Computer Law Commons^™

Global Supply Chain Resilience In Emerging Technologies: A Case Study Of Bitcoin Mining, Kishanthi Parella, Carla L. Reyes

Scholarly Articles

The United States has put into motion bold plans in critical and emerging technologies to bolster its national and economic security.  For example, the federal government created a national bitcoin strategic reserve and a stockpile of other cryptocurrency; while several states have committed to or are considering similar goals.  However, the security of these reserves is dependent on two types of supply chains within the Bitcoin mining industry: analogue supply chains, relating to the physical components needed for Bitcoin mining, and data supply chains, relating to the complex and layered logistical network of actors that create input into …

Child Exploitation Through Online Sharing: “Sharenting” And The Role Of The Pediatric Provider, Stacey Steinberg, Cameron Rosenthal

UF Law Faculty Publications

The alarming trend of “sharenting” highlights the need for increased vigilance in protecting children from online exploitation. When parents share intimate details about children’s lives on social media, they may inadvertently expose them to danger. Pediatricians are equipped to safeguard children from parental abuse and neglect; however, they are less prepared to protect children from harm caused by parents online.

When parents exploit children on social media, pediatricians face challenges in protecting patients while also following laws that maintain parental autonomy. Using a child welfare framework, this article defines these online harms and proposes strategies for protecting children from exploitative …

State Ai Therapy Regulations – Analyzing The Illinois Wellness And Oversight For Psychological Resources Act, Natalie Browne

SMU Science and Technology Law Review

According to the Harvard Business Review, the top use case for generative artificial intelligence (AI) in 2025 was therapy and companionship. Accordingly, numerous “therapy-specific” AI tools have hit the market in recent years, vying to fill this growing need. However, individuals are also turning to generic large language models (LLMs), such as ChatGPT, to express their deepest anxieties, seek reassurance, and gather advice. While tech optimists assert that AI therapy tools will extend mental health treatment in care deserts, attention-grabbing headlines about such use cases have shattered communities and shocked legislatures. To address growing concerns about AI therapy, Illinois enacted …

Beyond Hipaa: The Ftc’S Expanding Role In Digital Health Privacy Enforcement, Sandhya Srinivasa

SMU Science and Technology Law Review

Consumer digital health platforms have become an increasingly prominent feature of modern health care, collecting and storing sensitive health information directly from users. Yet most of these applications operate outside the scope of the Health Insurance Portability and Accountability Act (HIPAA), creating a significant regulatory gap in the protection of personal health data. This case note examines how the Federal Trade Commission (FTC) has stepped into that gap by leveraging Section 5 of the FTC Act and the Health Breach Notification Rule (HBNR) to police privacy and data security practices among non-HIPAA-covered digital health platforms. Focusing on three landmark enforcement …

Body Of Law: When Content Moderation Becomes Gender Oppression And Triggers Legal Consequences, Sarah E. Bahrenburg

Journal of Race, Gender, and Ethnicity

For as long as the Internet has existed, it has been used as a tool for good and as a tool for malice. However, there is a discrepancy between punishment for those maliciously invading individuals’ personal space and those posting consensual images of themselves for art or entertainment purposes (not to mention for work). Over the years, while attempting to create safe spaces for people to express themselves, the Internet has also created barriers to individuals doing just that. The Internet and the laws surrounding exposure therein have become increasingly misogynistic and anti-women’s sexual freedom. The laws encompassing safety on …

From Privacy To The Data Economy: The Ftc’S Reframing Of Its Regulatory Priorities, Maria P. Angel

Scholarly Works

This Article argues that the Federal Trade Commission’s turn to “commercial surveillance” reflects a strategic shift away from traditional privacy frameworks toward addressing structural power dynamics in the data economy. Drawing on an analysis of 112 FTC documents, it identifies three core commitments: tackling systemic harms, adopting a political economy lens, and constraining corporate power. The Article contends that this reframing is both necessary in the AI age and should influence the future of privacy regulation in the United States, even amid efforts to limit the FTC’s authority.

