Internet Law Commons^™

Application Of U.S. Sanction Laws And Ransomware Payments, Trinity Woodbury

Cybersecurity Undergraduate Research Showcase

Ransomware is a major threat that widely affects individuals and organizations, including businesses. Ransomware victims face the situation of potentially paying ransom payments to threat actors, some of whom might be foreign-based criminals. Ransomware affects victims from all sectors and industries.

Understanding Chilling Effects, Jonathon W. Penney

Articles & Book Chapters

With digital surveillance and censorship on the rise, the amount of data available unprecedented, and corporate and governmental actors increasingly employing emerging technologies like artificial intelligence and facial recognition technology for surveillance and data analytics, concerns about “chilling effects,” that is, the capacity for these activities to “chill” or deter people from exercising their rights and freedoms, have taken on greater urgency and importance. Yet, there remains a clear dearth in systematic theoretical and empirical work points. This has left significant gaps in understanding. This Article has attempted to fill that void, synthesizing theoretical and empirical insights from law, privacy, …

Platforms, Encryption, And The Cfaa: The Case Of Whatsapp V Nso Group, Jonathon W. Penney, Bruce Schneier

Articles & Book Chapters

End-to-end encryption technology has gone mainstream. But this wider use has led hackers, cybercriminals, foreign governments, and other threat actors to employ creative and novel attacks to compromise or workaround these protections, raising important questions as to how the Computer Fraud and Abuse Act (CFAA), the primary federal anti-hacking statute, is best applied to these new encryption implementations. Now, after the Supreme Court recently narrowed the CFAA’s scope in Van Buren and suggested it favors a code-based approach to liability under the statute, understanding how best to theorize sophisticated code-based access barriers like end-to-end encryption, and their circumvention, is now …

The Increased Use And Permanency Of Technology: How Those Changes Impact Attorneys’ Professional Responsibility And Ethical Obligations To Clients And Recommendations For Improvement, Scott B. Piekarsky

University of Miami Business Law Review

No abstract provided.

Ai And Digital Tools In Workplace Management And Evaluation: An Assessment Of The Eu's Legal Framework, Valerio De Stefano, Mathias Wouters

Commissioned Reports, Studies and Public Policy Documents

This study focuses on options for regulating the use of AI enabled and algorithmic management systems in the world of work under EU law. The first part describes how these technologies are already being deployed, particularly in recruitment, staff appraisal, task distribution and disciplinary procedures. It discusses some near-term potential development prospects and presents an impact assessment, highlighting some of these technologies' most significant implications.

The second part addresses the regulatory field. It examines the different EU regulations and directives that are already relevant to regulating the use of AI in employment. Subsequently, it analyses the potential labour and employment …

The New Bailments, Danielle D’Onfro

Washington Law Review

The rise of cloud computing has dramatically changed how consumers and firms store their belongings. Property that owners once managed directly now exists primarily on infrastructure maintained by intermediaries. Consumers entrust their photos to Apple instead of scrapbooks; businesses put their documents on Amazon’s servers instead of in file cabinets; seemingly everything runs in the cloud. Were these belongings tangible, the relationship between owner and intermediary would be governed by the common-law doctrine of bailment. Bailments are mandatory relationships formed when one party entrusts their property to another. Within this relationship, the bailees owe the bailors a duty of care …

Kelemahan Pelaksanaan Kebijakan Kriminal Terhadap Cyberbullying Anak Di Indonesia, Wenggedes Frensh

Indonesia Criminal Law Review

Advances in technology can create globalization that causes the world to be borderless. The rapid developing technology is information and communication technology. The development of information and communication technology is followed by the development of the internet which creates a cyberspace where crime is called cybercrime. One of the developing cybercrime is cyberbullying. In Indonesia, there are still weaknesses in the implementation of criminal policies against cyberbullying, so it is necessary to know the weaknesses in the cyberbullying criminal policies in Indonesia. The research method used is normative legal research (normative juridical) and empirical legal research (empirical juridical). The research …

Copyright Licensing And The Regulation Of China's Music Market: Searching For Transactional Efficiency And Fair Compensation, Chien-Chih (Jesse) Lu

Washington Journal of Law, Technology & Arts

China’s music copyright collecting society and its new music platforms, find points of commonality through constructing more efficient and profitable systems to generate more users and greater income. By undertaking a comparison of the various copyright regulations, cases, and statistics, this research aims to contribute to academic science by extracting frameworks and solutions from the United States and European licensing models and examining them in the context of China’s music market. It aims to discover rational approaches to connect rising technology and emerging economic incentives.

Appropriate solutions are proposed based on the influence of international treaties and legislative progress driven …

Federally Mandated Online Sales Tax: A Logistical Solution For The Future Of E-Commerce, Daniel O'Connor

DePaul Business & Commercial Law Journal

No abstract provided.

