Public authorities should focus on regulating algorithms and imposing stricter controls on data collection instead, argues researcher.