Hacking With Uncle Sam: Imagining A Public-Private Partnership For Active Cyber Defense, Jonathan Coleman

Catholic University Journal of Law and Technology

Federal law makes no distinction between "good" and "bad" hackers—the Computer Fraud and Abuse Act criminalizes hacking by a private citizen in any form. While an anti-hacking statute is necessary to deter and punish cybercrime, the current law prohibits private entities from "hacking back" or, more precisely, from engaging in active defensive measures in response to a cyberattack. If these measures were legalized, they could allow private entities to assist law enforcement and reduce the financial and reputational costs of a cyber incident. Absent a change in the law, private entities are dependent on law enforcement to provide active cyber …

Judging Art: Copyright, Creativity, And The Meaning Of Art In The Eyes Of The Law, Scott J. Sholder

Marquette Intellectual Property & Innovation Law Review

This Article examines how copyright law defines creativity and authorship in an era of rapidly evolving artistic expression, with particular emphasis on generative artificial intelligence. Tracing the development of U.S. copyright law from its constitutional foundations through modern case law, the author explores the legal standards governing originality, fixation, human authorship, and the idea-expression dichotomy. The Article analyzes how these principles have been applied to both traditional and emerging forms of art, including conceptual, performance, appropriation, digital, and AI-generated works. It also examines recent guidance from the U.S. Copyright Office and evolving judicial decisions addressing the copyrightability of AI-assisted and …

Caught In The Web: The Resolution Of The Internet Service Provider Contributory Copyright Infringement Split, Olivia F. Johnson

Cybaris®

No abstract provided.

Clawbacks As Ransomware Deterrence, Samantha Blond

Oklahoma Law Review

No abstract provided.

The Law And Ai As An “Apex Collaborator”: Legal Frameworks For Optimized Cooperation, David S. Filippi, Bill Tomlinson, Andrew W. Torrance

FIU Law Review

Law fundamentally exists to enable human cooperation, providing frameworks for everything from basic contracts to complex international agreements. As artificial intelligence systems grow more sophisticated, they may enable new ways that collaborative activity can occur. We posit the possibility of a new kind of AI entity: the “Apex Collaborator,” a computational system with capabilities for cooperation and partnership that are superior, in at least some ways, to those of humans. Just as apex predators shape the ecosystems in which they live through predation, Apex Collaborators would shape human-AI networks through their ability to enhance peaceful coexistence, collective problem-solving, and shared …

Owning Data: Semantic Control As Inaccess To Information, Zvikomborero Chadambuka

FIU Law Review

This Article discusses the impacts of the introduction of a data ownership scheme on access to information. It does so with reference to the distinction between data, defined as some representation of information by a specific medium (the syntactic level), and the information itself (the semantic level). With respect to data, it then looks at the difference between standard property rights and intellectual property (IP) rights, similarly assessing impacts on access to information. Private control at the semantic level is bad policy as it effects particularly serious limitations, relative to private control at the syntactic level, on the availability of …

Digital Dialectic: Why Every “Ai-Generated” Work Has A Human Author, Lea Bishop

FIU Law Review

Are ChatGPT and Midjourney tools or creators? Ownership of billions of AI-assisted creative outputs hangs in the balance. Copyright scholars have long debated whether an autonomous artificial intelligence could qualify as an author, but this remains a hypothetical question. Despite widespread application of the term “AI” to software products of the 2020s, autonomously creative artificial intelligence still does not exist. Today’s commercial AI products—such as ChatGPT, Midjourney, Dall-E, Copilot, Gemini, Claude, Suno, Perplexity, and Lumo—are simply the newest generation of computer software. They do not qualify as “artificial intelligence” in either the scientific or science fiction senses. They are mere …

Blood Diamonds Of The Digital Age: The Need For Multi-Perspective Legislation On Cryptocurrency, Peter Derdzinski

Marquette Intellectual Property & Innovation Law Review

This comment examines how cryptocurrency is used in illicit cross-border transactions before examining some of the means currently employed to combat this criminal activity. Through analysis of the European Union’s Markets in Crypto-Assets (MiCA) regulations, this Comment proposes a multi-perspective approach for new legislation in the United States beyond the GENIUS Act of 2025. Specifically, this Comment argues that any new legislation needs to approach cryptocurrency as both a medium of exchange and as an investment vehicle or a store of value. Such legislation is necessary to create a trellis for cryptocurrency growth and to provide an organized approach for …

More Than Bad Neighbors: Data Centers And Minnesota's Newest Attempts To Regulate Them, Daria Mcgucken

Mitchell Hamline Law Journal of Public Policy and Practice

No abstract provided.

Af-Xray: Visual Explanation And Resolution Of Ambiguity In Legal Argumentation Frameworks, Yilin Xia, Heng Zheng, Shaun Bowers, Bertram Ludäscher

Computer Science Faculty Scholarship

Argumentation frameworks (AFs) provide formal approaches for legal reasoning, but identifying sources of ambiguity and explaining argument acceptance remains challenging for non-experts. We present AF-XRAY, an open-source toolkit for exploring, analyzing, and visualizing abstract AFs in legal reasoning. AF-XRAY introduces: (i) layered visualizations based on game-theoretic argument length revealing well-founded derivation structures; (ii) classification of attack edges by semantic roles (primary, secondary, blunders); (iii) overlay visualizations of alternative 2-valued solutions on ambiguous 3-valued grounded semantics; and (iv) identification of critical attack sets whose suspension resolves undecided arguments. Through systematic generation of critical attack sets, AF-XRAY transforms ambiguous scenarios into grounded …

Information Law Pluralism, Hannah Bloch-Wehba

Faculty Scholarship

Information-intensive activities are reshaping political, social, and economic institutions. As they respond to these shifts, legislators and regulators are embracing information as a regulatory device for tech. Far from limiting themselves to public disclosure, consumer notice, and other traditional mechanisms of fostering transparency and information flows, however, legislators are using other, more nuanced tools to incentivize regulated entities to obtain, generate, and share information.

