Who Decides Who Doesn’t Deserve Privacy?

The piece argues for flagging certain data breaches as sensitive in Have I Been Pwned to prevent harm and doxing, grounding decisions in legal definitions of sensitive personal data (e.g., GDPR) and real-world consequences seen in cases like Ashley Madison, while noting that breaches involving illegality should be shared with law enforcement. It rejects using breach data to publicly shame individuals (e.g., WhiteDate, Fur Affinity, Rosebutt Board) and emphasizes privacy as a human right and responsible processing over moral judgments.