In theory, all this data collection must work around privacy and consumer-rights constraints, but often it does not. Although some countries offer more protection than others, Katherine Strandburg's observation that "US law for the most part has not regulated the datafication or repurposing of information that is acquired as a byproduct of providing service" is applicable beyond North America and particularly in developing countries. In India, for instance, one can easily buy lists of one hundred thousand individuals (car owners, retired women, or any number of categories) for less than $250; the lists are generated from information collected by mobile companies or even by enterprising individuals working at banks or hospitals looking to make some extra cash. In China, regulation about what data companies can collect and what they can do with it is intentionally relaxed, which the government hopes will make Chinese companies more competitive in the global market.

Nick Couldry & Ulises A. Mejias, The Costs of Connection, loc. 203