Background: The rise of surveillance commerce
I begin where many investigators have already been. Shoshana Zuboff argued in The Age of Surveillance Capitalism that data is harvested as a product of behaviour (Zuboff, 2019). We followed that thread to company filings and internal communications. Public documents such as Facebook s SEC filings show that data drives revenue and strategic choices. When a company lists "user data" as an asset in a 10 K it is not just marketing speak. It is a legal and financial framing that affects ownership debates (Facebook Form 10 K, 2018).
Evidence: Leaks, reporting and the paper trail
We reviewed leaked memos and investigative reports that illuminated how data is shared and monetised. The Cambridge Analytica revelations, reported by Carole Cadwalladr and others, showed how harvested profiles were used for targeted political campaigning (Cadwalladr, 2018). The Wall Street Journal s Facebook Files, reported by Jeff Horwitz and colleagues, exposed internal discussions about data access and safety trade offs (Horwitz et al., 2021). Financial records and advertiser invoices released in litigation show the downstream value assigned to behavioural segments.
Ownership is a moving target
Legally the picture is messy. In most jurisdictions users do not have a simple title deed to their data. Contracts of service, privacy policies and terms of use create layered licences. Regulators in the EU moved to strengthen individual rights with GDPR which grants data access and portability rights to people. But that is about control and consent rather than full property rights. Academics and activists, including Helen Nissenbaum and others, have proposed models where data stewardship or collective ownership replace the current regime. These proposals are fascinating but remain largely theoretical.
What we found and what remains unclear
We can say with confidence that corporations treat data as a monetisable asset. That claim is supported by filings, leaked internal notes and reporting (Zuboff, 2019; Facebook Form 10 K, 2018; Horwitz et al., 2021). We also found credible evidence that data brokers aggregate and sell profiles derived from many sources. Where the fog thickens is in attribution. When multiple parties combine datasets and apply algorithms who owns the synthesis? Case law is sparse and inconsistent. There are also gaps in the public record. Not every contract is disclosed and not every internal memo leaks.
Implications: Power, politics and resistance
If I am right in my reading then ownership questions are proxy battles over power. Control over data shapes political persuasion, market dominance and civil liberties. Emerging tools such as data trusts, stronger regulation and citizen owned lockers offer partial remedies. Yet these solutions face political opposition from firms that profit from the status quo. That is why investigative journalism and public pressure matter.
References and sources
- Shoshana Zuboff, The Age of Surveillance Capitalism (2019)
- Carole Cadwalladr, reporting on Cambridge Analytica, The Guardian
- Jeff Horwitz et al., The Wall Street Journal, Facebook Files
- Facebook Form 10 K (SEC filing)
I do not claim to have created the documents or investigations cited here. Our team compiles and interprets material that others have published and that leaks have revealed. Many questions remain unresolved, especially over legal attribution when datasets and algorithms are fused. I invite informed scepticism and tips from readers who can point us to contracts or court filings we have missed. Sign up to our newsletter for daily briefs.