"It oughtta be illegal" is easy to say but not so easy to actually make happen.
In the middle are various levels of negligence and poor handling of PII which should attract severe punishment to provide economic incentive to protect PII or simply not collect it in the first place.
The whole goal of doxing is intimidation.
(To be clear, I have no reason to believe it will ever be a popular opinion, nor do I see the point in even trying to make it one; that said, not aware of any fundamental reasoning of why it’s impossible.)
>> So then what happens if someone's anonymity is stripped away?
It would be impossible in any significant way, since it would be impossible to digitally identify any entity without having there prior consent; something that’s easily possible with existing technology. If person revoked that permission, retaining data would be illegal, even for the government. If government needed to identify someone, it would be done systematically and anonymously; for example, if a person needed to pay taxes, access a controlled area, etc - it would all be done anonymously with persons consent, if they decline to provide the required anonymous digital tokens, response would be predefined, and would include being deported to an exiled region.
>> Do they sue the de-anonymizer, or does the de-anonymizer face criminal penalties? Or both?
Both.
>> How does one determine an appropriate penalty for this sort of thing?
Person loses access to modern technology, is deported, would be unable to reach anyone once deported, and would never be allowed to return.
>> Does it matter if the victim made themselves stupidly easy to dox?
No, blaming victim is obviously irrational.
_____
Again, if there specific issues other than it not being a popular opinion, please let me know. Otherwise, like I said, an individual being able to control their identity is limited only by popular opinion.
So this person should get a penalty which in some ways is more severe than what murderers get?
> No, blaming victim is obviously irrational.
Okay, but I mean, if I publish my own name and address in a public space, and then someone else who doesn't like me takes that information and republishes it in a manner I disapprove of, is that person still a doxer?
That's an extreme example but doxing almost never involves information which is not already publicly accessible to someone stubborn enough. It just involves following threads, correlating information, using public databases, etc.
Being deported is way more humane than imprisonments. Personally, to me, being controlled than governments, corporations, etc logging my identity and any other information as they want is from of control I neither agreed to, nor would and would happily deport myself to a country than did not.
>> if I publish my own name and address in a public space, and then someone else who doesn't like me takes that information and republishes it in a manner I disapprove of
That would not be possible, at least in a significant way; any directly or indirectly identifiable information digitally published would require approval and would be revocable.
___
Again, might point is two parts: (1) people would never agree to this; (2) but if they did, there is nothing I am aware of the would make it impossible.