Economic Structural Transformation And Litigation: Evidence From Chinese Provinces, To Economic Change And Restructuring, Doug Bujakowski, Joan Schmit

DePaul Business & Commercial Law Journal

No abstract provided.

The "Business Interruption" Insurance Coverage Conundrum: Covid-19 Presents A Challenge, Paul E. Traynor

DePaul Business & Commercial Law Journal

No abstract provided.

Misalighned Incentives In Markets: Envisioning Finance That Benefits All Of Society, Dr. Ryan Clements

DePaul Business & Commercial Law Journal

No abstract provided.

Institutional Doxing And Attribution: Searching For Solutions To A Law-Free Zone, Kimberlee Styple

Georgia Journal of International & Comparative Law

No abstract provided.

Monsanto: Creator Of Cancer Liability

DePaul Business & Commercial Law Journal

No abstract provided.

Impact Of Corporate Response To Controversial Presidential Statements Or Policies

DePaul Business & Commercial Law Journal

No abstract provided.

Passcodes, Protection, And Legal Practicality: The Necessity Of A Digital Fifth Amendment, Ethan Swierczewski

Catholic University Journal of Law and Technology

No abstract provided.

Dignity, Intersectional Gendered Harm, And A Flexible Approach: Analysis Of The Right To One’S Image In Quebec, Yuan Stevens

Canadian Journal of Law and Technology

This article draws on critical feminist theory and the framework of intersectionality to examine how courts in Quebec have begun — and are poised — to respond to the phenomenon of the non-consensual sharing of images, particularly if they are of an intimate or sexual nature. Dunn’s work has demonstrated that Quebec’s dignity-focused approach to the protection of identity and privacy ought to guide the development of similar civil recourse provided in common law Canada. This paper fills a gap by identifying the affordances and gaps of Quebec’s legal approach from the vantage point of equality-seeking groups, with a particular …

A 180 On Section 230: State Efforts To Erode Social Media Immunity, Leslie Y. Garfield Tenzer, Hayley Margulis

Elisabeth Haub School of Law Faculty Publications

The turmoil of the 2020 presidential election renewed controversy surrounding 47 U.S.C § 230. The law, adopted as part of the 1996 Communications Decency Act (CDA), shields Interactive Computer Services (ICS) from civil liability for third-party material posted on their Platforms--no matter how heinous and regardless of whether the material enjoys constitutional protection. Consequently, any ICS, which is broadly defined to include Internet service providers (ISPs) and social media platforms (Platforms), can police its own postings but remains free from government intervention or retribution.

In 2022, members of the Texas and Florida legislatures passed laws aiming to limit the scope …

The Application Of The Right To Be Forgotten In The Machine Learning Context: From The Perspective Of European Laws, Zeyu Zhao

Catholic University Journal of Law and Technology

The right to be forgotten has been evolving for decades along with the progress of different statutes and cases and, finally, independently enacted by the General Data Protection Regulation, making it widely applied across Europe. However, the related provisions in the regulation fail to enable machine learning systems to realistically forget the personal information which is stored and processed therein.

This failure is not only because existing European rules do not stipulate standard codes of conduct and corresponding responsibilities for the parties involved, but they also cannot accommodate themselves to the new environment of machine learning, where specific information can …

Distributed Governance Of Medical Ai, W. Nicholson Price Ii

SMU Science and Technology Law Review

Artificial intelligence (AI) has the potential to democratize expertise in medicine, bring expertise previously limited to specialists to a variety of health-care settings. But AI can easily falter, and making sure that AI works well across that variety of settings is a challenging task. Centralized governance, such as review by the Food and Drug Administration, can only do so much, since system performance will depend on the particular health-care setting and how the AI system is integrated into setting-specific clinical workflows. This Essay presents the need for distributed governance, where some oversight tasks are undertaken in localized settings. It points …

Book Review: Mike Zajko, Telecom Tension: Internet Service Providers And Public Policy In Canada*, Matt Malone

Canadian Journal of Law and Technology

The world of telecommunications, writes Mike Zajko in this timely analysis of internet service providers (ISPs), “is a world many of us have never wondered about, just as we are rarely curious about where our sewage goes or how the electricity grid is configured.” Yet ISPs are not just conduits of fast-traveling light pulses that deliver the internet; they transmit, channel, form, and express a multitude of public policy issues, and they have an important level of agency in the construction and exercise of those policies, too. These dynamics have implications for a large bandwidth of topics relevant to Canadians, …

Legislating Data Loyalty, Woodrow Hartzog, Neil Richards

Faculty Scholarship

Lawmakers looking to embolden privacy law have begun to consider imposing duties of loyalty on organizations trusted with people’s data and online experiences. The idea behind loyalty is simple: organizations should not process data or design technologies that conflict with the best interests of trusting parties. But the logistics and implementation of data loyalty need to be developed if the concept is going to be capable of moving privacy law beyond its “notice and consent” roots to confront people’s vulnerabilities in their relationship with powerful data collectors.

