Law Commons^™

Governing Generative Ai In Higher Education: A Global Delphi Study On Policy And Practice, Helen Crompton, Diane Burke, Christine Nickel, Aras Bozkurt, Fengchun Miao, Mike Sharples, Jeffrey Alan Greene, David Parsons, Lucy Gill-Simmen, Adam Edmett, Mark Pegrum, Inge De Waard, Curtis J. Bonk, Manuel B. Garcia, John H. Curry, Leeann Lindsey, Mohan Yang, Stephen Marshall, Maha Bali, Nellie Deutsch, Suzaan Le Roux, Mourad Benali, Mohd Ali Bin Samsudin, Hasan Tinmaz, Matthew L. Bernacki, Mari Van Wyk, Lenandlar Singh, Agnes Chigona, Lance Eaton, Junhong Xiao, Johanna Velander, Jinhee Kim, Francisco Bellas, R. Rajalakshmi, Andréia De Bem Machado, Agnieszka Palalas, Sean Yu

STEMPS Faculty Publications

As GenAI technologies become more pervasive in higher education (HE), scholars call for guidance on AI governance. To meet this need, a Delphi technique and collective writing was used in gathering expert perspectives from across 22 countries/locations and six continents. This resulted in the development of a HE GenAI policy/guidelines framework with eight core areas: (1) academic integrity, (2) ethical use and responsible use, (3) privacy and protection, (4) equitable access, (5) GenAI literacy, (6) integration strategy, (7) human oversight and accountability, and (8) institutional support and infrastructure. In addition, a six-part framework was developed to ensure that policies remain …

Brokering Safety, Chinmayi Sharma, Thomas E. Kadri, Sam Adler

Faculty Scholarship

For victims of abuse, safety means hiding. Not just hiding themselves, but also their contact details, their address, their workplace, their roommates, and any other information that could enable their abuser to target them. Yet today, no number of name changes and relocations can prevent data brokers from sharing a victim’s personal information online. Thanks to brokers, abusers can find what they need with a single search, a few clicks, and a few dollars. For many victims, then, the best hope for safety lies in obscurity—that is, making themselves and their information harder to find.

This Article exposes privacy law’s …

Against Ai Half Measures, Woodrow Hartzog, Neil Richards, Ryan Durrie, Jordan Francis

Faculty Scholarship

So far, U.S. consumer protection policy for artificial intelligence (AI) accountability has largely consisted of industry-led approaches such as encouraging transparency, mitigating bias, promoting principles of ethics, and empowering people. These approaches are vital, but they are only half measures. To bring AI within the rule of law, lawmakers must start drawing substantive lines.

In this Article, we identify four AI regulatory approaches to consumer, data, and democratic harms as half measures. First, transparency does not produce accountability on its own. Second, while mitigating bias in AI systems is critical, even unbiased systems are a threat to the vulnerable. Third, …

The Hypocrisy Of Data Governance, Zubair Shafiq, Olivia Figueira, Athina Markopoulou, Woodrow Hartzog, Michael Lavine

Faculty Scholarship

“Data governance” is an empty term, like a Rorschach inkblot just waiting to be filled with meaning. Tech companies take advantage of this ambiguity to craft narratives about their data-governance capabilities to fit their audience and purpose. On one hand, tech companies brag about their data-governance capabilities when it fits their business model (for example, to advertisers) and public image (for example, to their customers). On the other hand, tech companies claim that meaningful data governance is challenging or impossible when accountability is demanded.

In this Article, we argue that tech companies systematically misrepresent or selectively ignore their data-governance capabilities. …

Privacy’S Autonomy Thicket: Disentangling Choice, Consent And Control, Jordan Francis, Woodrow Hartzog, Neil Richards

Faculty Scholarship

When it comes to talking about autonomy, privacy law could use a little clarity. Its discourse uses terms like “choice,” “consent,” and “control” to evoke autonomy, but these terms are too rarely defined and too often used interchangeably, even though they can mean very different things. The three terms have become entangled in a way that has become confusing and counterproductive. We call this problem “privacy’s autonomy thicket,” and it matters because it encourages talking past each other in policy debates, enabling the redefinition of these terms in misleading ways that produce weak and disempowering “notice and choice” regimes.

In …

Taking Scale Seriously In Technology Law, Mark P. Mckenna, Woodrow Hartzog

Faculty Scholarship

Issues of scale—the relationship between the amount of an activity and its associated costs and benefits—permeate discussions around law and technologies. Indeed, it’s not much of an exaggeration to say that scale is the reason for most technology regulation.

But it’s not always clear how lawmakers and judges conceptualize “scale” when approaching questions around automated technologies. Scale is often used intuitively, just to mean “more.” But scale is not always just about more—scale can introduce new harms and benefits along different dimensions, not simply costs or efficiencies of greater magnitude.

