Internet Law Commons^™

Reframing Technology-Facilitated Gender-Based Violence At The Intersections Of Law & Society, Jane Bailey, Carys Craig, Suzie Dunn, Sonia Lawrence

Canadian Journal of Law and Technology

This introductory article proceeds in three parts. First, it discusses the origins of this special issue as part of a multi-event, SSHRC-funded conference that focused on pushing beyond a narrow conception of TFGBV; rather than approaching TFGBV as solely an issue of interpersonal behaviours, the animating objective of the conference was to examine the structural, systemic, and design factors that contribute to TFGBV. Second, it explores the importance and promise of reframing TFGBV in this way through intersectional and structural lenses. Third, it briefly highlights some of the key insights from each of the contributions in this special issue. It …

Understanding Chilling Effects, Jonathon Penney

Articles, Book Chapters, & Popular Press

With digital surveillance and censorship on the rise, the amount of data available online unprecedented, and corporate and governmental actors increasingly employing emerging technologies like artificial intelligence (AI), machine learning, and facial recognition technology (FRT) for surveillance and data analytics, concerns about “chilling effects”, that is, the capacity for these activities “chill” or deter people from exercising their rights and freedoms have taken on greater urgency and importance. Yet, there remains a clear dearth in systematic theoretical and empirical work point. This has left significant gaps in understanding. This article has attempted to fill that void, synthesizing theoretical and empirical …

Platforms, Encryption, And The Cfaa: The Case Of Whatsapp V Nso Group, Jonathon Penney, Bruce Schneier

Articles, Book Chapters, & Popular Press

End-to-end encryption technology has gone mainstream. But this wider use has led hackers, cybercriminals, foreign governments, and other threat actors to employ creative and novel attacks to compromise or workaround these protections, raising important questions as to how the Computer Fraud and Abuse Act (CFAA), the primary federal anti-hacking statute, is best applied to these new encryption implementations. Now, after the Supreme Court recently narrowed the CFAA’s scope in Van Buren and suggested it favors a code-based approach to liability under the statute, understanding how best to theorize sophisticated code-based access barriers like end-to-end encryption, and their circumvention, is now …

Blockchain And The Genesis Of Creative Justice To Disintermediate Creativity, Tonya M. Evans

Faculty Scholarly Works

Historically, the art market has been shrouded in opaqueness and exclusivity, permissioned access and asymmetry of information that rivals the systemic ills of legacy financial markets that led to the Great Recession. Moreover, legacy art market stakeholders have, through the centuries, been entrenched in elitist and inequitable notions of art that excluded Black artists. These legacy intermediaries have also consistently demonstrated a deep and enduring disdain for any art connected to the digital world. That is, until the age of COVID-19 and the dramatically increasing value and dominance of the non-fungible token (NFT) market.

This Essay explores why, and how, …

Book Review: This Is How They Tell Me The World Ends: The Cyberweapons Arms Race (2020) By Nicole Perlroth, Amy C. Gaudion

Dickinson Law Review (2017-Present)

No abstract provided.

Data Breach Notification Laws And The Quantum Decryption Problem, Phillip Harmon

Washington and Lee Law Review

In the United States, state data breach notification laws protect citizens by forcing businesses to notify those citizens when their personal information has been compromised. These laws almost universally include an exception for encrypted personal data. Modern encryption methods make encrypted data largely useless, and the notification laws aim to encourage good encryption practices.

