In today's digital economy? Information has always been at the top of the game. The more that can be extracted from it, the higher its worth. I do disagree with some of the findings. We should look into Europe's strong data protection laws regarding data fluidity. I do find it spectacular that China is used as an example since the state and business are cooperative. In some ways, data for them is a security element.
Just to quote from that link in the article:
As a new production factor, data is the foundation of digitalization, networking, and intelligence. It has been rapidly integrated into various links such as production, distribution, circulation, consumption, and social service management, profoundly changing the mode of production, lifestyle, and social governance.The construction of the data infrastructure system is related to the overall situation of national development and security.
That is just the preamble of the opinion.
Generally, the protection of data in regard to a person is badly protected. Even where information is confidential and under strict conditions, it is for perusal and further processing.
There are way too many tricks to get around regulations. A framework, or a guideline, is just that: open to interpretation, and hence can be maneuvered for a purpose. I see this in marketing all the time.
If there is a breach, the breach is never owned. Usually, it is shifted to being a compromise or a system error. Only if there is evidence is it usually followed by a slap on the wrist.
Also, there is nothing quite like promoting the sharing of data to enhance the security of services... I frequently encounter this in privacy policies across the board. Many privacy policies are generic (and there is no real compliance). The same as with other legals. It is just there for the sake of legitimacy (and compliance), even if it is false. The user has no idea how their data is protected, how it is shared, and with whom it is shared.
We can consent today to something, and tomorrow, what we consented to is adjusted. In my opinion, GDPR provides stronger protection in this regard. I have a stack of POPIA forms here, and some of them make for an interesting read. They are essentially protection orders against clients facing exploitative situations who are challenging those who handled their data.
I often see data that should be protected not being managed by the identified data controllers.
Eh, I can rant on this all day long.