In this short Essay, we propose a model for legislating data loyalty. Our …

The Ai-Copyright Challenge: Tech-Neutrality, Authorship, And The Public Interest, Carys Craig

All Papers

Many of copyright’s core concepts—from authorship and ownership to infringement and fair use—are being challenged by the rapid rise of generative AI. Whether in service of creativity or capital, however, copyright law is perfectly capable of absorbing this latest innovation. More interesting than the doctrinal debates that AI provokes, then, is the opportunity it presents to revisit the purposes of the copyright system in the age of AI. After introducing the AI-copyright challenge in Part 1, Part 2 considers the guiding principles and normative objectives that underlie—and so ought to inform—copyright law and its response to AI technologies. It proposes …

Reframing Technology-Facilitated Gender-Based Violence At The Intersections Of Law & Society, Jane Bailey, Carys Craig, Suzie Dunn, Sonia Lawrence

Canadian Journal of Law and Technology

This introductory article proceeds in three parts. First, it discusses the origins of this special issue as part of a multi-event, SSHRC-funded conference that focused on pushing beyond a narrow conception of TFGBV; rather than approaching TFGBV as solely an issue of interpersonal behaviours, the animating objective of the conference was to examine the structural, systemic, and design factors that contribute to TFGBV. Second, it explores the importance and promise of reframing TFGBV in this way through intersectional and structural lenses. Third, it briefly highlights some of the key insights from each of the contributions in this special issue. It …

Platforms, Encryption, And The Cfaa: The Case Of Whatsapp V Nso Group, Jonathon Penney, Bruce Schneier

Articles, Book Chapters, & Popular Press

End-to-end encryption technology has gone mainstream. But this wider use has led hackers, cybercriminals, foreign governments, and other threat actors to employ creative and novel attacks to compromise or workaround these protections, raising important questions as to how the Computer Fraud and Abuse Act (CFAA), the primary federal anti-hacking statute, is best applied to these new encryption implementations. Now, after the Supreme Court recently narrowed the CFAA’s scope in Van Buren and suggested it favors a code-based approach to liability under the statute, understanding how best to theorize sophisticated code-based access barriers like end-to-end encryption, and their circumvention, is now …

Book Review: This Is How They Tell Me The World Ends: The Cyberweapons Arms Race (2020) By Nicole Perlroth, Amy C. Gaudion

Dickinson Law Review (2017-Present)

No abstract provided.

Data Breach Notification Laws And The Quantum Decryption Problem, Phillip Harmon

Washington and Lee Law Review

In the United States, state data breach notification laws protect citizens by forcing businesses to notify those citizens when their personal information has been compromised. These laws almost universally include an exception for encrypted personal data. Modern encryption methods make encrypted data largely useless, and the notification laws aim to encourage good encryption practices.

This Note challenges the wisdom of laws that place blind faith in the continued infallibility of encryption. For decades, Shor’s algorithm has promised polynomial-time factoring once a sufficiently powerful quantum computer can be built. Competing laboratories around the world steadily continue to march toward this end. …

Comment: The Necessary Evolution Of State Data Breach Notification Laws: Keeping Pace With New Cyber Threats, Quantum Decryption, And The Rapid Expansion Of Technology, Beth Burgin Waller, Elaine Mccafferty

Washington and Lee Law Review

The legal framework that was built almost two decades ago now struggles to keep pace with the rapid expansion of technology, including quantum computing and artificial intelligence, and an ever-evolving cyber threat landscape. In 2002, California passed the first data breach notification law, with all fifty states following suit to require notice of unauthorized access to and acquisition of an individual’s personal information.1 These data breach notification laws, originally designed to capture one-off unauthorized views of data in a computerized database, were not built to address PowerShell scripts by cyber terrorists run across thousands of servers, leaving automated accessed data …

Bringing The Ada Out Of The Dark Ages: Social Media Websites Should Be Required To Meet The Accessibility Requirements Of The Americans With Disabilities Act, Olivia Garcia

University of San Francisco Law Review

No abstract provided.

“I Bet You Don’T Get What We Get”: An Intersectional Analysis Of Technology-Facilitated Violence Experienced By Racialized Women Anti- Violence Online Activists In Canada, Nasreen Rajani

Canadian Journal of Law and Technology

Despite growing attention to violence that women face in online settings, a relatively small proportion of academic work centres on the experiences and perspectives of racialized women in Canada. Informed by an intersectional framework, I draw on semi-structured interviews with nine women across Canada, all of whom are involved in anti-violence online activism, about their experiences of technology-facilitated violence (TFV). Their experiences revealed less prominent narratives, including instances of TFV beyond instances of intimate partner violence (IPV) and beyond sources of anonymous trolling by supposed white men, such as violence perpetrated by peers, white women, and racialized men. In this …