The third point elaborates on the first: in assessing the changes in the expectations people have about privacy, it is important to recognize the granularity of personal control of data. Privacy is not a one-size-fits-all condition: Different people at different times have different preferences about what happens to their personal information and who gets to see it. They may not have the right or ability to set such conditions in coercive relationships—in dealing with a government entity, for instance, or with an organization such as an employer or an insurance company from which they want something in return. But people often have a better bargaining position than they realize. Now they are gaining the tools and knowledge to exploit that position.