This Article maps the landscape of the emerging information-based regimes for regulating tech and assesses their conceptual and practical implications. It canvasses an extensive set of recently enacted laws regulating the information economy and shows that, …

Corporate Cybersecurity Governance: Director Liability Under Europe’S Nis2 Directive And The Emerging Fiduciary Duty Of Proactive Cybersecurity Oversight, Stacey B. Barrack

American University Business Law Review

This Comment examines the implications of the European Union’s Network and Information Security 2 Directive (“NIS2”) on corporate cybersecurity governance, with a particular focus on the fiduciary duties of directors in multinational corporations operating in the United States. The NIS2 Directive, adopted in 2023 and currently being transposed into national law by EU member states, mandates that boards of directors must directly approve and oversee—and can be liable for—the cybersecurity risk management measures taken by their companies. 

This Comment delves into the intersection of NIS2 with Delaware corporate law and examines how NIS2 influences the fiduciary duty of oversight for …

A Proposed Tort To Address The Negligent Enablement Of Cloud Data Breaches, Michael L. Rustad

American University Business Law Review

[INTRODUCTION] The term “cloud computing” means the remote storage of software applications, tools, and data accessed through the internet. Cloud customers enter into subscription agreements with providers who give 24/7, on-demand, as-needed access to software, storage, and networking services owned and managed by providers through a web browser. “Many businesses are transitioning to the cloud for data storage, remote work, and collaboration.” Cloud providers operate their software as a software-as-a-service (“SaaS”) model, under which customers pay a subscription fee to access the software. Netflix and Amazon Prime Video are examples of subscription services that deliver television programs and videos through …

Preserving Platform Innovation With A Narrow Exception: Section 230(C)(1) Immunity For Algorithmic Recommendations, John "Jack" Di Masi

American University Business Law Review

This Comment examines Section 230(c)(1)’s immunity for online platforms that use machine-learning algorithms to recommend third party content and proposes a narrow exception for truly “bad-actor” cases. It reviews Section 230’s text, as well as its early cases, showing that Congress intended broad protection for editorial functions such as content organization. It then traces how recommendation algorithms evolved and how courts treat algorithmic sorting as a neutral tool. This Comment addresses conflicting interpretations and defends broad immunity for routine curation. This Comment argues that immunity should be stripped only after a balancing test under a three-factor “bad-actor” framework—one that evaluates …

Blame It On The Algorithm (But Sue Them Both): Joint Enterprise And Agency In Ai-Driven Hiring Discrimination, Khushi Palan

American University Business Law Review

The proliferation of artificial intelligence (AI) in hiring processes has created a significant accountability gap in employment discrimination law. While federal statutes like Title VII of the Civil Rights Act, the Americans with Disabilities Act, and the Age Discrimination in Employment Act focus on finding liability for traditional employers, they fail to adequately address the unique role of third-party AI vendors whose algorithms often drive discriminatory outcomes. This Comment examines the emerging legal landscape through the lens of Mobley v. Workday, where the District Court for the Northern District of California recognized that AI vendors can function as “agents” of …

Against Ai Half Measures, Woodrow Hartzog, Neil Richards, Ryan Durrie, Jordan Francis

Faculty Scholarship

So far, U.S. consumer protection policy for artificial intelligence (AI) accountability has largely consisted of industry-led approaches such as encouraging transparency, mitigating bias, promoting principles of ethics, and empowering people. These approaches are vital, but they are only half measures. To bring AI within the rule of law, lawmakers must start drawing substantive lines.

In this Article, we identify four AI regulatory approaches to consumer, data, and democratic harms as half measures. First, transparency does not produce accountability on its own. Second, while mitigating bias in AI systems is critical, even unbiased systems are a threat to the vulnerable. Third, …

Obscurity And The Fallacy Of No Privacy In Public Information, Woodrow Hartzog

Faculty Scholarship

The main thesis of this chapter is that because there are so many different possible interpretations of ‘public information’, the concept cannot be used to justify data practices and surveillance without first articulating a more precise meaning that recognises what is at stake. By disposing of the myth that there is an objective and dispassionate concept of public information, judges and lawmakers can clear the way for information rules based on overt value choices. In short, if the concept of ‘public’ is going to shape people’s social and legal obligations, its meaning and neutrality should not be assumed.