This Note challenges the wisdom of laws that place blind faith in the continued infallibility of encryption. For decades, Shor’s algorithm has promised polynomial-time factoring once a sufficiently powerful quantum computer can be built. Competing laboratories around the world steadily continue to march toward this end. …

Comment: The Necessary Evolution Of State Data Breach Notification Laws: Keeping Pace With New Cyber Threats, Quantum Decryption, And The Rapid Expansion Of Technology, Beth Burgin Waller, Elaine Mccafferty

Washington and Lee Law Review

The legal framework that was built almost two decades ago now struggles to keep pace with the rapid expansion of technology, including quantum computing and artificial intelligence, and an ever-evolving cyber threat landscape. In 2002, California passed the first data breach notification law, with all fifty states following suit to require notice of unauthorized access to and acquisition of an individual’s personal information.1 These data breach notification laws, originally designed to capture one-off unauthorized views of data in a computerized database, were not built to address PowerShell scripts by cyber terrorists run across thousands of servers, leaving automated accessed data …

“I Bet You Don’T Get What We Get”: An Intersectional Analysis Of Technology-Facilitated Violence Experienced By Racialized Women Anti- Violence Online Activists In Canada, Nasreen Rajani

Canadian Journal of Law and Technology

Despite growing attention to violence that women face in online settings, a relatively small proportion of academic work centres on the experiences and perspectives of racialized women in Canada. Informed by an intersectional framework, I draw on semi-structured interviews with nine women across Canada, all of whom are involved in anti-violence online activism, about their experiences of technology-facilitated violence (TFV). Their experiences revealed less prominent narratives, including instances of TFV beyond instances of intimate partner violence (IPV) and beyond sources of anonymous trolling by supposed white men, such as violence perpetrated by peers, white women, and racialized men. In this …

Intimate Images And Authors’ Rights: Non- Consensual Disclosure And The Copyright Disconnect, Meghan Sali

Canadian Journal of Law and Technology

This article responds to a brand of legal realpolitik that says using property law to respond to the non-consensual distribution of intimate images (NCDII) is appropriate and even necessary, because its remedial frameworks are well developed and provide the relief that is often most sought after by targets of an assault: the immediate removal of photos from online platforms. While some targets are not considered the ‘‘authors’’ of their intimate images, most of the images that are the subject of NCDII are selfies, taken by the target themselves. In these cases, that person rightfully owns the copyright in those images …

On The Internet, Nobody Knows You Are A Dog: Contested Authorship Of Digital Evidence In Cases Of Gender-Based Violence, Suzie Dunn, Moira Aikenhead

Canadian Journal of Law and Technology

We examine various aspects of digital evidence at GBV trials, drawing on relevant Canadian criminal case law. First, we describe some of the unique challenges related to electronic documents generally with respect to determining authorship. Second, we review some of the historical and ongoing practices within the criminal justice system that rely on harmful gendered myths about GBV and note the potential for these myths to emerge in relation to digital evidence. Third, we discuss the duty of investigating police officers to gather the necessary available digital evidence to demonstrate authorship and note potential gaps in current investigatory practices that …

Responding To Deficiencies In The Architecture Of Privacy: Co-Regulation As The Path Forward For Data Protection On Social Networking Sites, Laurent Cre ́Peau

Canadian Journal of Law and Technology

Social Networking Sites like Facebook, Twitter and the like are a ubiquitous part of contemporary culture. Yet, as exemplified on numerous occasions, most recently in the Cambridge Analytica scandal that shook Facebook in 2018, these sites pose major concerns for personal data protection. Whereas self-regulation has characterized the general regulatory mindset since the early days of the Internet, it is no longer viable given the threat social media poses to user privacy. This article notes the deficiencies of self-regulatory models of privacy and contends jurisdictions like Canada should ensure they have strong data protection regulations to adequately protect the public. …

Artificial Intelligence In Canadian Healthcare: Will The Law Protect Us From Algorithmic Bias Resulting In Discrimination?, Bradley Henderson, Colleen M. Flood, Teresa Scassa

Canadian Journal of Law and Technology

In this article, we canvas why AI may perpetuate or exacerbate extant discrimination through a review of the training, development, and implementation of healthcare-related AI applications and set out policy options to militate against such discrimination. The article is divided into eight short parts including this introduction. Part II focuses on explaining AI, some of its basic functions and processes, and its relevance to healthcare. In Part III, we define and explain the difference and relationship between algorithmic bias and data bias, both of which can result in discrimination in healthcare settings, and provide some prominent examples of healthcare-related AI …

The Deficiencies Of Oregon Ballot Measure 110, Jacob Towles

SMU Science and Technology Law Review

In 1970, the Federal Government enacted the Controlled Substance Act (CSA), which made certain drugs and substances illegal absent a medical prescription. The control of drugs through the CSA exists to prevent harm to the public. Nonetheless, some cities and states have enacted laws that allow for the benefit of selling or pleasure of using illegal drugs to outweigh the legal ramifications.

