Computer Law Commons^™

A Comprehensive Empirical Study Of Data Privacy, Trust, And Consumer Autonomy, Jay P. Kesan, Carol M. Hayes, Masooda N. Bashir

Indiana Law Journal

Modern society is driven by data. Data storage is practically unlimited with today’s technology, and analytical tools make it easy to find patterns and make predictions in a way that is very useful for private businesses and governments. These uses of digital data can raise considerable privacy issues that are of great concern to consumers. In this Article, we present and analyze the results of an extensive survey that we conducted to explore what people know, what people do, and what people want when it comes to privacy online.

Our survey is the first comprehensive examination of the intersection of …

Need For Informed Consent In The Age Of Ubiquitous Human Testing, Caitlyn Kuhs

Loyola of Los Angeles Law Review

No abstract provided.

Protecting Personal Information: Achieving A Balance Between User Privacy And Behavioral Targeting, Patrick Myers

University of Michigan Journal of Law Reform

Websites and mobile applications provide immeasurable benefits to both users and companies. These services often collect vast amounts of personal information from the individuals that use them, including sensitive details such as Social Security numbers, credit card information, and physical location. Personal data collection and dissemination leave users vulnerable to various threats that arise from the invasion of their privacy, particularly because users are often ignorant of the existence or extent of these practices. Current privacy law does not provide users with adequate protection from the risks attendant to the collection and dissemination of their personal information. This Note advocates …

Fourth Amendment Time Machines (And What They Might Say About Police Body Cameras), Stephen E. Henderson

Faculty Articles

When it comes to criminal investigation, time travel is increasingly possible. Despite longstanding roots in traditional investigation, science is today providing something fundamentally different in the form of remarkably complete digital records. And those big data records not only store our past, but thanks to data mining they are in many circumstances eerily good at predicting our future. So, now that we stand on the threshold of investigatory time travel, how should the Fourth Amendment and legislation respond? How should we approach bulk government capture, such as by a solar-powered drone employing wide-area persistent stare technology? Is it meaningfully different …

The Road To Artificial Super-Intelligence: Has International Law A Role To Play?, J.-G. Castel, Matthew E. Castel

Canadian Journal of Law and Technology

Part I of this article deals with the road to artificial general super-intelligence.

Part II addresses the controls, if any, that should be exercised over the production and use of partially or fully autonomous machines of artificial intelligence before and after they become super-intelligent. More particularly, should there be legal and ethical limits to their use and to what extent should international law play a role in this connection?

Flying Robots And Privacy In Canada, Paul D.M. Holden

Canadian Journal of Law and Technology

Drones have been a hot topic in recent years particularly when used in war and in domestic police operations. Drones have also attracted attention because of highprofile plans to use them for package delivery, among other things. While the glamourous and future uses of drones catch media attention, drones are already being used in the private sector for more mundane purposes including surveying, infrastructure inspection and real estate sales promotion. While the privacy threats of military and police drones are widely discussed, privacy concerns of private drones have attracted much less consideration.

This paper looks at the privacy risks of …

Book Review: Jonathan Clough, Principles Of Cybercrime, 2nd Ed (Cambridge: Cambridge University Press, 2015), Christopher D. Ram

Canadian Journal of Law and Technology

The past decade has seen an enormous explosion of scholarship on the subject of cybercrime, as technologies and offenders pose new challenges and law enforcement, government and academic experts struggle to keep up. The new, second edition of Professor Jonathan Clough’s book occupies a fairly substantial, but specific niche in this increasingly diverse and complex landscape. Principles of Cybercrime contains only a cursory review of the history and criminology of cybercrime, it does not deal at all with IT security, investigative or enforcement matters, and discussion of cybercrime as a global issue is limited to brief discussions of the 2001 …

Minding The Gap: Why Or How Nova Scotia Should Enact A New Cyber-Safety Act - Case Comment On Crouch V. Snell, Jennifer Taylor

Canadian Journal of Law and Technology

Nova Scotia’s Cyber-safety Act was meant to fill a gap in the law. Where criminal charges and civil claims like defamation were unavailable or undesirable, the Act, it was hoped, would contain a substantive definition of cyberbullying, set out when it was actionable, and provide procedures for victims to obtain remedies. But the statute that was ultimately passed was too blunt a tool to address the problem, from both a substantive and a procedural perspective.

