Internet Law Commons^™

On The Right To Obscurity, Woodrow Hartzog, Evan Selinger

Faculty Scholarship

Tragically, U.S. privacy law has neglected to address a significant dimension of privacy. While lawmakers and judges have routinely recognized intrusions into our secluded spaces and breaches of our confidentiality and secrecy, they have largely failed to protect our most common yet also our most underappreciated form of privacy: the practical obscurity that allows us to live freely and with dignity. Obscurity, which is the state of protection that arises when personal information is difficult for some people to obtain or correctly interpret, serves several vital interests: (1) it safeguards our ability to express ourselves without fear that everything we …

Obscurity And The Fallacy Of No Privacy In Public Information, Woodrow Hartzog

Faculty Scholarship

The main thesis of this chapter is that because there are so many different possible interpretations of ‘public information’, the concept cannot be used to justify data practices and surveillance without first articulating a more precise meaning that recognises what is at stake. By disposing of the myth that there is an objective and dispassionate concept of public information, judges and lawmakers can clear the way for information rules based on overt value choices. In short, if the concept of ‘public’ is going to shape people’s social and legal obligations, its meaning and neutrality should not be assumed.

My argument …

Equal Justice & Generative Ai, Milan R. Markovic

Faculty Scholarship

The United States has long suffered from unequal access to justice, with countless low-and middle-income Americans forced to navigate the legal system alone. Recently, prominent judges, lawyers, and scholars have seized on generative AI as a potential corrective. These techno-optimists maintain that ChatGPT and other large language models can demystify the law and address unmet legal needs. Chief Justice John Roberts has proclaimed that AI-based tools "have the welcome potential to smooth out any mismatch between available resources and urgent needs in our court system."

Although AI will be an increasingly important source of legal assistance for underserved populations, the …

The Sec Proposed Cybersecurity Infrastructure Rules And New Disclosure Requirements, Neal F. Newman, Lawrence J. Trautman, Brian Elzweig

Faculty Scholarship

In addition to regulation of securities market issuers, the Securities & Exchange Commission (SEC) is also responsible for regulation of those entities that provide the networks, either electronic or physical, that enable the functioning of our securities markets. On February 9, 2022, the Commission published a Release for Cybersecurity Risk Management for Investment Advisers, Registered Investment Companies, and Business Development Companies containing proposals that, if adopted, would establish a new cybersecurity incident reporting and disclosure regime and require registered investment advisers (“advisers”) and investment companies (“funds”) to implement policies and procedures designed to address cyber risks. The comment period for …

Traditional And Computational Canons, Eric H. Martinez

Faculty Scholarship

As part of the rise of modern textualism, dictionaries and linguistic canons have become a ubiquitous part of legal interpretation. One longstanding question is whether judges citing these tools sincerely attempt to follow the meaning of a text, or if their invocation is merely window-dressing for a preferred outcome. The practical significance of this question extends across all major doctrinal areas, and with the Supreme Court’s overturning of Chevron deference, its importance is only to grow, as courts are now instructed to use every tool at their disposal to resolve ambiguity when interpreting a law. This Article is the first …

After Notice And Choice: Reinvigorating “Unfairness” To Rein In Data Abuses, Lina M. Khan, Samuel A.A. Levine, Stephanie T. Nguyen

Faculty Scholarship

The Federal Trade Commission (FTC) has long served as America’s default privacy enforcer. Yet for much of its history, the agency relied on self-regulation through a “notice and choice” framework that left the public vulnerable in an era of rampant data collection and digital surveillance. Businesses overwhelmed users with dense privacy notices while amassing and exploiting vast troves of personal data. The agency’s historical approach, rooted in outdated assumptions about self-correcting markets and an ideologically cramped view of the FTC’s authorities and mandate, helped usher in a digital economy where data abuses became routine.

During the Biden Administration, the FTC …

Debt Tokens, Andrea Tosato, Diane Lourdes Dick, Christopher K. Odinet

Faculty Scholarship

The worlds of crypto and bankruptcy have collided. Once-prominent, fast-growing, and even politically influential platforms for trading cryptocurrencies have imploded spectacularly. Gone are the glossy advertisements, celebrity endorsements, and proclamations that blockchain operates as a law unto itself. Instead, insolvent crypto businesses—including the crypto exchange giant FTX—find themselves in bankruptcy court, no different from any other failed enterprise. These bankruptcies reveal a startling reality: individual investors who placed their trust in these platforms have been stripped of their digital assets. In their stead, they hold hard-to-collect claims against these defunct platforms.

