I glanced thought the paper, and saw no mention of blockchains. I wonder why people don't see the potential. Personally I see blockchains as a natural answer to personal data ownership, access, and control. Your data can be accessible anywhere and everywhere, you can control different levels of access to any granular level, grant or revoke permissions etc. This paper seems to outline some abstract guidlines on how centralized entities can ethically collect, control and make use of personal data. I see it as a dead end.
RE: Personal Data: The Emergence Of A New Asset Class