Looking through various new privacy regulations like CA's "CAADCA" passed last year. The following occurs to me:
1. Protecting children from the internet continues to be a way to legitimize stalker-ware and state surveillance.
2. Calling speech "data management" and defining it as part of design or technology shouldn't make the doctrine of Prior Restraint vanish.
3. Handing the job of regulating and confirming identity to private companies seems like the opposite of protecting PII.