Amid the chill of the crypto winter, bankruptcy has …

The Great Scrape: The Clash Between Scraping And Privacy, Daniel J. Solove, Woodrow Hartzog

Faculty Scholarship

Artificial intelligence (AI) systems depend on massive quantities of data, often gathered by “scraping”—the automated extraction of large amounts of data from the internet. A great deal of scraped data contains people’s personal information. This personal data provides the grist for AI tools such as facial recognition, deep fakes, and generative AI. Although scraping enables web searching, archiving of records, and meaningful scientific research, scraping for AI can also be objectionable and even harmful to individuals and society.

Organizations are scraping at an escalating pace and scale, even though many privacy laws are seemingly incongruous with the practice. In this …

Foundations For Platform Liability, Kathryn E. Spier, Rory Van Loo

Faculty Scholarship

From spreading misinformation to selling deadly products, bad actors use technology platforms to their advantage while causing devastating harms to privacy, health, and even democracy. Despite their central role in enabling these bad actors, the platforms almost entirely escape liability. This legal immunity is purportedly grounded in economics. From the beginning, courts and legislatures feared that liability would chill innovation, growth, and user access. They also speculated that platforms have sufficient market incentives to voluntarily police bad actors, making liability unnecessary.

Whereas many scholars have argued that platform immunity is blind to justice, this Article shows that it is also …

Gig Work At What Cost? Exploring Privacy Risks Of Gig Work Platform Participation In The U.S., Amogh Pradeep, Johanna Gunawan, Álvaro Feal, Woodrow Hartzog, David Choffnes

Faculty Scholarship

In recent years, "gig work" platforms have gained popularity as a way for individuals to earn money; as of 2021, 16% of Americans have at some point earned money from such platforms. Despite their popularity and their history of unfair data collection practices and worker safety, little is known about the data collected from workers (and users) by gig platforms and about the privacy dark pattern designs present in their apps.

This paper presents an empirical measurement of 16 gig work platforms' data practices in the U.S. We analyze what data is collected by these platforms, and how it is …

Consumer Agents, Rory Van Loo

Faculty Scholarship

In the twenty-first century economy, individuals need market help that they are not getting. The technology has long existed for a browser plug-in that would filter out toxic social media content or a virtual shopping assistant that would find and even purchase the best deals online without having to go to many different websites and product pages. Yet tech platforms have used lawsuits and data control to stifle such tools. The lack of digital helpers has potentially profound consequences. Social media use is linked to alarming increases in teenage depression and anxiety. Businesses’ ability to manipulate consumers into paying higher …

Normalizing Facial Recognition Technology And The End Of Obscurity, Woodrow Hartzog, Evan Selinger, Judy Hyojoo Rhee

Faculty Scholarship

This article argues that facial recognition technology is the most dangerous surveillance tool ever invented. Given the unique threats this morally suspect tool poses to privacy, civil liberties, human flourishing, and democracy, the only appropriate response is a ban. To justify our position, we explain why facial recognition is distinctive among biometrics, clarify how even seemingly benign and positive uses of the technology can trigger dangerous normalization dynamics, and pinpoint why current United States laws (with reverberations in the EU’s AI Act) are designed to accelerate a slippery slope that makes mass surveillance nearly inevitable. Our most fundamental contribution lies …

The False Choice Between Digital Regulation And Innovation, Anu Bradford

Faculty Scholarship

This Article challenges the common view that more stringent regulation of the digital economy inevitably compromises innovation and undermines technological progress. This view, vigorously advocated by the tech industry, has shaped the public discourse in the United States, where the country’s thriving tech economy is often associated with a staunch commitment to free markets. U.S. lawmakers have also traditionally embraced this perspective, which explains their hesitancy to regulate the tech industry to date. The European Union has chosen another path, regulating the digital economy with stringent data privacy, antitrust, content moderation, and other digital regulations designed to shape the evolution …

“Can I Have It Non-Personalised?” An Empirical Investigation Of Consumer Willingness To Share Data For Personalized Services And Ads, Monika Leszczynska, Daria Baltag

Faculty Scholarship

European regulators, courts, and scholars are currently debating the legality of data processing for personalization purposes. Should businesses require separate consent for processing user data for personalized advertising, especially when offering free services reliant on such ads for revenue? Or is general consent for the contract enough, given personalized advertising’s role in fulfilling contractual obligations? This study investigates whether these legal distinctions reflect differences in people’s willingness to share data with businesses for personalization. Are consumers less willing to share their data for personalized advertising than for personalized services that they clearly contracted for? Does that change if the service …

