Data sharing without proper consent is a violation of privacy

The argument

Consent is the line that separates use from abuse in every domain that touches the person. Medicine may not treat a patient, researchers may not study a subject, and no one may enter a home without permission — because what happens to a person, their body and their private sphere is theirs to authorise. Personal data sits squarely inside that sphere. A person's location history, messages, health records, purchases and browsing reveal more about their inner life than a diary, and in aggregate they expose patterns the person may not know themselves. To take and trade that information without genuine permission is not a technical practice; it is an intrusion into a private life. Yet the modern data economy is built on exactly that intrusion. 'Consent' is manufactured through terms of service that run to tens of thousands of words no one reads, pre-ticked boxes, dark patterns that make refusal exhausting, and take-it-or-leave-it access to services that have become necessities. Data gathered for one purpose is sold onward to brokers, advertisers and governments for purposes the user never imagined, let alone approved. No serious account of consent — informed, specific, freely given, revocable — describes any of this. International frameworks have already drawn the conclusion: privacy is a human right under the Universal Declaration and the European Convention, and instruments like the GDPR treat meaningful consent as its operational core. If privacy is a human right, and personal data is the form private life now takes, then sharing that data without proper consent violates a human right. Data rights, on this argument, are not a new entitlement but an old one — restated for the technology that now threatens it.

Premises

Counter-arguments

That non-consensual data sharing violates privacy shows privacy is a right, but it does not show that 'data rights' are a distinct category of *human* rights rather than an application of existing rights and ordinary consumer and regulatory law. Critics argue human rights are universal, inalienable claims against fundamental threats to human dignity, whereas many data rights are contextual and tradeable — people routinely license their data for services they value and can consent to uses they could not consent away for a genuine human right. Recognising a privacy violation is fully compatible with treating data protection as important regulation rather than as a freestanding human right.

Rejecting the premises

[Rejecting C] A privacy violation shows privacy is a right, but not that data rights form a separate human-rights category rather than an application of existing rights or consumer regulation. [Rejecting P3] Much data protection concerns tradeable, contextual permissions, unlike the inalienable claims typical of human rights.