“I think each person should feel individually charged to think about their own data, think about their own privacy, and the implications for the people around them.”