Online Disinhibited Contracts, Wayne R. Barnes

Faculty Scholarship

There have been at least two dominant forces at work in the realm of consumer contracting over the past several decades. One has been the rise and domination of the standard form contract (whereby merchants contract with consumers via the use of standardized, boilerplate terms and conditions that consumers do not read or understand). The second force has been the rise of e-commerce and the purchase of goods and services via websites and other online platforms, and the use of “wrap” formation methodology (whereby merchants obtain consumer assent to the online terms and conditions via the consumer’s informal click, scroll, …

A Framework For Applying Copyright Law To The Training Of Textual Generative Artificial Intelligence, Art Neill, James Thomas, Erika Lee

Faculty Scholarship

The rise in the popularity of consumer-facing generative artificial intelligence (GenAI) has created considerable confusion and consternation among some copyright owners. The ability to automate the generation of original works based on user input is considered by some copyright holders to have been made possible by large-scale direct infringement by OpenAI, Microsoft, and other major GenAI developers. This article explores the application of copyright law to the training of OpenAI’s ChatGPT, specifically focusing on the legal issues surrounding the unauthorized use of copyrighted textual works in the GenAI training process.

The large language models (LLMs) that drive ChatGPT and similar …

A Public Technology Option, Hannah Bloch-Wehba

Faculty Scholarship

Private technology increasingly underpins public governance. But the state’s growing reliance on private firms to provide a variety of complex technological products and services for public purposes brings significant costs for transparency: new forms of governance are becoming less visible and less amenable to democratic control. Transparency obligations initially designed for public agencies are a poor fit for private vendors that adhere to a very different set of expectations.

Aligning the use of technology in public governance with democratic values calls for rethinking, and in some cases abandoning, the legal structures and doctrinal commitments that insulate private vendors from meaningful …

After Ftx: Can The Original Bitcoin Use Case Be Saved?, Mark Burge

Faculty Scholarship

Bitcoin and the other cryptocurrencies spawned by the innovation of blockchain programming have exploded in prominence, both in gains of massive market value and in dramatic market losses, the latter most notably seen in connection with the failure of the FTX cryptocurrency exchange in November 2022. After years of investment and speculation, however, something crucial has faded: the original use case for Bitcoin as a system of payment. Can cryptocurrency-as-a-payment-system be saved, or are day traders and speculators the actual cryptocurrency future? This article suggests that cryptocurrency has been hobbled by a lack of foundational commercial and consumer-protection law that …

Hydra: Lessons From The World's Largest Darknet Market, Priyanka Goonetilleke, Alex Knorre, Artem Kuriksha

Faculty Scholarship

Research Summary

We present a comprehensive description of Hydra, the largest darknet marketplace in the world until its shutdown in April 2022. We document the main features of Hydra such as dead-drop delivery, feedback and reputation system, escrow, and dispute resolution. Using data scraped from the platform, we quantitatively examine the scale and the structure of the marketplace. We find that it has been highly competitive, geographically covering at least 69% of the Russian population and trading a wide variety of drugs, while also allowing the wholesale trade of drugs and precursors. The dead-drop delivery system used on Hydra was …

Confidentiality Clauses In Settlement Agreements After The Consumer Review Fairness Act, Wayne Barnes

Faculty Scholarship

Online commerce has skyrocketed in recent years, and shoppers are purchasing goods or services online in greater numbers every year. The COVID-19 pandemic has only hastened the trend. One significant aspect of online shopping is the presence of consumer reviews posted by prior purchasers of goods or services, describing their experience with the products, the services and/or the selling merchant. A vast majority of online shoppers say that they rely on these reviews to help inform their purchasing decisions. Positive reviews can be tremendously beneficial to a business’ profitability, whereas negative reviews can be equally detrimental. Users of the internet …

The Intersection Of Nfts And Structured Finance, Christopher K. Odinet, Andrea Tosato

Faculty Scholarship

Blockchain technology, cryptocurrencies, stablecoins and non-fungible tokens (NFTs) continue to invade financial markets. Whether through partnerships between financial institutions and tech firms or through in-house initiatives at some of the nation’s largest banks, blockchain-based products, services, and transactional structures are a major point of interest. In a recent work by Professor Steven Schwarcz, the growing NFT market is analyzed using the traditional tools of structured finance. Creating a new conceptual model called non-cash-flow monetizations, Professor Schwarcz reveals the risks to investors and markets, if the tokenization of non-traditional and largely illiquid assets proliferates. Having identified the potential harms, he offers …