In this Article, we argue for a more sustained interrogation …

Corporate Law's Duty Of Data Loyalty, Andy Serwin, Neil Richards, Woodrow Hartzog, Ryan Durrie

Faculty Scholarship

Privacy law used to be a relatively tidy field, involving a few interesting but discrete topics like press disclosures of private facts, wiretapping, and the processing of personal data by internet companies. But as the digital revolution continues to disrupt area after area of human activity and software “is eating the world,” the core concerns of privacy law such as “when is it appropriate to process personal data?” have similarly entered field after field. Today, most fields of law, including discrimination law, antitrust, and international law, have found it necessary to reckon with the questions of informational harm and power …

Legal Issues Arising From The Military Use Of Ai-Supported Biometrics, Marten Zwanenburg

International Law Studies

Biometrics is increasingly used by armed forces for a variety of purposes, such as access control, the registration of detainees, and increasingly also targeting. The capabilities of biometric systems are considerably strengthened when they are enabled by artificial intelligence (AI). This article analyzes legal questions that are raised by the military use of such AI-supported biometrics. It argues that relevant legal frameworks are International Humanitarian Law, international human rights law, and the right to privacy in particular, as well as data protection law. The article finds that arguably, IHL may require the use of (AI-supported) biometrics in certain situations if …

School And District Leaders’ Understanding Of Technology Organizations’ Cyber Business Practices, Jayejaye Johnson

Journal of Educational Research and Practice

Educational technology (EdTech) interoperability throughout cyberspace provides the financial opportunity to collect and sell student privacy information in digital learning environments, challenging school leaders to govern schools and keep children safe. School leaders provide the resources, funding, planning, decision making, and administration for EdTech cybersecurity practices and policies, yet little is known about what public school leaders understand. A quantitative study was designed using primary data collected from an online survey. Four research questions guided this study: What are the differences in cybersecurity practices and policy response scores (1) between male and female school leaders; (2) among leaders with different …

The 'Pay-Or-Consent' Model And Competition Policy: A Case Comment On The European Commission’S Decision Against Meta Under The Digital Markets Act, Arletta M. Gorecka

Yearbook of Antitrust and Regulatory Studies

This case comment analyses the European Commission’s first non-compliance decision under the Digital Markets Act (DMA), focusing on Meta’s “pay-orconsent” model and its incompatibility with Article 5(2). The Commission held that Meta failed to provide users with a genuinely equivalent, privacy-protective alternative to behavioural advertising, thereby undermining the voluntariness of consent and commodifying user data in violation of DMA standards. The comment situates the ruling within broader EU regulatory trends, highlighting parallels with Apple’s infringement of Article 5(4) DMA and the Commission’s emerging outcomes-oriented enforcement approach. It argues that these decisions jointly clarify gatekeeper obligations, expand the meaning of “free …

Above The Law? Exploring Satellite Surveillance Under The Illinois Bill Of Rights, Maxwell A. Ruttenberg

Northern Illinois University Law Review

Since the Soviet Union’s launch of the Sputnik 1 satellite in 1957, our atmosphere has seen a boom in the number of satellites in orbit. Today, it is estimated that there are between five and ten thousand satellites in orbit, most of them owned by private corporations. Our skies will continue to be filled in the coming years as current players increase their satellite fleets, new players arise in the aerospace industry, and nations continue their focus on the uses of space exploration and technology. With the increase of satellites above, communities must now be on alert to an invasion …

The Gamification Of Banking, Colleen Baker, Christopher K. Odinet

Faculty Scholarship

Gamification is coming to banking. This phenomenon is already gain-ing ground in advertising, healthcare, manufacturing, and, more recently, with the GameStop and AMC meme stock saga in securities trading. The idea behind gamification is to make transactions seem fun, playful, and even casino-like in order to elicit habit-forming, addictive-like effects with consumers. This Article argues that the rise of financial technology (“fintech”) firms and their ever-growing business relationships with incumbent financial institutions has created the necessary conditions for gamification to take hold in the banking sector. In order to explore this observation, we undertake a study of current examples of …

Law Enforcement, Reproductive Health Information, And The Hipaa Privacy Rule, Stacey A. Tovino

Faculty Articles

On April 26, 2024, the federal Department of Health and Human Services (HHS) promulgated a final rule (Final Rule) amending the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. The Final Rule prohibits HIPAA covered entities and business associates from using and disclosing protected health information (PHI) to conduct criminal, civil, or administrative investigations into an individual for the mere act of seeking, obtaining, providing, or facilitating lawful reproductive health care. The Final Rule also prohibits HIPAA covered entities and business associates from using and disclosing PHI to impose criminal, civil, and administrative liability on any individual, or to …

Dignity And Deepfakes, Michael Goodyear

Articles & Chapters

Today, we face a dangerous technosocial combination: AI-generated deepfakes and the Internet. Believable and accessible, these deepfakes have already spread sex, lies, and false advertisements across the Internet and targeted everyone from Taylor Swift to middle school students. Dissemination of deepfakes inflicts multifarious dignitary harms against their victims—especially women and LGBTQ+ persons—stripping them of control over their own identities, harming their reputations, and ostracizing them from society through shame.

