Law Commons^™

Pov: Yes, Filling Out The Race Box On Forms Is Tiresome, But Here’S Why It Matters, Jasmine Gonzales Rose, Neda Khoshkhoo

Shorter Faculty Works

Filling out your race and ethnicity on a form may feel tiresome, and even uncomfortable. You have been checking these boxes for years, as has everyone else, and the questions may seem irrelevant.

“What does race have to do with my doctor’s appointment?” you might ask. Or a form may be inaccurate: “I’m Middle Eastern, why don’t I get a box to check?” Perhaps it feels intrusive: “How is this information going to be used?” And you may wonder, “Why are we always talking about race?”

The truth is, we need to keep talking about race. Even more than we …

The Role Of Ethical Principles In Ai Startups, James Bessen, Stephen Michael Impink, Robert Seamans

Faculty Scholarship

Do high-tech startups benefit from developing more ethical AI? AI startups implement policies and take actions to manage ethical issues associated with data collection, storage, and usage and adapt to the norms of their industry. This paper describes these startups' ethics-related actions, including ethical AI policy adoption, and examines how these actions relate to startup performance. We find that merely adopting an ethical AI policy (i.e., a less costly signal) does not relate to increased performance. However, there is evidence that investors reward startups that take more costly preventative pro-ethics actions, like seeking expert guidance, training employees about unconscious bias, …

Discredited Data, Ngozi Okidegbe

Faculty Scholarship

Jurisdictions are increasingly employing pretrial algorithms as a solution to the racial and socioeconomic inequities in the bail system. But in practice, pretrial algorithms have reproduced the very inequities they were intended to correct. Scholars have diagnosed this problem as the biased data problem: pretrial algorithms generate racially and socioeconomically biased predictions, because they are constructed and trained with biased data.

This Article contends that biased data is not the sole cause of algorithmic discrimination. Another reason pretrial algorithms produce biased results is that they are exclusively built and trained with data from carceral knowledge sources – the police, pretrial …

Data Vu: Why Breaches Involve The Same Stories Again And Again, Woodrow Hartzog, Daniel Solove

Shorter Faculty Works

In the classic comedy Groundhog Day, protagonist Phil, played by Bill Murray, asks “What would you do if you were stuck in one place and every day was exactly the same, and nothing that you did mattered?” In this movie, Phil is stuck reliving the same day over and over, where the events repeat in a continual loop, and nothing he does can stop them. Phil’s predicament sounds a lot like our cruel cycle with data breaches.

Every year, organizations suffer more data spills and attacks, with personal information being exposed and abused at alarming rates. While Phil …

The Role Of Data For Ai Startup Growth, James Bessen, Stephen Michael Impink, Lydia Reichensperger, Robert Seamans

Faculty Scholarship

Artificial intelligence (“AI”)-enabled products are expected to drive economic growth. Training data are important for firms developing AI-enabled products; without training data, firms cannot develop or refine their algorithms. This is particularly the case for AI startups developing new algorithms and products. However, there is no consensus in the literature on which aspects of training data are most important. Using unique survey data of AI startups, we find that startups with access to proprietary training data are more likely to acquire venture capital funding.

Toward Evidence-Based Antiracist Policymaking: Problems And Proposals For Better Racial Data Collection And Reporting, Neda Khoshkhoo, Aviva Geiger Schwarz, Luisa Godinez Puig, Caitlin Glass, Geoffrey S. Holtzman, Elaine O. Nsoesie, Jasmine Gonzales Rose

Faculty Scholarship

The study of data concerning racial and ethnic inequities and disparities allows us to better understand experiences of racism, and to see more clearly how and where racism manifests. Studying the effects of racism, in turn, allows us to more easily identify racist policies, so that we can craft antiracist interventions.

Existing race and ethnicity data collection efforts are riddled with gaps and errors, including missing and incomplete data, insufficiently disaggregated data, lack of meaningful longitudinal data, infrequently updated data, non-standardized methodologies, and other problems. These deficiencies significantly hinder evidence-based antiracist policymaking.

