I struggle to see the type of regulation regime that could work effectively to prevent such profiles from being created (the data collection would move overseas and then later be re-sold as contact lists, or as audiences, etc.).
Isn't that a cop out argument? Just make it outright illegal and fine heavily per violation. You have profile information that a user didn't explicitly give you? $10k fine, each.
We have (kinda) world wide copyright laws. We have world wide drug laws. We have world wide sea and war laws. Why don't we have world wide privacy laws?
The Internet makes trying to enforce world wide privacy laws much harder than physical laws: anyone in the world can reach you and collect data about you.
> Just make it outright illegal and fine heavily per violation. You have profile information that a user didn't explicitly give you? $10k fine, each.
How do you propose to discover violations? Self-reporting won't ever happen. If you then propose to give draconian sanctions to trying to cover up such issues, congratulations, you've killed the ability of people to build anything and share it with the world.
