Consumer Protection Law Commons^™

Forever Is Too Long: Rethinking Consent And Genetic Privacy Under The Fourth Amendment, Abigail Oberbeck

University of Cincinnati Law Review

No abstract provided.

Data Rights For Workers, Pauline Kim, Rachel Leavitt

Scholarship@WashULaw

Workers are subject to immense amounts of data collection on the job, and the algorithmic management tools built with that data can produce negative effects, including deskilling jobs, unstable work hours, reduced wages, and dangerous and degrading working conditions. Workers thus have significant interests how their data are collected and used, and yet they have been excluded from nearly all the recently enacted or proposed data protection laws. Their exclusion stems from data protection’s roots in privacy law and theory, which primarily focused on consumers as data subjects. Current data protection laws, even if expanded to cover workers, would provide …

The Gamification Of Banking, Colleen Baker, Christopher K. Odinet

Faculty Scholarship

Gamification is coming to banking. This phenomenon is already gain-ing ground in advertising, healthcare, manufacturing, and, more recently, with the GameStop and AMC meme stock saga in securities trading. The idea behind gamification is to make transactions seem fun, playful, and even casino-like in order to elicit habit-forming, addictive-like effects with consumers. This Article argues that the rise of financial technology (“fintech”) firms and their ever-growing business relationships with incumbent financial institutions has created the necessary conditions for gamification to take hold in the banking sector. In order to explore this observation, we undertake a study of current examples of …

Keynote Address: The Movement To Protect Kids From Addictive Technologies, Gaia Bernstein

Seattle University Law Review

In this keynote address, I describe my personal journey starting with a school outreach program I created in 2017 to address technology overuse among kids. While I initially advocated for self-help methods, I grew to recognize that the tech industry bore responsibility. This realization led me to write Unwired: Gaining Control over Addictive Technologies, which focused on collective action to pressure the tech industry to redesign its addictive products.

I then describe the movement to control addictive technologies and protect kids, which has gained momentum since the end of the pandemic. This movement combines grassroots parent activism with legal-political action. …

Responding To Digital Addiction, Ned Snow

Seattle University Law Review

In Unwired: Gaining Control over Addictive Technologies, Professor Gaia Bernstein calls our attention to the growing problem of digital addiction. Digital addiction may sound like something out of a science-fiction novel or something that does not raise the same sort of real-life practical concerns as are present in a physical health crisis or an economic decline. But as Bernstein presents the evidence, we learn that the consequences of digital addiction can be just as harmful as a serious disease or a financial depression. Cognitive development disorders, anxiety, emotional depression, social isolation, and other mental health ills can be debilitating—as much …

Target(Ed) Advertising, Derek E. Bambauer

UF Law Faculty Publications

Targeted advertising—using data about consumers to customize the ads they receive—is deeply controversial. It also creates a regulatory quandary. Targeted ads generate more money than untargeted ones for apps and online platforms. Apps and platforms depend on this revenue stream to offer free services to users, if not for their financial viability altogether. However, targeted advertising also generates significant privacy risks and consumer resentment. Despite sustained attention to this issue, neither legal scholars nor policymakers have crafted interventions that address both concerns, and existing regulatory regimes for targeted advertising have critical gaps.

This Article makes three key contributions to the …

The Law Of Unintended Consequences: Examining West Virginia's Data Privacy Legislation And What Could Have Been, Jena Martin, Erin Kelley

West Virginia Law Review Online

No abstract provided.

Internet Search Engines’ Privacy Violations And The Lack Of Federal Regulation To Protect Consumers Rights, Elsa M. G. Rodriguez Ogando

Dickinson Law Review (2017-Present)

The United States’ current legal framework regarding internet search engines is disadvantageous to consumers. Federal privacy laws (although not encompassing search engines) grant businesses a strong legal basis in privacy claims and alibies for arbitrary behavior; these laws favor businesses over consumers. Moreover, state privacy laws empower nonspecific agencies to oversee privacy matters and enforce consumers’ rights. Thus, the U.S. privacy legal framework is in need of a new federal law that establishes consumers’ rights, as well as a federal agency dedicated solely to privacy matters. This Article proposes a federal law recommendation based on the standards of the California …

The Outer Limits Of Digital Privacy Protections: A Review Of The Privacy Fallacy, Michael Conklin

Dickinson Law Review (2017-Present)

No abstract provided.

