The Consent Gap

*Why women in business can't afford to miss this tech moment, and what consent has to do with it*

By Rose Kaz | November 2026

**The short version:** Data consent is the same fight women have always known. Most of us clicked yes to terms no one could realistically read, and data brokers turned our patterns into inventory. Data sovereignty goes beyond rejecting cookies: it means we own our patterns, our knowledge, and our expertise, and we decide where they go. Business 4 Good is built on that principle, and it starts with protecting our human intelligence (HI) before AI learns from it.

---

Women understand consent. We have fought for it in clinics, in courtrooms, and in conversations we should never have had to have, for ourselves, our daughters, our aunties, and our sisters.

Women know, in ways no one should have to learn the hard way, what happens when consent is disregarded.

Stay with me a moment. I am not taking that lightly, and I am not trying to fix every broken system with one approach, or all at the same time. What I am trying to do is draw a parallel: data consent is that very same fight, simply renamed.

On this Election Day, women across the United States are going to the polls. We are making our voices heard because the history of being silenced has taught us exactly what is at stake when we are not in the room. Previous iterations of women-forward leadership, also known as feminisms, have too often excluded our darker-skinned sisters. That will not happen here and, quite frankly, it is shameful that it ever did. Freedom for all mankind includes ALL womankind, too.

That same principle carries into the data economy. Knowledge is power, and two things come from the same systems built on power-over dynamics: what is taken without our exact and clear consent, and what is then decided about where and how it is sold back to us, with no regard for the fact that the data came from us in the first place. We witness both every day, in these online streets and in the streets of our own 3D cities.

My last post in this series, [Who Doesn't Want Cookies?](https://www.rosekaz.com/leverage-business-infrastructure-blog/who-doesnt-want-cookies), covered how the internet *actually* works, what it gives and what it takes. As an '80s baby, I remember the late-1990s sales pitch for AOL dial-up and the World Wide Web, and it is hardly what this 2026 internet looks or acts like. If you have not read the cookie piece yet, spoiler alert: nothing this [Web 2.0](https://en.wikipedia.org/wiki/Web_2.0) internet gives resembles anything my grandma would bake. This post picks up where the cookie piece left off, with who profits from cookies, which at their worst work like spyware, why the internet's earlier architects want us confused about them, and what a different future looks like.

---

## What is the consent gap?

The consent gap is the distance between what we technically "agreed to" and what we understood we were handing over, including whether we knew we had a choice at all.

Most of us have checked boxes for things we did not fully read. I'd bet everyone has. The forty-page, tiny-font terms of service, the cookie banner you clicked away because you needed to get somewhere, the app permissions you approved before your first cup of coffee. Clicking through is compliance theater, packaged to feel like a choice.

Informed, consensual data consent means knowing what we are agreeing to and being able to say no without losing access to something essential. Hot tip: when you reject all cookies, or almost all of them, you can still get to the website. Most of the time, anyway.

Data sovereignty means more than blocking or rejecting cookies. It points to us owning our data, and that means owning not only our patterns online but also our knowledge and expertise, and ultimately deciding where they go.

Not surprisingly, consenting to internet cookies as a consumer right has a pretty short history. Europe got there first: the General Data Protection Regulation required it starting in 2018. California followed in 2020, when the California Consumer Privacy Act gave residents the right to opt out. The rest of the country has been taking its sweet time. Virginia, Colorado, Connecticut, and Texas led the pack with laws taking effect in 2023 and 2024, and by [one late-October 2026 count](https://www.multistate.us/insider/2026/10/28/twenty-four-states-now-have-comprehensive-consumer-privacy-laws), 24 states have enacted comprehensive consumer privacy laws, with roughly 20 in effect. Twenty out of fifty. Nobody is putting that on the fridge.

A law on the books and a law enforced are two very different animals. Many of these laws exempt smaller businesses, and the burden of opting out still falls on us as consumers, or more aptly, "the consumed" by data brokers. Enforcement is growing, and the gap between what the law says and what companies do remains part of the consent gap.

Roughly half of states in the US have passed nothing at all. At the federal level, there is still no comprehensive privacy law and no general federal rule on cookie consent. Congress has several bills pending, including the [SECURE Data Act (H.R. 8413)](https://www.congress.gov/bill/119th-congress/house-bill/8413/all-info), introduced in April 2026, which would create a national data broker registry overseen by the Federal Trade Commission. It remains in committee, and with the midterms looming, privacy experts told [StateScoop](https://statescoop.com/federal-privacy-law-highly-unlikely-in-2026-leaving-states-to-continue-setting-their-own-rules/) in September that the odds of passage this year are very slim. Meanwhile, the Consumer Financial Protection Bureau [withdrew its proposed data broker rule](https://www.govinfo.gov/content/pkg/FR-2025-05-15/html/2025-08644.htm) in May 2025, and federal action today rests mostly on FTC enforcement, such as [warning letters to 13 data brokers](https://www.ftc.gov/news-events/news/press-releases/2026/02/ftc-reminds-data-brokers-their-obligations-comply-padfaa) in February 2026 about selling sensitive data to foreign adversaries. You know what warning letters sound like to me? A slap on the wrist for the bad boys in the locker room. Boys being boys.