In November 2020, The Drug Addiction Treatment and Recovery Act, also known as Oregon Ballot Measure 110 (Measure 110), made Oregon the first state in the country to decriminalize all drugs. Measure 110 was enacted with the overarching …

Oculogica: An Eye-Catching Innovation In Health Care And The Privacy Implications Of Artificial Intelligence And Machine Learning In Diagnostics For The Human Brain, Samantha V. Ettari, Elijah Roden, Vishal Ahuja, Uzma Samadani

SMU Science and Technology Law Review

This article explores the use of Artificial Intelligence (AI) in emerging eye-tracking diagnostic technology, with a focus on both the patient data privacy and security regulations that firms, specifically device inventors and manufacturers, may face and how such firms can address the developing privacy and regulatory legal challenges. In addition, we discuss the ethical considerations of algorithmic bias, the impact such biases have on society and emerging technology, along with specific actions companies should take to maximize patient outcomes. Lastly, we offer a case study of Oculogica, an emerging digital health technology company—and its medical device (EyeBOX) – to illustrate …

Death Of The Limited License To Data: United States V. Van Buren, Nick Curley

SMU Science and Technology Law Review

The United States Supreme Court has normally viewed data as property. Yet in United States v. Van Buren, the Court abandoned the property law angle. Van Buren included examination of the Computer Fraud and Abuse Act’s applicability to a police officer who accepted a bribe from undercover agents to look up a phony license plate. The Court held that under the CFAA someone only “exceeds authorized access” when they properly access a computer and then improperly access files “that are off limits to [them].”

This Case Note explores why the Supreme Court should not have abandoned the property analogy …

In The Midst Of A Global Pandemic: Benefits Of A Biomedical Patenting Regime, Amy Q. Nguyen

SMU Science and Technology Law Review

There has long been a debate centered around genomic and biomedical data patenting. The opposition expresses concern that the patenting of genomic and biomedical data will hinder the manufacturing and distribution of medical and scientific discoveries to those who need them. On the other hand, supporters of patenting genomic and biomedical data explain that patents are beneficial. For example, genomic and biomedical patents allow pharmaceutical companies and research labs to recoup their massive investments in researching and developing new medical and scientific methodologies and technologies. Patents also incentivize these companies to make discoveries to prevent future pandemics and diseases.

In …

Selling Out For A Song: “Artist Abuse” And Saving Creatives From Servitude And Economic Disadvantage In The Entertainment Industry, Rick G. Morris

SMU Science and Technology Law Review

Artists drive the entertainment industry with their creative work, and in some cases, there are protections for artists when it comes to their work, wealth, and autonomy. However, the area of contracts called “private law,” under which artists’ contracts fall, is lightly regulated in comparison to other employment agreements. Artists, often at the beginning of their careers, are signed to long-term contracts that take advantage of them and do not provide adequate compensation. Artists might be locked into contractual arrangements that they cannot free themselves from. Sometimes, they are directly cheated. And much of this comes from people they trust, …

Creating A United Front: Harmonizing The United States Regulatory Policies Surrounding Human Embryonic Stem Cell Research, Sydney Kossow

