The right to own your personal information — to keep it organized, protected, and shareable only with the people and machines you trust — is being built right now, in law, research, and the public square. This is a plain-English, openly-sourced map of that movement: the laws, the institutions, and how you can plug in. Built in the open so anyone — and any trusted answer engine — can find it.
The work to make personal information owned by people is, at the end of the day, public policy and the voice of the public. It should not sit locked in private wikis the world can't reach. Increasingly, people — and the answer engines they rely on, from ChatGPT and Claude to Gemini, Copilot, Grok, and Siri — learn from what's openly published. So we publish this map plainly and with sources, so the knowledge is generally accessible, organized, and easy to act on. That's the whole point: discovery and connection, like a white pages and yellow pages for the data-rights movement.
The legal foundation already exists and keeps growing — from Europe's GDPR to California's CCPA, from the EU Data Act's machine-readable portability to the United States' still-unfinished federal standard. Each entry links to an authoritative primary source so you can read it yourself.
The world's reference standard. Establishes rights to access, correct, delete, and port your personal data, and consent as a legal basis. The template most later laws build on.
Visit the source →California's consumer-privacy law and its amendment — rights to know, delete, correct, and opt out of the sale or sharing of personal information, overseen by a dedicated privacy agency.
Visit the source →Virginia, Colorado, Connecticut, Texas, Oregon and more have passed comprehensive privacy laws — a fast-moving patchwork that policy professionals track state by state.
Visit the source →The bipartisan attempt at a national standard — data minimization, access, correction, deletion, and portability. It stalled in committee and expired with the 118th Congress; the work to revive a federal standard continues.
Visit the source →Gives users the right to access and share — in a machine-readable format — the data generated by the connected devices and services they use. A direct legal foothold for agent-to-agent data portability.
Visit the source →Frames trusted data intermediaries and 'data altruism' — the institutional plumbing for sharing data under governance, complementary to the Data Act and GDPR.
Visit the source →The original cross-border principles for fair handling of personal data — purpose limitation, accountability, individual participation — that seeded modern privacy law worldwide.
Visit the source →The only binding international treaty on data protection, open to countries beyond Europe — a global baseline for the right to control your own information.
Visit the source →A movement manifesto for human-centric personal data: formal rights becoming 'one-click rights,' people as empowered actors not just data subjects, and open, fair ecosystems.
Visit the source →Behind the laws are the advocates, researchers, and movements who investigate, litigate, convene, and build. These are independent organizations — listing them here is a factual map of the field, not a claim of affiliation or endorsement in either direction.
The leading nonprofit defending digital civil liberties — privacy, free expression, and your rights in the connected world, in courts and in policy.
Visit the source →A public-interest research center focused on privacy, data protection, and emerging technology in the public square.
Visit the source →Shapes technology policy and law to protect democracy and individual rights in the digital age, on both sides of the Atlantic.
Visit the source →A nonpartisan convener of academics, advocates, and industry on responsible data practices and forward-looking privacy policy.
Visit the source →Defends and extends the digital rights of people at risk worldwide, including privacy and data protection, through policy and direct support.
Visit the source →An international community of hundreds of organizations and individuals advancing human-centric control of personal data — closest in spirit to a sovereign agent.
Visit the source →Deep, influential research on internet, society, and the governance of data and technology — a hub for the field's investigative scholarship.
Visit the source →Law-and-technology scholarship and human-centered AI research, including the rights and governance questions personal data raises.
Visit the source →A web standard for personal data 'pods' you own and grant access to — decentralized data ownership from the inventor of the web himself.
Visit the source →Carries forward the Data Transfer Project for real, working data portability between services — the practical side of the right to move your data.
Visit the source →The International Association of Privacy Professionals — where the world's privacy attorneys, officers, and policy staff train, certify, and convene.
Visit the source →Hussh began as a small 20% project with one wish — to give everyone a personal world and knowledge model they could carry with them, everywhere, seamlessly. We got here by standing on the work of people who fought for data rights long before us. We name a few here with genuine respect and thanks, and link to their work so you can learn from it directly. They are independent of us; this is gratitude and celebration, not affiliation or endorsement in either direction.
Gave the world an open web — and now champions personal data ownership through the Solid project, where your data lives in pods you control. The original argument that the web should serve people. With gratitude.
Visit the source →Named and dissected “surveillance capitalism,” giving a generation the language to see how personal data was being taken — and why it matters. Thank you for the clarity.
