Data and Goliath — Start Here
Schneier argues that governments and corporations now collect and analyze personal data at a scale most people never see or consent to in any meaningful way, that this scale of collection creates real risks to privacy and autonomy even when no single piece of data seems sensitive, and that both personal awareness and broader policy debate are needed in response.
The whole book, in one line
Schneier argues that governments and corporations now collect and analyze personal data at a scale most people never see or consent to in any meaningful way, that this scale of collection creates real risks to privacy and autonomy even when no single piece of data seems sensitive, and that both personal awareness and broader policy debate are needed in response.
How the mechanism works
- How much is actually collected: understanding, in general terms, that everyday digital activity (browsing, apps, purchases, location) generates data trails most people don't think about.
- The convenience-exposure tradeoff: free and convenient digital services are often paid for with personal data, a tradeoff worth making consciously rather than by default.
- Practical steps to reduce unnecessary exposure: adjusting privacy settings, reading what permissions an app actually requests, and limiting which services get access to what.
- The larger policy conversation: mass data collection also raises questions about government and corporate power that go beyond any one person's settings, presented as an ongoing societal debate rather than a settled argument (single framing paragraph, no break/practice line).
Who this was written for
A general adult reader who uses everyday online services and is curious or concerned about how much personal data is collected about them, without necessarily following technology or policy news closely.
ACT tier. Government surveillance, corporate data collection, and related policy topics are politically live; present them evenhandedly, as factual description and personal-empowerment guidance, never as a partisan argument for or against any specific government, agency, company, or political position. No specific real named individual's private data or a real data breach's specific victim reproduced. No specific exploit or intrusion instruction. Every persona edition should close with practical steps the reader can actually take, not just concern without direction. Framework fidelity expected around 7.
Cross-book note
Bruce Schneier has a second title in this category, Click Here to Kill Everybody, about the security of internet-connected devices. Apply the standing same-author cross-book vocabulary differentiation: this book's language should stay centered on data collection, privacy, and policy (data trails, surveillance, data brokers, policy debate), while the other book's own vocabulary (connected devices, firmware, physical-world risk) stays confined to that book, so the two read as genuinely distinct works by the same author.