By that measure, most of what we have clicked through does not count as consensual data consent. That will not surprise anyone who has watched how reports of violated physical consent are handled. According to [RAINN](https://rainn.org/help-and-healing/if-youve-been-assaulted/reporting-sexual-assault-to-law-enforcement/), out of every 1,000 sexual assaults, about 310 are reported to police. Fifty of those reports lead to an arrest. Twenty-five perpetrators are incarcerated. Read those numbers slowly. That is roughly one arrest for every six reports. A society that rarely holds people accountable for dishonoring consent in our bodies is not going to be first in line to enforce it in our data. I am drawing a parallel about accountability, and I know the harms differ in kind, but they share the exact same root: disrespect for human autonomy and human intelligence.

The #MeToo movement continues to move forward because survivors push it. Data sovereignty will likely be led the same way, by everyday internet users who are sick and tired of data brokers taking what is not theirs, from people who never really wanted to hand it over.

Women know what happens when consent is manufactured, pressured, or coerced instead of freely given. We have built movements around it. We have named it, legislated it, marched for it, and kept naming it when the legislation was not enough. We know what it looks like when accountability never arrives, and we know that in our bones. The same analysis applies here.

What is being taken is our data, and beneath it, our own intelligence, our [HI (human intelligence)](https://www.rosekaz.com/why-ai), and that data has been and continues to be sold back to us. HI is the raw material for building AI tools at scale. In short, HI = GOLD.

---

## Data brokers explained: what the extractive internet takes

The short version: take what you can access, package it, and sell it before the person it belongs to knows the transaction happened. That speed and secrecy are part of why protective legislation has been slow to arrive. Most people do not yet know how powerful their data is. I am here to change that.

Data brokers are companies that collect personal data, package it, and sell it to marketers and other buyers, usually without the person ever knowing. They are a product of an internet designed from the ground up on extractive values. Back in 2014, the Federal Trade Commission's [study of nine data brokers](https://www.ftc.gov/system/files/documents/reports/data-brokers-call-transparency-accountability-report-federal-trade-commission-may-2014/140527databrokerreport.pdf) found a fundamental lack of transparency and billions of data elements on nearly every U.S. consumer. Imagine the 2026 version. I looked at the economic model underneath this in [Extractive Capitalism Is Collapsing: The Generative Economy Has Entered the Chat](https://www.rosekaz.com/leverage-business-infrastructure-blog/extractive-capitalism-is-collapsing-the-generative-economy-has-entered-the-chat), which goes deeper on where that model is headed.

Our clicks, our hesitations, our patterns at 11pm on a Tuesday are inventory. A company you have never heard of is packaging your behavior and selling it to someone who wants to sell it back to you. This multibillion-dollar industry runs in the background of the apps, platforms, and "free" services you use.

Default settings favor the company, and I wrote about that in [Check Your Default Settings](https://www.rosekaz.com/leverage-business-infrastructure-blog/check-your-default-settings).

In this equation we are the product and the supplier at the same time, and we are not paid dividends for our contribution. Sound like another power-over dynamic from this country's recent past?

The price of free has always been our attention. What changed is scale and speed, and who is in the room while it happens.

---

## HI before AI: our expertise is an asset

The pattern recognition you built through years of client conversations, the professional judgment that took a decade to develop, the market reads you made before anyone else called them. That is human intelligence. AI trained on it without attribution or compensation is not a neutral transaction.

Since AI is not leaving the building anytime soon, it matters, especially for those of us leading businesses and teams, that we understand the stakes for our own value and for future generations of women and men. I wrote about this for leaders in [The Role of AI in Leadership](https://www.rosekaz.com/leverage-business-infrastructure-blog/role-of-ai-in-leadership), a good companion to this piece.

I have also co-facilitated conversations with my clients and their audiences about the future of communication, and where AI belongs and where it does not. I often contribute to Speaker Skills Academy's blog and programming as their in-house Creative Technician, including [The future of speaking runs on human intelligence](https://www.speakerskillsacademy.com/the-word-up-blog/future-of-speaking-human-intelligence-empathy), which I wrote for them on October 8.

I have spent years in rooms with women who knew exactly what was going to happen before it did. We called the market, read the room, and named the pattern. Not one of those conversations came with a royalty check for the data it produced. That gap shows up even in my own small research set: ten years of interviews with women. You can subscribe to my [Substack](https://rosekaztequity.substack.com) to read more about that research.

The wage gap comes from systems that have consistently undervalued what we bring. Data extraction without consensual data consent runs on the same logic. And if we can get in-formation on how this moment in tech history can change the trajectory for all humankind, with women empowered by our own data as gold and owning that value, I will have accomplished the work I came to do on this planet. #NBD

Understanding consent in a data context leads to understanding ownership. Your expertise, documented patterns, and professional judgment are assets, and assets come with decisions about what happens to them. Data sovereignty means we own our data, including our knowledge and expertise, and we decide who uses them and on what terms. It is gold.