My argument …

Influencing The Meteoric Rise Of Ai: Centering Ethics, Law, And Society In Urgent Policy Reform, Erin L. Shah Mspm, Heath A. Clark Mba, Xarlene B. Choi Bs, Garrett K. Chan Phd

The Guardianship Journal

Artificial intelligence (AI) represents a transformative technological advancement with the potential to yield extraordinary societal benefits while simultaneously introducing significant potential harms to individuals, governments, and society. The adoption of AI has outpaced the ability of society to collectively and cohesively respond through the implementation of adequate regulatory guardrails. While AI presents novel benefits and challenges, the broader dynamic of responding to new, uncharted technologies has historical precedence. The article's methodological approach employed empirical research using law articles and policies. As such, the article explores the benefits, challenges, and actual or potential harms in three business sectors: business and finance, …

Greenhat’S Greenlight To The Cftc: The Case For A Jurisdictional Shift Of Financial Transmission Rights From The Federal Energy Regulatory Commission To The Commodity Futures Trading Commission, Timothy K. Shaw Ii

DePaul Business & Commercial Law Journal

Regional Transmission Organizations and Independent System Operators are a relatively new platform to buy and sell wholesale electricity and transmission service of that electricity. These groundbreaking organizations have been around since 1996 after the Federal Energy Regulatory Commission (“FERC”) issued Order 888. FERC regulates the physical electricity wholesale sale and transmission service market managed by a Regional Transmission Organization (“RTO”) or Independent System Operator (“ISO”),through its Federal Power Act mandate. Many RTOs and ISOs offer a product called a Financial Transmission Right (“FTR”). Traditionally, FTRs assist the holder by providing price certainty, or a hedge, in the capacity market. This …

Choosing The Best Entity For Investments Trading After Understanding The Tax Limitations And Restrictions, Ray A. Knight, Joseph Lakatos

DePaul Business & Commercial Law Journal

The trading of various securities is subject to market rules. However, when securities trading is completed within a business entity, the entity is subject to tax limitations and restrictions. The tax benefits cannot be the dominant purpose for the entity structure; economic substance including profit motive and business purpose for each transaction must be able to be shown.

The trading of investment securities must be housed in the right entity to gain the best economic results as well as to minimize the tax burden. The entity selection process must first consider the characteristics and nature of the securities (e.g., currencies, …

Volume 23 - Front Matter

DePaul Business & Commercial Law Journal

No abstract provided.

The Role Of Artificial Intelligence In Reducing Internet Crimes Against Children, Malyssa Shaw

Student Scholar Symposium Abstracts and Posters

When generative artificial intelligence (AI) first surfaced and broke into the public sphere, my immediate concern was in its development, implementation, and harmful applications. I was not surprised when deepfake technology rapidly advanced alongside these new developments and impacted women and children worldwide. Disproportionately, they have been made victims of intimate media forgery as early as the 1990s, with an unprecedented uptick in recent years as a direct result of these developments. In response, I wrote "Deepfake, Real Harm: Protecting Children in the Age of AI", analyzing data specifically regarding child sexual abuse material (CSAM) created with artificial intelligence while …

Legal Considerations On Predictive Policing Based On Italian ‘Algorithmic Administration’ Principles, Stefano Rossa

Yearbook of Antitrust and Regulatory Studies

In Beck’s current risk society, the State is faced with a dilemma. To fail before the risk but to keep the sphere of citizens’ rights intact; or not to fail but to restrict fundamental rights? This payoff turns out to be the main issue that juridical reflections on the use of predictive technology tools in the public sector must consider. Policing is an administrative function that is mainly composed of acts of a preventive nature. By using ICT, it is possible to employ AI systems with a very high rate of certainty to ‘predict’ future crime scene. But is it …

The Legal And Ethical Impacts Of Cybersecurity Practices On Privacy And Digital Rights, Ibrahim Fejzulla

Cybersecurity Undergraduate Research Showcase

The General Data Protection Regulation (GDPR) and the Health Insurance Portability and Accountability Act (HIPAA) are meant to secure our data, but sometimes it feels as if organizations don’t do enough to secure and protect our data and privacy. Even some of the things organizations may do to improve security may sound counterintuitive like hiring ethical hackers or penetration testers. This research looks at the effects both, the GDPR and HIPAA, have had on cybersecurity practices and policies of organizations. This paper aims to analyze the effects of both the GDPR and HIPAA, answer whether ethical hacking is justified, analyze …