I've come to believe that privacy "by design" is impossible in the hyper-connected age. There are too many vectors for tracking, linking, and de-anonymization and software in general is too insecure. The only solution to the privacy problem is legislation. My favorite idea is HIPAA type regulations for intimate personal data like audio, location, etc. Leak location data? That will be $10,000 per incident where an inc…
I usually come down on the libertarian side of things, but given the virtual monopoly by way of network effects, I do think some legislation for user derived data is necessary. These folk are not going to self regulate and waive potential revenue if they are not made to. I’d go so far as declare them “near utilities”.
Plastic surgeons are bound by HIPAA. They do not provide essential services. Similarly, we can regulate social networks without ensconcing them into our society’s fabric as utilities.