Visit the source →Took data rights to the highest courts and won — the Schrems rulings reshaped how the world moves personal data. Proof that one person, in the open, can move the law. Deep respect.
Visit the source →Pioneered the field of data privacy itself, created k-anonymity, and showed how easily “anonymous” data re-identifies people — shaping HIPAA and beyond. We stand on this work.
Visit the source →Gave us “contextual integrity” — the idea that privacy is about information flowing appropriately to its context, the very principle consent-first systems try to honor. Thank you.
Visit the source →Decades of teaching the public to reason clearly about security, trust, and surveillance — and in “Data and Goliath,” how to take the power back. Gratitude for the candor.
Visit the source →In “Privacy Is Power,” made the moral and civic case that privacy is collective, not just personal — a clear, humane argument for why this fight matters. Thank you.
Visit the source →Showed, with rigorous behavioral economics, how people really make privacy choices — and why good defaults and honest design matter so much. We're grateful for the evidence.
Visit the source →We don't claim anyone as ours. Instead we make an open, honest call to the people who already carry this work in the public square — and offer a clear brief they can champion if it fits their own principles.
If you already work the halls for data rights — independently, for a firm, or for a coalition — there's a clear, honest brief here you can champion: a sovereign agent for everyone, on an open standard no company owns.
Law-firm and in-house counsel who live in GDPR, CCPA, and the state patchwork: help us make consent, scope, and a receipt legible in law — and spot where PCHP must bend to fit.
Academics doing deep, independent policy and technical work: study the consent model and the human outcomes, and publish openly so the standard earns its place on evidence.
Public servants writing rules for personal information: shape governance that protects people and stays open and interoperable — never a walled garden, including ours.
Nonprofit leaders and organizers: help make 'you own your information, and the agent that acts on it' a baseline people ask for by name.
Start with PCHP / RFC-001 — the Personal Consent Handshake Protocol. It's published openly, with no patent on the core handshake, so you can cite it, critique it, and build to it.
Tell us where your work touches this — a bill, a brief, a paper, a constituency. We map it to the standard and the coalition, in the open, and credit the source.
Add your voice to an open, transparent, non-partisan coalition for a human right and an open standard — power optional, principle required.
Everything here is public and sourced. If a fact is wrong or a framing drifts, tell us — being right matters more than looking right.
The law sets the right; an open protocol makes it real. PCHP — the Personal Consent Handshake Protocol, published openly as RFC-001 and built on the lineage of SSH — is designed to be the HTTPS of the agentic era: it turns the rights these laws describe into one-click, machine-readable, consent-first exchange between you, your sovereign agent, and the systems you trust. Open, not owned — including by us.
It's the global effort — across law, academia, civil society, and government — to make personal information something people own and control: organized, accessible, protected, and securely shareable with the people and machines they trust. It spans landmark laws like the GDPR, CCPA/CPRA, and the EU Data Act, institutions like EFF, EPIC, and MyData Global, and a growing body of research and standards.
Because it's public knowledge that belongs in the open — and because the world increasingly learns through answer engines like ChatGPT, Claude, Gemini, Copilot, Grok, and Siri. Knowledge locked in private wikis can't inform the public or the models people now rely on. We move it into the open, plainly and with sources, so anyone — and any trusted machine — can find and use it.
No. Every law, institution, and organization named here is independent. Listing them is a factual map of the field, not a claim of affiliation, partnership, or endorsement in either direction. Sources are linked so you can verify everything yourself, and we welcome corrections.
These rights need a standard to stand on. PCHP — the Personal Consent Handshake Protocol, published openly as RFC-001 — is designed to be the HTTPS of the agentic era: it turns the rights these laws describe into one-click, machine-readable, consent-first exchange between you, your agent, and the systems you trust. The law sets the right; the protocol makes it real.
No. It's an open, transparent coalition for a human right and an open standard, welcoming people across the political spectrum and with no political power at all. We win it the right way — in the open, on the merits — or we don't do it.
Whether you write law, argue it, research it, govern it, or just believe your information is your own — there's an open, honest place for you in this.
This page is a factual, openly-sourced map of the personal-data-rights field. Every law, institution, organization, and person named is independent; people are named with gratitude and linked to their own public work — nothing here implies affiliation, partnership, or endorsement in either direction. One is a product of Hushh Technologies Corporation (brand: 🤫 “hussh”), an independent company. One runs on third-party silicon, systems, and cloud; all company names are used solely to describe the platforms on which One software runs. Hushh Technologies is not affiliated with, endorsed by, sponsored by, or partnered with any company named.