The President’S Authority Over Cross-Border Data Flows, Anupam Chander, Paul M. Schwartz

Georgetown Law Faculty Publications and Other Works

This Article reveals a surprising expansion of presidential authority to control goods and services available in the United States because of the information flows that they entail. Such authority is grounded in laws focused on protecting national security, here with respect to foreign surveillance and propaganda. But broad executive powers over our information infrastructure raises significant concerns with respect to core American values of free expression and due process. Worries about unfettered foreign access to data should be coupled with worries about unfettered executive control over our information services and technologies.

Authoritarian Privacy, Mark Jia

Georgetown Law Faculty Publications and Other Works

Privacy laws are traditionally associated with democracy. Yet autocracies increasingly have them. Why do governments that repress their citizens also protect their privacy? This Article answers this question through a study of China. China is a leading autocracy and the architect of a massive surveillance state. But China is also a major player in data protection, having enacted and enforced a number of laws on information privacy. To explain how this came to be, the Article first turns to several top-down objectives often said to motivate China’s privacy laws: advancing its digital economy, expanding its global influence, and protecting its …

“Can I Have It Non-Personalised?” An Empirical Investigation Of Consumer Willingness To Share Data For Personalized Services And Ads, Monika Leszczynska, Daria Baltag

Faculty Scholarship

European regulators, courts, and scholars are currently debating the legality of data processing for personalization purposes. Should businesses require separate consent for processing user data for personalized advertising, especially when offering free services reliant on such ads for revenue? Or is general consent for the contract enough, given personalized advertising’s role in fulfilling contractual obligations? This study investigates whether these legal distinctions reflect differences in people’s willingness to share data with businesses for personalization. Are consumers less willing to share their data for personalized advertising than for personalized services that they clearly contracted for? Does that change if the service …

Wearable Ai, Bystander Notice, And The Question Of Privacy Frictions, Zahra Takhshid

Sturm College of Law: Faculty Scholarship

With the rapid advancement of Artificial Intelligence (“AI”) technology and the widespread availability of large language models (“LLMs”), wearable AI devices and designs for new hardware have surged like never before. While wearable AI was traditionally marketed for health and fitness purposes, many of the emerging products are multifunctional. These features can jeopardize the privacy of bystanders in addition to the consumers. Product designers are thus facing a dilemma: ensuring third-party privacy or guaranteeing convenience and a user-friendly design. This Article argues for mandating “privacy frictions” to function as both bystander notice and consent for wearable AI devices with audiovisual …

How To Get The Property Out Of Privacy Law, Jane R. Bambauer

UF Law Faculty Publications

For the last ten years, American rhetoric and state lawmaking has attempted to provide consumers with greater and stickier property interest in their personal information. But the impracticalities of the sticky property model are becoming evident, and will be impossible to ignore as AI becomes more prevalent and useful. This Article critiques the property framework in privacy law, and explains how a risk-based approach can be modernized and implemented instead. An enduring system of privacy laws will manage risks rather than bestowing rights to control and delete information. To do this, data practices should be categorized into safe harbor practices …

Data In Distress: Effectuating State Data Privacy Laws During Bankruptcy, Cameron Love

Emory Law Journal

In 2000, an online toy retailer, Toysmart.com, attempted to liquidate consumer data to pay creditors in its bankruptcy case. The attempted sale drew objections from the Federal Trade Commission and forty-seven state attorneys general. Five years later, Congress attempted to resolve privacy concerns in bankruptcy, amending the Bankruptcy Code to provide clear procedures for the liquidation of “personally identifiable information.” Recently, scholars have criticized these amendments, characterizing them as “limited,” “outdated,” and “privacy theater.” This Comment adds to these criticisms, arguing the amendments’ failure to mandate consideration of relevant nonbankruptcy law puts these permissive sales procedures on a collision course …

Against Engagement, Neil M. Richards, Woodrow Hartzog

Scholarship@WashULaw

In this Article, we focus on a key dimension of commercial surveillance by data-intensive digital platforms that is too often treated as a supporting cast member instead of a star of the show: the concept of engagement. Engagement is, simply put, a measure of time, attention, and other interactions with a service. The economic logic of engagement is simple: more engagement equals more ads watched equals more revenue. Engagement is a lucrative digital business model, but it is problematic in several ways that lurk beneath the happy sloganeering of a “free” internet.