That helps explain why Justice McDougall of the Supreme Court of Nova Scotia struck down the entire statute as unconstitutional, in the recent case of …

Protecting The Privacy Of Canadians' Health Information In The Cloud, Adrian Thorogood, Howard Simkevitz, Mark Phillips, Edward S. Dove, Yann Joly

Canadian Journal of Law and Technology

This article presents results from a year-long research project reviewing health privacy issues in the cloud, funded by the Contributions Program of the Office of the Privacy Commissioner of Canada (OPC). Section I provides a brief primer on cloud computing and its applications in data-centric health research and health care. Section II reviews Canadian privacy and health privacy laws and how they apply to CSPs. Section III identifies privacy risks arising from the technological, organizational, and jurisdictional complexity of cloud computing. Section IV argues that Canadian health privacy laws fail to address difficulties custodians face in balancing responsibilities with CSPs, …

Standing Up For Their Data: Recognizing The True Nature Of Injuries In Data Breach Claims To Afford Plaintiffs Article Iii Standing, Andrew Braunstein

Journal of Law and Policy

Over the last several years, data breaches have become increasingly more common, due in no small part to the failures of organizations charged with storing and protecting personal data. Consumers whose data has fallen victim to these breaches are more often turning to federal courts in attempts to be made whole from the loss of their information, whether simple credit card information or, as breaches become more sophisticated, social security information, medical and financial records, and more. These consumers are often being turned away from the courthouse, however, due to a failure of many federal courts to find that the …

Electronic Devices At The Border: The Next Frontier Of Canadian Search And Seizure Law?, Robert Currie

Articles, Book Chapters, & Popular Press

Over the last several years the Supreme Court of Canada has developed its jurisprudence regarding the search and seizure of electronic devices, applying section 8 of the Canadian Charter of Rights and Freedoms in such a way as to assert and protect a significant amount of privacy in the devices and their data. Recent cases regarding the search of devices at Canada’s borders, however, do not reflect this case law. This is a situation made all the more complex by the generally attenuated expectation of privacy in the border context, and is worthy of inquiry. Using a pending border case …

Un Nouveau Code Pour Une Procédure Technologique: Mémento Pour Le Pr@Ticien, Antoine Guilman

Canadian Journal of Law and Technology

Table des matières

Introduction.................................................................................................. 18

I. La transmission technologique des actes de procédure ................................. 22

(a) Le dépôt technologique des actes de procédure ................................... 23

(i) Un régime légal inédit : les dispositions du NCPC...................... 23

(ii) Un régime réglementaire inexistant : l’exemple de la Cour fédérale ...................................................................................... 26

(b) La signification technologique des actes de procédure ......................... 28

(i) Le principe : la signification de main à main .............................. 29

(ii) L’exception : la signification technologique................................. 30

(c) La notification technologique des actes de procédure..........................35

(i) La notification par un moyen technologique .............................. 35

(ii) La notification par …

Les Photos Prises Par Les Téléphones Cellulaires Sont-Elles Assez « Originales » Pour Être Protégées Par La Loi Sur Le Droit D'Auteur?, René Pépin

Canadian Journal of Law and Technology

On considérait traditionnellement que l’originalité réside dans les choix faits par le photographe au niveau de la sensibilité du film choisi, de la vitesse de l’obturateur, de la mise au foyer, de la pose du sujet photographié , etc. Mais les caméras incorporées dans les téléphones cellulaires sont si perfectionnées que la prise de photo se fait de façon presque automatique. L’appareil fait seul la mise au foyer, le flash se déclenche au besoin, la vitesse d’obturation est optimale, le cadrage se fait presque seul, etc. C’est justement le grand avantage et le grand attrait de ces appareils. L’utilisateur n’a …

Is There A 'Right To Be Forgotten' In Canada's Personal Information Protection And Electronic Documents Act (Pipeda)?, Michael Rosenstock

Canadian Journal of Law and Technology

In this paper, I argue that PIPEDA could support a version of the right to be forgotten, subject to three important caveats. First, for search engines to meet the threshold applicability test under PIPEDA, their activities (i.e., crawling, indexing, organizing, etc.) must constitute the ‘‘collection, use or disclosure” of personal information. Ascribing such a role to search engines in information dissemination would likely require a court to distinguish the activities of search engines from hyperlinks on websites, which the Supreme Court in Crookes v. Newton determined did not involve control over content. Second, PIPEDA’s ‘‘all-or-nothing approach” means that if search …