This policy report examines the state of racial …

Ethical Ai Development: Evidence From Ai Startups, James Bessen, Stephen Michael Impink, Lydia Reichensperger, Robert Seamans

Faculty Scholarship

Artificial Intelligence startups use training data as direct inputs in product development. These firms must balance numerous trade-offs between ethical issues and data access without substantive guidance from regulators or existing judicial precedence. We survey these startups to determine what actions they have taken to address these ethical issues and the consequences of those actions. We find that 58% of these startups have established a set of AI principles. Startups with data-sharing relationships with high-technology firms; that were impacted by privacy regulations; or with prior (non-seed) funding from institutional investors are more likely to establish ethical AI principles. Lastly, startups …

The Surprising Virtues Of Data Loyalty, Woodrow Hartzog, Neil M. Richards

Faculty Scholarship

Lawmakers in the United States and Europe are seriously considering imposing duties of data loyalty that implement ideas from privacy law scholarship, but critics claim such duties are unnecessary, unworkable, overly individualistic, and indeterminately vague. This paper takes those criticisms seriously, and its analysis of them reveals that duties of data loyalty have surprising virtues. Loyalty, it turns out, can support collective well-being by embracing privacy’s relational turn; it can be a powerful state of mind for reenergizing privacy reform; it prioritizes human values rather than potentially empty formalism; and it offers solutions that are flexible and clear rather than …

Legislating Data Loyalty, Woodrow Hartzog, Neil Richards

Faculty Scholarship

Lawmakers looking to embolden privacy law have begun to consider imposing duties of loyalty on organizations trusted with people’s data and online experiences. The idea behind loyalty is simple: organizations should not process data or design technologies that conflict with the best interests of trusting parties. But the logistics and implementation of data loyalty need to be developed if the concept is going to be capable of moving privacy law beyond its “notice and consent” roots to confront people’s vulnerabilities in their relationship with powerful data collectors.

In this short Essay, we propose a model for legislating data loyalty. Our …

The Covid-19 Pandemic And The Technology Trust Gap, Johanna Gunawan, David Choffnes, Woodrow Hartzog, Christo Wilson

Faculty Scholarship

Industry and government tried to use information technologies to respond to the COVID-19 pandemic, but using the internet as a tool for disease surveillance, public health messaging, and testing logistics turned out to be a disappointment. Why weren’t these efforts more effective? This Essay argues that industry and government efforts to leverage technology were doomed to fail because tech platforms have failed over the past few decades to make their tools trustworthy, and lawmakers have done little to hold these companies accountable. People cannot trust the interfaces they interact with, the devices they use, and the systems that power tech …

A Duty Of Loyalty For Privacy Law, Neil M. Richards, Woodrow Hartzog

Faculty Scholarship

Data privacy law fails to stop companies from engaging in self-serving, opportunistic behavior at the expense of those who trust them with their data. This is a problem. Modern tech companies are so entrenched in our lives and have so much control over what we see and click that the self-dealing exploitation of people has become a major element of the internet’s business model.

Academics and policymakers have recently proposed a possible solution: require those entrusted with people’s data and online experiences to be loyal to those who trust them. But many have concerns about a duty of loyalty. What, …

What Is Privacy? That’S The Wrong Question, Woodrow Hartzog

Faculty Scholarship

Privacy has never had a precise meaning. But in the early 1900s, the concept took on new life as a term of art in legal frameworks. The result has been a bit of a mess, as no singular definition has been adequate for all purposes. Daniel Solove, perhaps the most influential privacy scholar of our day, wrote at the turn of the millennium that privacy was “a concept in disarray.”

In this short essay reflecting upon Solove’s impact on the modern study of information privacy, I argue that the chaos and futility of competing conceptualizations of privacy is why Solove’s …

Gdpr And The Importance Of Data To Ai Startups, James Bessen, Stephen Michael Impink, Lydia Reichensperger, Robert Seamans

Faculty Scholarship

What is the impact of the European Union’s General Data Protection Regime (“GDPR”) and data regulation on AI startups? How important is data to AI product development? We study these questions using unique survey data of commercial AI startups. AI startups rely on data for their product development. Given the scale and scope of their business models, these startups are particularly susceptible to policy changes impacting data collection, storage and use. We find that training data and frequent model refreshes are particularly important for AI startups that rely on neural nets and ensemble learning algorithms. We also find that firms …

Body Cameras And The Path To Redeem Privacy Law, Woodrow Hartzog

Faculty Scholarship

From a privacy perspective, the movement towards police body cameras seems ominous. The prospect of a surveillance device capturing massive amounts of data concerning people’s most vulnerable moments is daunting. These concerns are compounded by the fact that there is little consensus and few hard rules on how and for whom these systems should be built and used. But in many ways, this blank slate is a gift. Law and policy makers are not burdened by the weight of rules and technologies created in a different time for a different purpose. These surveillance and data technologies will be modern. Many …

Rise Of The Digital Regulator, Rory Van Loo

Faculty Scholarship

The administrative state is leveraging algorithms to influence individuals’ private decisions. Agencies have begun to write rules to shape for-profit websites such as Expedia and have launched their own online tools such as the Consumer Financial Protection Bureau’s mortgage calculator. These digital intermediaries aim to guide people toward better schools, healthier food, and more savings. But enthusiasm for this regulatory paradigm rests on two questionable assumptions. First, digital intermediaries effectively police consumer markets. Second, they require minimal government involvement. Instead, some for-profit online advisers such as travel websites have become what many mortgage brokers were before the 2008 financial crisis. …