Our goal in this Article is to isolate …

Measuring Compliance With The California Consumer Privacy Act Over Space And Time, Jens Frankenreiter, Van Tran, Aarushi Mehrotra, Marshini Chetty, Nick Feamster, Lior Strahilevitz

Scholarship@WashULaw

The widespread sharing of consumers personal information with third parties raises significant privacy concerns. The California Consumer Privacy Act (CCPA) mandates that online businesses offer consumers the option to opt out of the sale and sharing of personal information. Our study automatically tracks the presence of the opt-out link longitudinally across multiple states after the California Privacy Rights Act (CPRA) went into effect. We categorize websites based on whether they are subject to CCPA and investigate cases of potential non-compliance. We find a number of websites that implement the opt-out link early and across all examined states but also find …

Children's Digital Privacy And The Case Against Parental Consent, Zahra Takhshid

Sturm College of Law: Faculty Scholarship

Children’s engagement with the internet has exploded. From education to social media, companies have offered products and services that --far from being mere distractions for children -- have increasingly become necessities. This necessity is most keenly felt in the EdTech world. As companies rely on the verifiable parental consent required by the Children’s Online Privacy Protection Act (“COPPA”) to collect and use minors’ data, reviewing boilerplate waivers of liability and consent forms for children’s online activities have thus become part of parenting. This article argues that under the common law tradition of protecting the best interest of the child, when …

Inadequate Privacy: The Necessity Of Hipaa Reform In A Post-Dobbs World, Katherine Robertson

Seattle University Law Review

Part I of this Comment will provide an overview of HIPAA and the legal impacts of Dobbs. Part II will discuss the anticipatory response to the impacts of Dobbs on PHI by addressing the response from (1) the states, (2) the Biden Administration, and (3) the medical field. Part III will discuss the loopholes that exist in HIPAA and further address the potential impacts on individuals and the medical field if reform does not occur. Finally, Part IV will argue that the reform of HIPAA is the best avenue for protecting PHI related to reproductive healthcare.

Hired By A Machine: Can A New York City Law Enforce Algorithmic Fairness In Hiring Practices?, Lindsey Fuchs

Fordham Journal of Corporate & Financial Law

Workplace antidiscrimination laws must adapt to address today’s technological realities. If left underregulated, the rapidly expanding role of Artificial Intelligence (“AI”) in hiring practices has the danger of creating new, more obscure modes of discrimination. Companies use these tools to reduce the duration and costs of hiring and potentially attract a larger pool of qualified applicants for their open positions. But how can we guarantee that these hiring tools yield fair outcomes when deployed? These issues are just starting to be addressed at the federal, state, and city levels. This Note tackles whether a new city law can be improved …

A Concrete Proposal For Data Loyalty, Neil M. Richards, Woodrow Hartzog, Jordan Francis

Scholarship@WashULaw

Congress and state legislators are finally experimenting with new privacy frameworks, rights, and duties to move past the thoroughly critiqued “notice and choice” model for data privacy. While many new privacy proposals seek a more fortified version of the fair information practices, some legislators have placed a duty of data loyalty at the heart of their proposed privacy bills. This is important because a duty of data loyalty has the potential to anchor American privacy law in a way analogous to how the European Union approach is grounded in fundamental rights of privacy and data protection.

Unfortunately, there remains some …

Regulating Social Media In The Global South, Zahra Takhshid

Sturm College of Law: Faculty Scholarship

In recent years, the disinformation crisis has made regulating social media platforms a necessity. The consequences of disinformation campaigns are not only limited to election interferences or political debates; they have also included fatal consequences. In response, however, scholars in the United States have generally focused on regulating social media companies in the United States, without paying much attention to these companies’ global impact, particularly in the Global South. Lost in the quest to fight disinformation is addressing the social media companies’ neglect of consumer rights in the Global South.

