Jon Brodkin* says Apple CEO, Tim Cook believes tech companies should de-identify customer data or not collect it at all.
Apple CEO, Tim Cook (pictured) last week called on the US Government to pass “a comprehensive federal privacy law,” saying that tech companies that collect wide swathes of user data are engaging in surveillance.
Speaking at the International Conference of Data Protection and Privacy Commissioners (ICDPPC) in Brussels, Cook said that businesses are creating “an enduring digital profile” of each user and that the trade of such data “has exploded into a data-industrial complex.”
“This is surveillance,” Cook said.
“And these stockpiles of personal data serve only to enrich the companies that collect them.”
“This should make us very uncomfortable.”
Cook praised Europe’s General Data Protection Regulation (GDPR), and he said that it’s “time for the rest of the world” including the US to follow Europe’s lead.
This was Cook’s proposal for a US privacy law: “We at Apple are in full support of a comprehensive federal privacy law in the United States.”
“There, and everywhere, it should be rooted in four essential rights: First, the right to have personal data minimised.”
“Companies should challenge themselves to de-identify customer data — or not to collect it in the first place.”
“Second, the right to knowledge.”
“Users should always know what data is being collected and what it is being collected for.”
“This is the only way to empower users to decide what collection is legitimate and what isn’t.”
“Anything less is a sham.”
“Third, the right to access.”
“Companies should recognise that data belongs to users, and we should all make it easy for users to get a copy of, correct, and delete their personal data.”
“And fourth, the right to security.”
“Security is foundational to trust and all other privacy rights.”
Profits over privacy
Cook didn’t name any specific companies but seemed to be criticising the advertising-based business models of Google and Facebook when he said that companies are putting “profits over privacy.”
“We at Apple believe that privacy is a fundamental human right,” Cook said.
“But we also recognise that not everyone sees things as we do.”
“Every day, billions of dollars change hands, and countless decisions are made, on the basis of our likes and dislikes, our friends and families, our relationships and conversations, our wishes and fears, our hopes and dreams.”
“These scraps of data, each one harmless enough on its own, are carefully assembled, synthesised, traded, and sold.”
Companies are creating digital profiles of their users and running those profiles through algorithms to “serve up increasingly extreme content, pounding our harmless preferences into hardened convictions,” Cook said.
Companies that oppose strong privacy laws may argue that privacy regulation will prevent them from achieving “technology’s true potential,” Cook said.
“But this notion isn’t just wrong, it is destructive,” Cook said.
“Technology’s potential is, and always must be, rooted in the faith people have in it.”
Former Facebook security chief Alex Stamos responded to Cook on Twitter last week, questioning Apple’s commitment to privacy in China.
“Apple needs to document how they protect data stored by a [Chinese]-owned cloud provider,” Stamos wrote.
“In particular, Apple should explain under what circumstances [the Chinese state-owned company] can access iCloud backups.”
“iMessage is the only E2E [end-to-end] encrypted app allowed by the Great Firewall; what was required to get this concession from the Ministry of State Security?”
The US Senate Commerce Committee recently held hearings on consumer privacy, in what could be a step toward privacy legislation.
* Jon Brodkin is Ars Technica’s senior IT reporter. He tweets at @JBrodkin.
This article first appeared at arstechnica.com.