On Questioning Automation, Woodrow Hartzog

Faculty Scholarship

Given the rapid pace of innovation and adoption, it can be hard to make sense of automated technologies. New products that leverage algorithms and artificial intelligence seem to be both promising and frightening. Law and policymakers, as well as the general public, are grappling with when to be excited and when to be concerned. If you're confused, you're not alone

The Inadequate, Invaluable Fair Information Practices, Woodrow Hartzog

Faculty Scholarship

For the past thirty years, the general advice for those seeking to collect, use, and share people’s personal data in a responsible way was relatively straightforward: follow the fair information practices, often called the “FIPs.” These general guidelines were designed to ensure that data processors are accountable for their actions and that data subjects are safe, secure, and endowed with control over their personal information. The FIPs have proven remarkably sturdy against the backdrop of near-constant technological change. Yet in the age of social media, big data, and artificial intelligence, the FIPs have been pushed to their breaking point. We …

The Internet Of Heirlooms And Disposable Things, Woodrow Hartzog, Evan Selinger

Faculty Scholarship

The Internet of Things (“IoT”) is here, and we seem to be going all in. We are trying to put a microchip in nearly every object that is not nailed down and even a few that are. Soon, your cars, toasters, toys, and even your underwear will be wired up to make your lives better. The general thought seems to be that “Internet connectivity makes good objects great.” While the IoT might be incredibly useful, we should proceed carefully. Objects are not necessarily better simply because they are connected to the Internet. Often, the Internet can make objects worse and …

Law And Politics, An Emerging Epidemic: A Call For Evidence-Based Public Health Law, Michael Ulrich

Faculty Scholarship

As Jacobson v. Massachusetts recognized in 1905, the basis of public health law, and its ability to limit constitutional rights, is the use of scientific data and empirical evidence. Far too often, this important fact is lost. Fear, misinformation, and politics frequently take center stage and drive the implementation of public health law. In the recent Ebola scare, political leaders passed unnecessary and unconstitutional quarantine measures that defied scientific understanding of the disease and caused many to have their rights needlessly constrained. Looking at HIV criminalization and exemptions to childhood vaccine requirements, it becomes clear that the blame cannot be …

Social Data, Woodrow Hartzog

Faculty Scholarship

As online social media grow, it is increasingly important to distinguish between the different threats to privacy that arise from the conversion of our social interactions into data. One well-recognized threat is from the robust concentrations of electronic information aggregated into colossal databases. Yet much of this same information is also consumed socially and dispersed through a user interface to hundreds, if not thousands, of peer users.

In order to distinguish relationally shared information from the threat of the electronic database, this essay identifies the massive amounts of personal information shared via the user interface of social technologies as “social …

Chain-Link Confidentiality, Woodrow Hartzog

Faculty Scholarship

Disclosing personal information online often feels like losing control over one’s data forever; but this loss is not inevitable. This essay proposes a “chain-link confidentiality” approach to protecting online privacy. One of the most difficult challenges to guarding privacy in the digital age is the protection of information once it is exposed to other people. A chain-link confidentiality regime would contractually link the disclosure of personal information to obligations to protect that information as the information moves downstream. The system would focus on the relationships not only between the discloser of information and the initial recipient, but also between the …

Higher First Amendment Hurdles For Public Health Regulation, Kevin Outterson

Faculty Scholarship

In 2007, Vermont enacted the Prescription Confidentiality Law, prohibiting pharmacies from selling “prescriber-identifiable” prescription information to data-mining companies such as IMS Health and Verispan. These companies aggregate such data and sell them to many groups, including drug companies, so when drug sales representatives visit a physician, they can know exactly what prescriptions the physician has written.

Commentary On Economic And Ethical Reasons For Protecting Data, Wendy J. Gordon

Faculty Scholarship

Like Jane Ginsburg, I would like to drop back a bit, to talk about more general principles. Essentially, both of our primary speakers focused on a distinction between property and non-property modes of protecting data. I would like to highlight the economic and ethical reasons for maintaining that distinction.

Proprietary Rights In Digital Data, Maureen A. O'Rourke

Faculty Scholarship

The Clinton Administration in 1993 announced its intention to develop a National ; Information Infrastructure (NII), an "information superhighway" designed to make electronic digital information more widely available and accessible to the public. This announcement has . ~ stimulated a national debate over how best to define and enforce an appropriate set of proprietary rights in digital information. That debate should begin with an analysis and assessment of the current state of the law of digital data. While that law resembles a moving target, general trends may be identified. The current framework provides the background against which NIL may be …