Countries in the Global North, such as the United States, …

Passcodes, Protection, And Legal Practicality: The Necessity Of A Digital Fifth Amendment, Ethan Swierczewski

Catholic University Journal of Law and Technology

No abstract provided.

The Rise Of 5g Technology: How Internet Privacy And Protection Of Personal Data Is A Must In An Evolving Digital Landscape, Justin Rabine

Catholic University Journal of Law and Technology

No abstract provided.

Illusory Privacy, Thomas Haley

Indiana Law Journal

For decades, regulators, consumer advocates, and privacy theorists have grappled with one of privacy’s most important questions: how to protect private information that consumers unwittingly give away with the click of an “I accept” button. Reform efforts remain mired in a morass of text, focusing on the increasing volume and complexity of firms’ terms of service and privacy policies. This Article moves beyond such existing approaches. By analyzing terms of service and privacy policies from hundreds of top websites—which this Article calls “platform terms”—this Article demonstrates that the prevailing “notice and consent” paradigm of privacy regulation cannot provide meaningful protection. …

The Surprising Virtues Of Data Loyalty, Neil M. Richards, Woodrow Hartzog

Scholarship@WashULaw

Lawmakers in the United States and Europe are seriously considering imposing duties of data loyalty that implement ideas from privacy law scholarship, but critics claim such duties are unnecessary, unworkable, overly individualistic, and indeterminately vague. This paper takes those criticisms seriously, and its analysis of them reveals that duties of data loyalty have surprising virtues. Loyalty, it turns out, can support collective well-being by embracing privacy’s relational turn; it can be a powerful state of mind for reenergizing privacy reform; it prioritizes human values rather than potentially empty formalism; and it offers solutions that are flexible and clear rather than …

Personal Data Privacy And Protective Federal Legislation: An Exploration Of Constituent Position On The Need For Legislation To Control Data Reliant Organizations Collecting And Monetizing Internet-Obtained Personal Data, Giovanni De Meo

Dissertations

In the past twenty years, the business of online personal data collection has grown at the same rapid pace as the internet itself, fostering a multibillion-dollar personal data collection and commercialization industry. Unlike many other large industries, there has been no major federal legislation enacted to monitor or control the activities of organizations dealing in this flourishing industry. The combination of these factors together with the lack of prior research encouraged this research designed to understand how much voters know about this topic and whether there is interest in seeing legislation enacted to protect individual personal data privacy.

To address …

Cyber-Security, Privacy, And The Covid-19 Attenuation?, Vincent J. Samar

Journal of Legislation

Large-scale data brokers collect massive amounts of highly personal consumer information to be sold to whoever will pay their price, even at the expense of sacrificing individual privacy and autonomy in the process. In this Article, I will show how a proper understanding and justification for a right to privacy, in context to both protecting private acts and safeguarding information and states of affairs for the performance of such acts, provides a necessary background framework for imposing legal restrictions on such collections. This problem, which has already gained some attention in literature, now becomes even more worrisome, as government itself …

Regulating Data Breaches: A Data Superfund Statute, Kyle Mckibbin

Vanderbilt Journal of Entertainment & Technology Law

Collecting and processing large amounts of personal data has become a fundamental feature of the modern economy. Personal data, combined with good data analytics, are valuable to businesses as they can provide highly detailed information about individual preferences and behaviors. This data collection can also be valuable to the consumer as it generates innovative products and digital platforms. The era of big data promises great rewards, but it is not without its costs. Data breaches, or the release of personal data into unwanted hands, are pervasive and increasingly massive in scale. Despite the personal privacy harm caused by data breaches, …

A Duty Of Loyalty For Privacy Law, Neil M. Richards, Woodrow Hartzog

Scholarship@WashULaw

Data privacy law fails to stop companies from engaging in self-serving, opportunistic behavior at the expense of those who trust them with their data. This is a problem. Modern tech companies are so entrenched in our lives and have so much control over what we see and click that the self-dealing exploitation of people has become a major element of the internet’s business model.

Academics and policymakers have recently proposed a possible solution: require those entrusted with people’s data and online experiences to be loyal to those who trust them. But many have concerns about a duty of loyalty. What, …