Facebook’S Emotional Contagion Study And The Ethical Problem Of Co-Opted Identity In Mediated Environments Where Users Lack Control, Evan Selinger, Woodrow Hartzog

Faculty Scholarship

We argue a main but underappreciated reason why the Facebook emotional contagion experiment is ethically problematic is that it co-opted user data in a way that violated identity-based norms and exploited the vulnerability of those disclosing on social media who are unable to control how personal information is presented in this technologically mediated environment.

Implications For The Future Of Global Data Security And Privacy: The Territorial Application Of The Stored Communications Act And The Microsoft Case, Russell Hsiao

Catholic University Journal of Law and Technology

No abstract provided.

Taxonomy Of The Snowden Disclosures, Margaret Hu

Faculty Publications

This brief Essay offers a proposed taxonomy of the Snowden Disclosures. An informed discussion on the legality and constitutionality of the emerging cybersurveillance and mass dataveillance programs revealed by former NSA contractor Edward Snowden necessitates the furtherance of cybersurveillance aptitude. This Essay contends, therefore, that a detailed examination of the Snowden disclosures requires not just a careful inquiry into the legal and constitutional framework that guides the oversight of these programs. A close interrogation also requires a careful inquiry into the big data architecture that guides them. This inquiry includes examining the underlying theories of data science and the rationales …

Newsroom: Fcc's Sohn On Consumer Protection, Roger Williams University School Of Law

Life of the Law School (1993- )

No abstract provided.

Data Privacy Regulation In The Age Of Smartphones, Matthew Hettrich

Touro Law Review

No abstract provided.

Small Data Surveillance V. Big Data Cybersurveillance, Margaret Hu

Pepperdine Law Review

This Article highlights some of the critical distinctions between small data surveillance and big data cybersurveillance as methods of intelligence gathering. Specifically, in the intelligence context, it appears that “collect-it-all” tools in a big data world can now potentially facilitate the construction, by the intelligence community, of other individuals' digital avatars. The digital avatar can be understood as a virtual representation of our digital selves and may serve as a potential proxy for an actual person. This construction may be enabled through processes such as the data fusion of biometric and biographic data, or the digital data fusion of the …

Authorized Investigation: A Temperate Alternative To Cyber Insecurity, Casey M. Bruner

Seattle University Law Review

This Note aims to show that legal structures created to protect the Internet in its original form are completely insufficient to protect what the Internet has become. This antiquated legal framework is exacerbating the problem. The breadth of activity that the current law restricts severely limits the remedies that cyberattack victims can pursue, and it must be updated. While full hack-back may prove necessary in the long run, I argue for a more temperate initial response to the problem—I call this response “authorized investigation.” Specifically, the Computer Fraud and Abuse Act should be amended to allow victims access to their …

Trading Privacy For Angry Birds: A Call For Courts To Reevaluate Privacy Expectations In Modern Smartphones, Jeremy Andrew Ciarabellini

Seattle University Law Review

Of all the smartphone uses, the calling function is probably used the least. Rather, individuals more commonly use their smartphone for surfing the web, checking Facebook, and playing games. Highlighting the “smart” in smartphone, these phones often know more about their users’ daily activities than the users. Without requiring any sort of input, smartphones can tell the user how many steps they walk each day, when it is time to leave for work (also, of course, determining the traveling time with the most up-to-date traffic reports), and when an item recently ordered on Amazon will be delivered. Smartphone users may …

International Law Enforcement Access To User Data: A Survival Guide And Call For Action, Kate Westmoreland, Gail Kent

Canadian Journal of Law and Technology

Effectively accessing and using online evidence is a critical part of modern investigations and prosecutions, but also has significant implications for users’ privacy. The current system of international sharing of online data in criminal matters is a patchwork of domestic and international law that is slow, uncertain, and not well understood. This article provides an overview of the current system for foreign governments seeking user data from US-based Internet companies. After describing the way in which the system currently operates, it identifies problems with the system, and outlines the reform efforts that are beginning to emerge.