Mass E-Carceration: Electronic Monitoring As A Bail Condition, Sara Zampierin

Faculty Scholarship

Over the past decade, the immigration and criminal legal systems have increasingly relied on electronic monitoring as a bail condition; hundreds of thousands of people live under this monitoring on any given day. Decisionmakers purport to impose these conditions to release more individuals from detention and to maintain control over individuals they perceive to pose some risk of flight or to public safety. But the data do not show that electronic monitoring successfully mitigates these risks or that it leads to fewer individuals in detention. Electronic monitoring also comes with severe restrictions on individual liberty and leads to harmful effects …

Understanding Dark Patterns In Home Iot Devices, Monica Kowalczyk, Johanna Gunawan, David Choffnes, Daniel J. Dubois, Woodrow Hartzog, Christo Wilson

Faculty Scholarship

Internet-of-Things (IoT) devices are ubiquitous, but little attention has been paid to how they may incorporate dark patterns despite consumer protections and privacy concerns arising from their unique access to intimate spaces and always-on capabilities. This paper conducts a systematic investigation of dark patterns in 57 popular, diverse smart home devices. We update manual interaction and annotation methods for the IoT context, then analyze dark pattern frequency across device types, manufacturers, and interaction modalities. We find that dark patterns are pervasive in IoT experiences, but manifest in diverse ways across device traits. Speakers, doorbells, and camera devices contain the most …

Functional Tort Principles For Internet Platforms: Duty, Relationship, And Control, Edward Janger, Aaron Twerski

Faculty Scholarship

No abstract provided.

Data Property, Christina Mulligan, James Grimmelmann

Faculty Scholarship

No abstract provided.

The New Pornography Wars, Julie A. Dahlstrom

Faculty Scholarship

The world’s largest online pornography conglomerate, MindGeek, has come under fire for the publishing of “rape videos,” child pornography, and nonconsensual pornography on its website, Pornhub. As in the “pornography wars” of the 1970s and 1980s, lawyers and activists have now turned to civil remedies and filed creative anti-trafficking lawsuits against MindGeek and third parties, like payment processing company, Visa. These lawsuits seek not only to achieve legal accountability for online sex trafficking but also to reframe a broader array of online harms as sex trafficking.

This Article explores what these new trafficking lawsuits mean for the future regulation of …

The Failure Of Market Efficiency, William Magnuson

Faculty Scholarship

Recent years have witnessed the near total triumph of market efficiency as a regulatory goal. Policymakers regularly proclaim their devotion to ensuring efficient capital markets. Courts use market efficiency as a guiding light for crafting legal doctrine. And scholars have explored in great depth the mechanisms of market efficiency and the role of law in promoting it. There is strong evidence that, at least on some metrics, our capital markets are indeed more efficient than they have ever been. But the pursuit of efficiency has come at a cost. By focusing our attention narrowly on economic efficiency concerns—such as competition, …

Floating Liens Over Crypto-In-Commerce, Christopher K. Odinet, Andrea Tosato

Faculty Scholarship

Commercial law and crypto are colliding. Against the backdrop of explosive growth (and discord) in the digital asset market, there has been a series of recent revisions to American commercial law aimed at addressing new and emerging technologies. These changes to the Uniform Commercial Code (UCC) are designed to facilitate the buying and selling of digital assets as well as their use as collateral. However, to date, the literature exploring these changes has mainly focused on understanding the basics of the new regime. This Essay moves beyond that baseline by showing how the UCC amendments can be used to structure …

Europe's Digital Constitution, Anu Bradford

Faculty Scholarship

This Article uncovers the fundamental values underlying the European Union’s expansive set of digital regulations, which in aggregate can be viewed as Europe’s “digital constitution.” This constitution engrains Europe’s human-centric, rights-preserving, democracy-enhancing, and redistributive vision for the digital economy into binding law. This vision stands in stark contrast to the United States, which has traditionally placed its faith in markets and tech companies’ self-regulation. As a result, American tech companies today are regulated primarily by Brussels and not by Washington. By highlighting the distinctiveness and the global reach of the European digital constitution, this Article challenges the common narrative that …

Comments Of The Cordell Institute For Policy In Medicine & Law At Washington University In St. Louis, Neil Richards, Woodrow Hartzog, Jordan Francis

Faculty Scholarship

The Federal Trade Commission—with its broad, independent grant of authority and statutory mandate to identify and prevent unfair and deceptive trade practices—is uniquely situated to prevent and remedy unfair and deceptive data privacy and data security practices. In an increasingly digitized world, data collection, processing, and transfer have become integral to market interactions. Our personal and commercial experiences are now mediated by powerful, information-intensive firms who hold the power to shape what consumers see, how they interact, which options are available to them, and how they make decisions. That power imbalance exposes consumers and leaves them all vulnerable. We all …