that any personal data on the web could be linked together and set up a personal profile so accurate we couldn’t imagine.
Moreover none of the currently privacy norms protect our scattered data, while organizations have structures to retrieve them and make us specific target for communication and/or actions.
Let me make a very simple example, based on my personal data.
Based on my email addresses, my photos and the various intersected links I use in my profiles, in my postings and in my online activity, one can easily find out my current aspect, my location, my job, my family’s composition, my habits and interests and, with a little more work, my income.
An that is even if I periodically monitor my online information and I correct any privacy leak found through manual and automatic procedures.
IMHO opinion is totally nonsense to keep up with the current (and frequently local) privacy norms, as they relate to single repositories, while the problem are the networks where those data float and can be assembled making a profile.
It’s not to protect data, which are useless without context. The challenge is to monitor the context and then the use of data in those.