Data sovereignty is queen.

---

## Women's voice in the architecture

Elections are decided by who shows up and who is heard. Word nerds, this one is for you: [democracy](https://www.etymonline.com/word/democracy) comes from the ancient Greek *dēmokratia* (δηÎüοκρατία), where *dēmos* means the common people and *kratos* means power, or rule. Power to the people, quite literally.

To extend democratic leadership into technology, these tools need to be shaped by those who build them and those they are built for. From my perch, those two are one conversation, especially in 2026, and we need to be having it in the open, with zero jargon, so this incredibly powerful technology is not only demystified but absolutely accessible to anyone who wants to build with it, around it, or into it.

Women have been excluded from the architecture of technology, or at least from proper recognition for our contributions, the same way we have been excluded from political power: sometimes overtly, often structurally, and always with consequences. When the consent frameworks for data were written, most of us were not in those rooms. When the platforms that run on our attention were designed, our preferences were studied as market segments rather than consulted as co-architects of what was being built.

Joy Buolamwini's [Gender Shades research](https://time.com/5520558/artificial-intelligence-racial-gender-bias/) documented racial and gender bias built directly into AI systems. Safiya Umoja Noble, author of [Algorithms of Oppression](https://nyupress.org/9781479837243/algorithms-of-oppression/), has spent her career showing how search engines reinforce bias. Both confirm what many of us have known in our bones. [Coded Bias](https://www.ajl.org/spotlight-documentary-coded-bias) shows it on screen, with pioneering women sounding the alarm in their own voices.

Our HI is the gold being mined. Our vote is the voice being counted. Consensual data consent and the right to a meaningful vote express the same claim: our participation is never assumed. It is given, or it is not. When it is taken rather than given, that is a problem worth naming clearly, as we named the subject that opened this piece.

Women will not be silenced, not in the voting booth, not in the data economy, not in the rooms where the frameworks for both are being written right now, and most certainly not in our bedrooms or anywhere else our autonomy of body and mind is at stake.

---

## A working example: Business 4 Good

The next iteration of the [Business 4 Good](https://b4g.biz) platform, where we exchange our knowledge as a service, is designed from the ground up with this in mind. On the directory, we find each other, book each other's time, access each other's expertise, and are compensated for the knowledge we contribute. Consent is built into the architecture from the beginning, because we know what an afterthought costs. This is Tequity, Technology as a Tool of Equity, in practice.

I am so very excited for this directory to go live, finally. The framework builds on ten years of interviews with women. Rather than feeding our expertise into a platform that extracts and resells it, we are building infrastructure we co-own, as a cooperative circle model rooted in structures proven over many years, including the Mondragón cooperatives of Spain. To understand the model, start with [Concentric Circles of Care](https://www.rosekaz.com/leverage-business-infrastructure-blog/concentric-circles-of-care), then read [Building Coalitions, Not Networks](https://www.rosekaz.com/leverage-business-infrastructure-blog/building-coalitions-not-networks), where the philosophy underneath the structure lives.

---

## If you lead a team, this includes you

If you make decisions about what tools your team uses, this conversation includes you. Many of those tools can train on your team's patterns, your proprietary workflows, your institutional knowledge, and your expertise. Choosing a tool is a data sovereignty decision, even if you have not framed it that way yet.

Those of us who understand this now will write the consent policies, design workflows that protect what our teams produce, and train the people who come after us. I have watched this pattern long enough to call it, and I hope you will join me in building Business 4 Good, starting now.

I will share more on this throughout the month on my [Substack](https://rosekaztequity.substack.com). Subscribe to stay in the conversation.

---

## Quick answers on data sovereignty and consent

**What is the consent gap?**

The distance between what we technically agreed to online and what we understood we were handing over, including whether we knew we had a choice.

**What is consensual data consent?**

Knowing what we agree to share and being able to say no without losing access to something essential.

**What is data sovereignty for women in business?**

Owning our data, including our online patterns, knowledge, and expertise, and deciding who uses them, on what terms, and with what compensation. It goes beyond blocking cookies.

**What are data brokers?**

Companies that collect personal data, package it, and sell it to marketers and other buyers, often without the person knowing.

**Why does this matter for women who lead teams?**

Many AI tools can train on a team's patterns, workflows, and institutional knowledge, so choosing a tool is a data sovereignty decision.

---

## We already know this

We have always known the consent framework. We built it for our bodies and our boardrooms. We know what it costs when it is disregarded. We know what it feels like when the rules are written without us in the room.

Consensual data consent is that same conversation, and we are in the room now, and we will not leave.

When women have everything we need, everyone flourishes.

---

**CTA 1:** Subscribe on Substack (replace with live embed or button): rosekaztequity.substack.com

**CTA 2:** [Explore the Business 4 Good directory](https://b4g.biz). Women own the knowledge and consent is built in.

**CTA 3:** Courses and offers, if applicable at time of publishing.

---