Data Is What Data Does: Regulating Use, Harm, and Risk Instead of Sensitive Data
"... nothing meaningful for regulation can be determined solely by looking at the data itself. Data is what data does. Personal data is harmful when its use causes harm or creates a risk of harm. It is not harmful if it is not used in a way to cause harm or risk of harm."