Solid gives you GDPR / CCPA Compliance out of the Box

Data privacy is becoming increasingly important to the modern web user. Governments, companies, and individuals are taking notice. The General Data Protection Regulation (GDPR) in Europe and the California Consumer Privacy Act (CCPA) are legislative efforts to protect individuals’ data and inform companies about how to responsibly save consumer data.

While the spirit of GDPR and CCPA are admirable, they are only legislative solutions, and we live in a world where the technical infrastructure has been optimized towards organizations storing data on the behalf of the user. As a result, these regulations fall short. We are now plagued by privacy popup windows that do little to protect user privacy and much more to annoy users. Data holders are now required to provide users with data upon request, but that process if often difficult for companies to do (or certain companies purposely refuse to do it https://ruben.verborgh.org/facebook/) because it is another processes that must be added on top of their existing, centralized infrastructure.