Just because data does not always identify people, does not mean it cannot be used in nefarious ways. Even non-personal data requires careful governance. For instance, consider the case of farm data, such as data about soil conditions, crop production etc. In the hands of the farmer, this data could be used to improve crop yields. In the hands of for instance a commodity trader, this type of data (especially in aggregate) could be used to manipulate the commodity market.
Given that non-personal data is not protected by privacy rights, how do we go about governing it? Who decides where this data ends up and who has the right to access this data? Of course, good governance of non-personal data has only become more urgent with the invention of LLMs.
Background reading: