The Body Extended: Data Sovereignty as a Human Right

We've always extended ourselves into tools. Clothing extends skin, shelter extends the body's capacity to withstand weather, writing extends memory and language extends thought. These were, in part, how we defined who we were as people.

Data is the newest extension of the human body. Your location history, your search queries, your biometric patterns, your voice recordings to name a few. These are traces of your existence, as personal as a fingerprint or your handwriting.

The difference is that previous extensions stayed with you and your data doesn't. It leaves you the moment you interact with a digital system, and you have almost no control over where it goes, who sees it, or how it's used. We've extended ourselves into machines that belong to someone else. We did this without much critical thought and we called it progress.

What Data Sovereignty Actually Means

Data sovereignty is the principle that you — not a corporation, not a government, not a data broker — have primary authority over the data your existence generates.

This breaks into three pillars:

This isn't radical. We already apply these principles to physical bodies. You own your body and control who touches it. Consent isn't assumed because you walked into a building. Data should be no different. When someone says they respect your data sovereignty, they're saying: this information about your life belongs to you, not to the system that collected it.

The Commodification of Existence

The attention economy didn't just monetize your attention, it monetized your existence. Every step you take with a phone in your pocket generates location data, every search query reveals intent, every pause on a social media post reveals preference. Your life, lived digitally, is a continuous stream of raw material.

The business model isn't "we provide a service and you pay for it." The business model is "we observe your existence, package the observations, and sell them to whoever will buy." I've written about how the attention economy has turned us into products, but we're also the raw material — and raw materials don't have rights.

This shift happened so slowly most parents never noticed. It felt like convenience, then it became habit and now it's infrastructure. Your kid's school uses a monitoring app, social media listens to their conversations, their favorite games harvest their play patterns. The data flows outward, accumulating in databases you can't see, controlled by companies you can't reach.

When data is treated as property, the question becomes who owns it. When data is treated as an extension of the self, the question becomes who has the right to take it. The answer matters. Privacy went from "the right to be left alone" to "the right to control your data". Now we need to head to "the right to sovereignty over your digital self."

The Legal Illusion

Current legal frameworks don't protect data sovereignty, they regulate data handling. GDPR gives you rights — access, deletion, portability. But it assumes the default is collection, and you have to opt out. COPPA protects children's data but only defines "children" as under thirteen and only regulates what companies can collect — not whether they should be collecting any at all. HIPAA protects medical data but only within specific healthcare contexts — not the health data your fitness tracker, smartwatch, or car collects. Regulating data handling without establishing data sovereignty is just paperwork.

The framework is reactive, not principled. It asks "how should this data be handled?" instead of "should this data exist outside the person who generated it?"

This matters for parents because they're told they're "protected" when companies say things like "we comply with GDPR" or "we follow COPPA guidelines." Compliance isn't sovereignty — a company can follow the law and still treat your family's data as something it owns.

The Generational Stakes

This is the generational argument. Your child is being datafied from birth. Hospital records, baby monitor feeds, smart thermometer readings, family photos in cloud storage, genealogy databases, DNA testing kits. Before they can speak, they have a data profile. Before they can consent, their existence has been monetized.

By the time they're old enough to understand data sovereignty, their digital identity has already been shaped by years of collection they never authorized. They can't "opt out" of data that was gathered before they could opt in.

Imagine growing up with a permanent record that started before you were born. Every developmental milestone logged, every behavioral issue documented and every health metric tracked. By age ten, you have a dossier spanning a decade of surveillance you never agreed to.

These are the generational stakes: data sovereignty isn't about protecting yourself today. It's about whether your children will have a self to protect — or whether their identity will have been distributed across countless corporate databases before they turn eighteen.

The Neurodivergent Lens

Data sovereignty for neurodivergent kids isn't just about privacy. It's about protecting their right to exist differently without that difference being catalogued, scored, and used against them.

ND kids generate more sensitive data than neurotypical kids. Therapy appointments, medication histories, IEP records, behavioral tracking apps, special education databases. Their digital identity includes information about their nervous system, their regulation patterns, their meltdowns, and their triggers.

For Autistic kids, routine data creates highly predictable profiles that are easy to exploit. For ADHD kids, impulsive search queries and browsing patterns reveal internal states they may not want exposed. For PDA kids, behavioral data collected by school surveillance systems or parent monitoring apps can be used to enforce compliance — turning their own data into a control mechanism.

A school that tracks when your kid logs onto a monitoring system knows their attention patterns. An app that records their screen time knows their dopamine thresholds. A wearable that tracks heart rate variability knows their stress levels. All this data flows outward, potentially accessible to insurance companies, future employers, colleges, law enforcement.

This isn't speculation. Medical data is sold to data brokers, health insurance companies deny coverage based on fitness tracker data and school monitoring apps share behavioral logs with third-party vendors.

The question isn't whether your kid's data could be misused. It's whether it ever should have existed outside their medical records in the first place.

A Shift in Thinking

Parents have been trained to think of privacy as a setting. Data sovereignty asks them to think of privacy as a principle — something that belongs to their family by default, not something granted by a company's generosity.

The default question parents ask is "is this app safe?" The better question is "does this app respect my child's sovereignty?" The first question leads to checking privacy policies and reviews. The second leads to questioning whether the data collection should exist at all.

Privacy settings are a concession. Data sovereignty is a demand.

This doesn't mean throwing away every app that collects data. It means approaching each one with a different baseline assumption: this information belongs to us, and we're letting you hold it temporarily under terms we set. Not the other way around.

It means asking why a game needs to know your kid's location. Why a learning app needs to record voice samples. Why a smart toy needs to transmit audio to a cloud server. The answers might be legitimate and they might be convenient, but they might also be unnecessary. Your default stance should be skepticism, not acceptance.

Your kids are growing up in a world that treats their existence as raw material. If we want to change things, it has to start with a fundamental shift in how we think about what data is — not a commodity to be traded, but a part of the person to be protected. And we have to teach our children that...now.