Yet this is not the first time a new technology for capturing one’s likeness and a method for disseminating images threatened individuals’ dignity. In the late nineteenth century, the right of …

Are You The Sum Of Your Data? Appropriation Of Digital Persona As Appropriation Of Likeness, Lyrissa Barnett Lidsky

UF Law Faculty Publications

A review of Zahra Takhshid's article, Data as Likeness, 112 Geo. L. J. 1161 (2024).

Watching The Clock: Time-Tracking And The Erosion Of Privacy And Dignity At Work, Tammy Katsabian

Comparative Labor Law & Policy Journal

This article examines the rise of time-tracking technologies as a dominant form of digital workplace surveillance and their implications for workers’ privacy and dignity. Often framed as neutral tools for enhancing productivity, these systems embed continuous algorithmic oversight into daily work routines, intensifying managerial control and reshaping the employment relationship. Drawing on legal, philosophical, and socio-technical scholarship, the article argues that privacy and dignity are mutually reinforcing values, both of which are undermined by pervasive surveillance practices. Privacy is not treated here as a waivable entitlement grounded in individual consent, but rather as a structural safeguard that protects autonomy and …

27th Annual Open Government Summit: Your Guide To The Access To Public Records Act & Open Meetings Act (Powerpoint Slides) 08-01-2025, Attorney General State Of Rhode Island

School of Law Conferences, Lectures & Events

No abstract provided.

Middle Schoolers Explore The Rule Of Law At Second Annual Mandell-Boisclair Justice Camp 7-17-2025, Jordan J. Phelan

School of Law Conferences, Lectures & Events

No abstract provided.

Law School News: Middle Schoolers Explore The Rule Of Law At Second Annual Mandell-Boisclair Justice Camp 07-17-2025, Jordan J. Phelan

Life of the Law School (1993- )

No abstract provided.

Making The Margins Visible: Dignity At Work And The Promise Of Puttaswamy—Review Of Gendered Bodies And Worlds Of Labour: Reconceptualizing Dignity After Puttaswamy Vs Union Of India, Shreya Shree

National Law School Journal

This review examines Kalpana Kannabiran and Devi Jagani’s reimagination of dignity as a framework for securing justice in gendered labourscapes. By centering a broad and dynamic understanding of dignity as a right, an inherent characteristic, and an enabling condition for rights-talk, the book advances new ways of articulating rights-claims through an intersectional and interdisciplinary reading of the Indian Constitution. The review highlights the significance of this approach in renewing understandings of the worker, labour, discrimination, and rights, while exploring its possibilities and limits in confronting violence and injustices embedded in gendered labour relations within the domestic sphere and beyond.

Personal Data Is Not Digital Contraband: Why The Protecting Data At The Border Act Is Needed, Raaid M. R. Bakridi

Student Journal of Information Privacy Law

In Fiscal Year 2024, U.S. Customs and Border Protection (CBP) conducted over 46,000 warrantless searches at international borders, raising significant privacy concerns. This article examines the constitutionality of these searches, focusing on the federal government’s use of the “border search exception” to the Fourth Amendment, which traditionally allows warrantless searches at the border to safeguard national security. However, applying this exception to electronic devices, which store vast amounts of personal data, presents new challenges, for such electronic devices often reveal intimate details of an individual's life. The article critiques the government's use of such exceptions and the argument that constitutional …

Artificial Intelligence In Surveillance And Privacy, Elizabeth D. Brasher

NEXUS: The Liberty Journal of Interdisciplinary Studies

This paper attempts to provide insight into the new and developing world of artificial intelligence and its integration into surveillance technologies. These technologies being implemented by the government, retail companies, healthcare organizations, and more, all raise ethical questions and implications addressed in this article; other topics, such as the integration of Christian ethics and responsibilities, are also explored.

