@article{JRC126652, address = {NEW YORK (USA)}, year = {2021}, author = {Van Alstyne M and Petropoulos G and Parker G and Martens B}, abstract = {If we are to hold platforms accountable for our digital welfare, what data rights should individuals and firms exercise? Platforms’ central power stems from their use of our data so what would we want to know about what they know about us? Perhaps a reallocation of rights will rebalance the right allocation. To date, the General Data Privacy Regulation (GDPR in the EU) and California Consumer Protection Act (CCPA in the US) grant privacy rights to individuals, including the right to know what others know about them and to control data gathering, deletion, and third party use. Legislation also includes data portability rights, an individual right to download copies from and upload copies to destinations of one’s choosing as protections for individuals. Neither yet covers businesses. The proposed Digital Markets Act (DMA) takes a step in that direction. The theory is that privacy empowers individuals to control what is gathered and who sees it; portability permits analysis and creates competition. By moving our data to portals that would share more value in return, we might capture more of our data value. After all, that data concerns us. }, title = {Economic and Business Dimensions: ‘In Situ’ Data Rights}, type = {Minor communication}, url = {}, volume = {64}, number = {12}, journal = {COMMUNICATIONS OF THE ACM}, pages = {34-35}, issn = {0001-0782 (online)}, publisher = {ASSOC COMPUTING MACHINERY}, doi = {10.1145/3491270 (onl