All essays

Withdrawing Consent Should Be as Easy as Giving It

Here's a simple fairness test: if signing up took one click, opting out shouldn't take a phone call, a form, and a five-day wait.

Consent you can't easily take back isn't real consent. It's a roach motel for personal data: easy to check in, impossible to leave.

For AI systems, this means building the exit before you need it. How does someone say "delete my data"? Where do they click? Does it actually delete, or just hide? Who makes sure the backups catch up?

Regulators are paying more attention to this every year, and plain fairness demands it regardless. The test is easy to run on your own products tonight.

One click in should mean one click out.

I explain frameworks; I don't give legal counsel.

I explain frameworks; I don't give legal counsel.