SMU Science and Technology Law Review

Stem cell therapy is an imperative development in science and medicine that is heavily regulated worldwide. With the potential to cure illnesses, help understand disease development, and advance regenerative medicine, a harmonized regulatory policy is crucial to capitalize on the benefits of stem cells. This article examines an important topic of discussion surrounding stem cell therapy and research: the political debate on how and when embryonic stem cells can be used. In addition to examining ethical challenges, this article discusses the legal challenges surrounding using embryonic stem cells to inform regenerative therapies. Specifically, this article will examine the National Institute …

Blockchain Disruption: Digital Assets Are Changing How We Do Business, Nick Curley

SMU Science and Technology Law Review

Digital assets are changing the way businesses think about equity, labor, business models, and business organization. Digital assets, like Bitcoin or Ethereum, provide incredible opportunities to further align shareholders with the objectives of the entity.

Each time humanity advances its technology for ledgers, markets explode, and we witness immense wealth creation. Digital assets like Bitcoin and Ethereum are the next great step forward for ledger technology. While there are incredible opportunities to leverage this new technology, there are also incredible risks. There are many public examples of “hacks” of prominent blockchains like Ethereum and Solana. Blockchain technology has captured the …

A Proportionality-Based Framework For Government Regulation Of Digital Tracing Apps In Times Of Emergency, Sharon Bassan

Dickinson Law Review (2017-Present)

Times of emergency present an inherent conflict between the public interest and the preservation of individual rights. Such times require granting emergency powers to the government on behalf of the public interest and relaxing safeguards against government actions that infringe rights. The lack of theoretical framework to assess governmental decisions in times of emergency leads to a polarized and politicized discourse about potential policies, and often, to public distrust and lack of compliance.

Such a discourse was evident regarding Digital Tracing Apps (“DTAs”), which are apps installed on cellular phones to alert users that they were exposed to people who …

Will Nfts Solve Some Of The Age-Old Problems In Art Law?, Ursula Von Schlenhenried

SMU Science and Technology Law Review

Non-Fungible Tokens, or NFTs, are digital assets based on blockchain technology and are steadily growing in popularity in the art market. The technology has created a novel way of establishing ownership through tamper-resistant cryptographic records. A majority of NFTs are created via the Ethereum protocol and are most notably associated with other assets, such as digital art. Even prominent auction houses, like Christie’s, have joined the action. NFTs offer a whole host of new and interesting legal concerns, including questions surrounding smart contracts. The concerns surrounding traditional art, however, are long-standing and include (but are not limited to) provenance, authenticity, …

Cryptocurrency And Security Issues: The Tide Awaiting Ripple’S Decision, Robel Tsegu

SMU Science and Technology Law Review

Bitcoin passed the test. Ethereum passed the test. Now, it is XRP’s turn. At the time of this writing, the SEC has the opportunity, through common law, to determine how to regulate the unregulated cryptocurrency world. This is a unique moment because guidance on SEC violations is usually promulgated through statutes, no-action letters, and quotes from SEC Commissioners, rather than common law. Therefore, the decision in SEC v. Ripple will pivot the direction on how cryptocurrencies and digital assets forever be used. Will this pivot be a “hard” or “soft” fork in how we use cryptocurrencies?

This Case Note argues …

Legislating Data Loyalty, Woodrow Hartzog, Neil Richards

Faculty Scholarship

Lawmakers looking to embolden privacy law have begun to consider imposing duties of loyalty on organizations trusted with people’s data and online experiences. The idea behind loyalty is simple: organizations should not process data or design technologies that conflict with the best interests of trusting parties. But the logistics and implementation of data loyalty need to be developed if the concept is going to be capable of moving privacy law beyond its “notice and consent” roots to confront people’s vulnerabilities in their relationship with powerful data collectors.

In this short Essay, we propose a model for legislating data loyalty. Our …

The Wild West Of Data Privacy: Why Rhode Island Needs To Enact Comprehensive Legislation To Protect Consumers’ Data, Candace Quinn

Roger Williams University Law Review

No abstract provided.

