My slides from an internal Brave presentation, now available for public distribution.

1. Cascading
monopolies

2. Ring-fenced data. Each purpose for
which you use my personal data requires a
separate legal basis
Purpose limitation
As easy to withdraw as it was
to give, and can be withdrawn
without detriment.
Consent+ = Freedom
The market of users will decide
when to “break up" the companies,
and when to “un-break” them up.
Big tech companies “cross-use” personal user
data from one part of their business to prop up
others. This stifles competition and innovation.
But, data protection law can be an anti-trust tool…

3. -GDPR, Article 5 (1) (b)
(b)collected for specified, explicit and legitimate purposes
and not further processed in a manner that is
incompatible with those purposes; further processing for
archiving purposes in the public interest, scientific or
historical research purposes or statistical purposes shall,
in accordance with Article 89(1), not be considered to be
incompatible with the initial purposes (‘purpose
limitation’);

4. EXAMPLE

5. Processing Purpose 1. To display your posts on your Newsfeed
Processing Purpose 2. To display posts on tagged friends’ Newsfeeds
Processing Purpose 3. To display friends posts that tag you on your Newsfeed
Processing Purpose 4. To identify untagged people in your posts
Processing Purpose 5. To record your reaction to posts to refine future content for you,
which may include ethnicity, politics, sexuality, etc…, to make our Newsfeed more
relevant to you.
Processing Purpose 6. To record your reaction to posts to refine future content for you,
which may include ethnicity, politics, sexuality, etc…, to make ads relevant to you.
Processing Purpose 7. To record your reaction to posts to refine future content for you,
which may include ethnicity, politics, sexuality, etc…, for advertising fraud prevention.
And so on…
Post a photo on the Facebook Newsfeed.

6. Business 1
Cross-use of data between lines of business

7. Business 1
Cross-use of data between lines of business
Grew on the merits.

8. Business 1
Business 2
Cross-use of data between lines of business

9. Business 1
Business 2
Personal data
Cross-use of data between lines of business

10. Business 1
Business 2
Personal data
Cross-use of data between lines of business

11. Business 1
Business 2
Personal data
Cross-use of data between lines of business
Offensive leveraging of data

12. Business 1
Business 2 Business 3
Personal data
Cross-use of data between lines of business

13. Business 1
Business 2 Business 3
Personal data
Cross-use of data between lines of business

14. Business 1
Business 2 Business 3
Personal data
Cross-use of data between lines of business

15. Business 1
Cross-use of data between processing purposes

16. Business 1
Purpose 1
Purpose 2
Purpose 3
Purpose 4
Purpose 5
Purpose 6
more
Cross-use of data between processing purposes

17. Business 1
Purpose 1
Purpose 2
Purpose 3
Purpose 4
Purpose 5
Purpose 6
more
Cross-use of data between processing purposes
Bundling and
offensive leveraging

18. Business 1
Business 2 Business 3
Cross-use of data between processing purposes

19. Business 1
Business 2 Business 3
Cross-use of data between processing purposes

20. Business 1
Business 2 Business 3
Cross-use of data between processing purposes

21. -GDPR, Article 7 (3)
3. The data subject shall have the right to withdraw his or
her consent at any time. The withdrawal of consent shall
not affect the lawfulness of processing based on consent
before its withdrawal. Prior to giving consent, the data
subject shall be informed thereof. It shall be as easy to
withdraw as to give consent.

22. Business 1
Business 2 Business 3
Cross-use of data between processing purposes

23. Business 1
Business 2 Business 3
Cross-use of data between processing purposes

24. Facebook Inc is Hal 9000.
Users can pull brain chips.