Possession Of "Extreme" Pornography: Where's The Harm?, Jonathan Clough

Canadian Journal of Law and Technology

For decades, the traditional Western liberal approach to obscene material has been that while the availability of such material may be restricted, individuals are free to possess it so long as they do not distribute to others. Prior to the advent of the Internet, traditional means of control were effective in limiting the availability of such material. However, free of traditional restrictions the Internet allows easy access to a vast array of pornographic material, some of which challenges the most liberal of societies including images of child abuse, sexual violence, bestiality, and necrophilia.

In 2008, the UK became one of …

Freedom Of Expression, Discrimination, And The Internet: Legislative Responses And Judicial Reactions, Talia Joundi

Canadian Journal of Law and Technology

In Part I of this article, I argue that cyber racism is inextricably linked with systemic discrimination. The definition of systemic discrimination relied on was first provided by Judge Abella in the Report of the Royal Commission on Equality in Employment (Abella Report), which states that systemic discrimination points to practices or attitudes that can result in inequality of opportunity for individuals or groups. The Supreme Court of Canada has since adopted this definition, and in some instances, has acknowledged that systemic problems require systemic remedies. The purpose of this discussion is to demonstrate how situating cyber racism within the …

Leaving Dumb Phones Behind: A Commentary On The Warrantless Searches Of Smartphone Data Granted In R. V. Fearon, Jordan Fine

Canadian Journal of Law and Technology

Given the incredible rate of smartphone technological evolution, is it about time the Supreme Court of Canada devised a special test to give law enforcement agents significantly more power to search through phone data without a warrant upon arrest of a suspect? In R. v. Fearon, the majority did just that. But this article argues the opposite is true: the increasing potential for immense privacy infringements when police search powerful and constantly evolving technological devices demands a greater limitation to police powers.

In recent cases, the Supreme Court has agreed with the position that limitations are needed concerning computers. Additionally, …

"Three Parent Babies": Techniques Explained, Objections Examined, Rebecca Carr

Canadian Journal of Law and Technology

The UK Parliament has approved regulations, which come into force in October 2015, that permit the use of new treatment techniques to prevent the transmission of serious mitochondrial diseases from women to their children. The introduction of these techniques—which are not currently carried out in any country in the world—will fly in the face of the opposition that has been raised since discussions to permit clinical applications of the techniques first arose. After outlining some background to the techniques, this article briefly examines three of the objections that have been made against them: that the safety and effectiveness of the …

Data Breaches And Privacy Law: Lawyers’ Challenges In Handling Personal Information, Charlotte Duc-Bragues

Cornell Law School J.D. Student Research Papers

Sharing personal information with a lawyer potentially represents the greatest source of vulnerability for an individual. Since the first major security breach in 2005, law firms have been pressed both by public authorities and clients to take action in order to protect confidential information from potential harmful breaches.

This paper seeks to provide an overview of the challenges faced by lawyers in handling personal information with regard to potential security breaches. The aim is to analyze this issue through the focal of privacy law; statistics on security breaches and tools to prevent this phenomenon, extensively studied in class, are given …

Small Data Surveillance V. Big Data Cybersurveillance, Margaret Hu

Faculty Publications

This Article highlights some of the critical distinctions between small data surveillance and big data cybersurveillance as methods of intelligence gathering. Specifically, in the intelligence context, it appears that "collect-it-all" tools in a big data world can now potentially facilitate the construction, by the intelligence community, of other individuals' digital avatars. The digital avatar can be understood as a virtual representation of our digital selves and may serve as a potential proxy for an actual person. This construction may be enabled through processes such as the data fusion of biometric and biographic data, or the digital data fusion of the …

Spying Inc., Danielle Keats Citron

Faculty Scholarship

The latest spying craze is the “stalking app.” Once installed on someone’s cell phone, the stalking app provides continuous access to the person’s calls, texts, snap chats, photos, calendar updates, and movements. Domestic abusers and stalkers frequently turn to stalking apps because they are undetectable even to sophisticated phone owners.

Business is booming for stalking app providers, even though their entire enterprise is arguably illegal. Federal and state wiretapping laws ban the manufacture, sale, or advertisement of devices knowing their design makes them primarily useful for the surreptitious interception of electronic communications. But those laws are rarely, if ever, …