‘‘Don’T Take On The Responsibilty Of Somebody Else’S Fu**Ed Up Behavior”: Responding To Online Abuse In The Context Of Barriers To Support, Chandell Gosse

Canadian Journal of Law and Technology

Responsibilization, in a true circular fashion, is not only born of but also benefits institutional (e.g., social media companies and law enforcement) and cultural power structures (e.g., misogyny and patriarchy). When targets of online abuse take responsibility for the abuse launched against them, that assumption of responsibility requires energy, and that energy is taken away from efforts to hold institutions and perpetrators accountable. Responsibilization tries to tranquilize change in the service of power. The tricky thing about interrupting this process is that it requires more than just offering better support. It also requires exposing, challenging, and dismantling harmful ideologies, belief …

Let The Machines Do The Dirty Work: Social Media, Machine Learning Technology And The Iteration Of Racialized Surveillance, Subhah Wadhawan

Canadian Journal of Law and Technology

Post 9/11, where the current social and cultural temperature has constructed Islam as interchangeable with terrorism, digital intermediaries have responded with increased censorship of speech related to, emerging from, or advocating Islamic ideology. At the heart of this paper is the argument that digital intermediaries have relied on the opaqueness of machine learning technology (‘‘MLT”) to realize racialized surveillance, whereby speech concerning Islamic content has been disproportionally censored. This paper maps out how inherent biases concerning the ideology of Islam have been interwoven into the coding and machine learning used by the major tech giants. As a result of the …

Delineating The Legal Framework For Data Protection: A Fundamental Rights Approach Or Data Propertization?, Efe Lawrence Ogbeide

Canadian Journal of Law and Technology

The Charter of Fundamental Rights of the European Union, like other key legal instruments around the globe, grants citizens the right to privacy in Article 7. The Charter, however, further provides for the right to data protection in Article 8. Simply put, the implication of Article 8 of the Charter is that the right to data protection is a fundamental right. The central question in this article is whether data protection indeed qualifies to be categorized as a fundamental right. If not, what other approach(es) to data protection may be implemented?

Onlife Harms: Uber And Sexual Violence, Amanda Turnbull

Canadian Journal of Law and Technology

Uber markets itself as a technology company that is managed primarily by ML algorithms with the support of human engineers. Yet, in its 2019 Report, the role that its technology played in relation to sexual violence is, for all intents and purposes, absent. Likewise, solutions dealing specifically with the role of technology in facilitating gender-based violence are also missing from the series of initiatives in which Uber has invested that are aimed at preventing sexual violence. Uber was not sufficiently rigorous in defining the problem it was trying to solve. It was a missed opportunity that has resulted in continued …

Technologies Of Servitude Understanding Firmware Tpms As Interests In Personal Property, Anthony D. Rosborough

Canadian Journal of Law and Technology

Widespread computerization and embedded system design has facilitated the pervasive and latent implementation of technological protection measures (‘‘TPMs”) to restrict device firmware access. Often referred to as ‘‘digital locks,” these restrictions impose a whole host of limitations on how owners use and manage the increasing number of products and devices in which they are incorporated. In many cases, TPM restrictions can prevent activities with social, environmental, and economical benefits, including repair, repurposing, and interoperability. In response, governments around the world are now revisiting and scrutinizing their TPM anti-circumvention laws within copyright and competition policy. Beyond these perspectives, this article looks …

Officially Obsolete? A Critical Examination Of The Canadian Official Marks Regime And Its Waning Relevancy In Trademark Law, Maddison Tebbutt

Canadian Journal of Law and Technology

When the Trademark Act (‘‘TMA”) came about in 1985, a unique aspect of Canadian trademark law was created: the official marks regime under section 9(1)(n). The official marks regime is available to public authorities and universities as a means of sidestepping the lengthy and expensive process of trademark registration and providing special protection for official marks. Once public authorities and universities obtain an official mark through this system, they are entitled to an expansive monopoly that allows them to use their mark for commercial use, while simultaneously keeping the official mark out of the public domain. Moreover, while …