Ninth Amendment Neurorights, Joseph A. Tomain

Indiana Law Journal

Neurotechnology developments threaten two fundamental human rights: freedom of thought and mental privacy. For example, neuroscientists use brain scans to decode unspoken thoughts and to predict political ideology and sexual orientation. Additionally, they have successfully implanted false memories in the minds of mice. There are undoubtedly beneficial uses of this dual-use technology, such as identifying and treating a variety of medical conditions. But left unchecked, neurotechnology will be exploited by public and private actors alike. There is a growing and contested literature about how the law should respond to the increasing risks of neurotechnology. This Essay contributes to that literature …

Facial Recognition Ai, Margaret Hu

Faculty Publications

The integration of algorithmic decisionmaking and artificial intelligence (“AI”) into facial recognition technology poses new, unprecedented risks to privacy and individual autonomy rights, particularly in urban settings. The murder of Brian Thompson, CEO of UnitedHealthcare, in New York City on December 4, 2024, provides a timely case study to examine the deployment of facial recognition systems by the New York Police Department and other law enforcement agencies to identify the suspect. New York City deploys some of the most sophisticated surveillance architecture in the nation, put into place following the terrorist attacks of September 11, 2001. This Article explores the …

Facial Recognition Technology: The Case For Comprehensive Federal Oversight, Christopher Hart

Journal of the National Association of Administrative Law Judiciary

This article will argue that regulations for government agency use of FRT should be stringent and limit the exploitation of personal biodata in the private sector. Instead of creating a new agency, Congress could expand an existing agency’s responsibility by granting it regulatory power over facial recognition technology. First, this article will seek to delineate the contours of facial recognition technology and its contemporary application within the United States. Then, this article will analyze the intricacies of FRT in both the public and private sectors. Within the public domain, specific attention will be devoted to discussing the use of FRT …

Menstrual Justice After Dobbs, Margaret E. Johnson

All Faculty Scholarship

This Article identifies and analyzes the category of state and private regulation that is invisible and subordinates women and other menstruators in ways that impact their privacy, liberty, and equality. Because this category of regulation is pervasive, bringing it to light is critical for considering how best to curb its harm. This Article considers potential legal strategies to counter such menstruation regulation and argues that Dobbs v. Jackson Women’s Health Organization offers some promise—but more cause for pessimism—regarding the U.S. Constitution’s power to do so. This Article therefore explains how subconstitutional law offers greater potential, while cautioning that political science …

The Increasing Prevalence Of Cyber Operations And The Inadequacy Of International Law To Address Them, Gabriel Smedes

Global Tides

This paper is a synthesis research article analyzing the legality of cyber operations within the international legal sphere. It works to define cyber operations and differentiate them from similar identifiers. The study looks to existing contributions to international law and explores how some existing some existing regulation is challenging to apply and it is difficult to implement new legislation. Highlighting the importance of legislation and regulations on cyber operations due to their increasing prevalence and danger.

Artificial Intelligence: An Impetus To Amend The Aba Model Code Of Judicial Conduct, Davis G. Yee

St. Mary's Journal on Legal Malpractice & Ethics

Notwithstanding the increasing prevalence of artificial intelligence or AI in the legal field, Chief Justice Roberts recently predicted that “human judges will be around for a while.” The reason is that at this time, AI cannot perform judicial mental functions as well as human judges can in deciding cases. Yet, instead of having AI replace human judges, some have explored whether AI can be used to assist human judges with their adjudicative and administrative responsibilities.

This Article focuses on a judge’s ethical obligations when encountering AI on both sides of the bench. That is, what do judicial ethics call for …

Standardizing Space Technologies As Admissible Evidence: Legal And Ethical Frameworks For U.S. Courts And The International Criminal Court, Tuana Yazici

University of Miami International and Comparative Law Review

This paper explores the increasing role of satellite and other space technologies — such as optical satellite imagery, radar, and artificial intelligence (AI) — in legal proceedings both in the U.S. and internationally. It examines relevant Supreme Court and appellate cases, as well as key international rulings, to assess how courts are addressing the legal challenges posed by surveillance technologies. These cases reveal the tension between advancing technology and existing privacy protections, highlighting the need for updated legal frameworks. The analysis also covers federal laws, including the Electronic Communications Privacy Act, alongside proposed legislation like the American Privacy Rights Act …

Digital Dollar: Privacy And Transparency Dilemma, Jiaying Jiang

UF Law Faculty Publications

Many have voiced concerns that the digital dollar, a digital form of central bank money, will facilitate government surveillance, thus depriving users of privacy. This article investigates critical technical designs proposed by leading think tanks, central banks, and scholars from interdisciplinary fields, reaching a surprising conclusion that contradicts popular belief: a digital dollar can offer better privacy protection than existing digital payment systems. The article argues that those expressing concerns have made two flawed assumptions: (1) that digital dollar data is fully transparent regarding personal information and transaction details and (2) that the government or Federal Reserve has unlimited access …