Internet Law Commons^™

A Statistical Analysis Of Privacy Policy Design, Ari E. Waldman

Notre Dame Law Review Reflection

This Essay takes a further step in a developing research agenda on the design of privacy policies. As described in more detail in Part II, I created an online survey in which respondents were asked to choose one of two websites that would better protect their privacy given images of segments of their privacy policies. Some of the questions paired notices with, on the one hand, privacy protective practices displayed in difficult-to-read designs, and, on the other hand, invasive data use practices displayed in graphical, aesthetically pleasing ways. Many survey respondents seemed to make their privacy decisions based on design …

Lawyers' Abuse Of Technology, Cheryl B. Preston

Cornell Law Review

Lawyers are highly educated and, allegedly, of higher than average intelligence, but sometimes individual lawyers demonstrate colossal errors in judgment, especially when insufficiently trained in the new and emerging risks involved with the technological age. For instance, although the internet is a necessary tool for attorneys' and is now a prominent feature in the everyday lives of all actors in the legal system, this technology poses particularized and often unanticipated risks of professional and ethical abuse -- risks that are extraordinary both in quantity and intensity. As Harvard's Director of the Center for the Legal Profession warned: We are "only …

The Battlefield Of Tomorrow, Today: Can A Cyberattack Ever Rise To An “Act Of War?”, Christopher M. Sanders

Utah Law Review

In a sense, war has not changed. The end results will always remain the same: death and destruction; even if that destruction is not fully tangible. The results may be instantaneous, or they may be delayed. It is only the means implemented to achieve these destructive ends that evolve. Cyberwarfare is a product of that evolution. Most importantly, we must always remain abreast of evolution and the changes in warfare in order to effectively and efficiently respond to new attacks, and to prevent them as well.

This Note sheds light on recent evolution in warfare. It enlightens the reader of …

Consumer Bitcredit And Fintech Lending, Christopher K. Odinet

Faculty Scholarship

The digital economy is changing everything, including how we borrow money. In the wake of the 2008 crisis, banks pulled back in their lending and, as a result, many consumers and small businesses found themselves unable to access credit. A wave of online firms called fintech lenders have filled the space left vacant by traditional financial institutions. These platforms are fast making antiques out of many mainstream lending practices, such as long paper applications and face-to-face meetings. Instead, through underwriting by automation — utilizing big data (including social media data) and machine learning — loan processing that once took days …

The #Metoo Movement: An Invitation For Feminist Critique Of Rape Crisis Framing, Jamie R. Abrams

University of Richmond Law Review

This article invites feminists to leverage the #MeToo Movement as a critical analytical tool to explore the longevity of the enduring rape crisis framing of victim services. Long before the #MeToo Movement, victim services in communities nationwide were framed around a crisis model. For nearly half a century, victims have visited rape crisis centers, called rape crisis hotlines, and mobilized rape crisis response teams to provide services and support. This enduring political and social framing around rape as a crisis is opaque, has prompted a political backlash, and risks distorting hard-fought feminist legal, social, and political battles. It has yielded …

Ethereum And The Sec: Why Most Distributed Autonomous Organizations Are Subject To The Registration Requirements Of The Securities Act Of 1933 And A Proposal For New Regulation, Tiffany L. Minks

Texas A&M Law Review

In a world full of new technology, the risk of fraud is constantly increasing. In the securities industry, this risk existed long before the use of technology. Congress enacted the Securities Act of 1933 to combat the risk of fraud and misrepresentation in the sale of securities. By requiring full disclosure, investors have the opportunity to make informed decisions prior to investing. However, Distributed Autonomous Organizations (“DAOs”), through the use of blockchains and smart-contracts, engage in the sale of securities without fully disclosing the risks or complying with the registration requirements of the Securities Act of 1933. Compliance with the …

Industrial Cyber Vulnerabilities: Lessons From Stuxnet And The Internet Of Things, Lawrence J. Trautman, Peter C. Ormerod

University of Miami Law Review

Cyber breaches continue at an alarming pace with new vulnerability warnings an almost daily occurrence. Discovery of the industrial virus Stuxnet during 2010 introduced a global threat of malware focused toward disruption of industrial control devices. By the year 2020, it is estimated that over 30 billion Internet of Things (IoT) devices will exist. The IoT global market spend is estimated to grow from $591.7 billion in 2014 to $1.3 trillion in 2019 with a compound annual growth rate of 17%. The installed base of IoT endpoints will grow from 9.7 billion in 2014 to more than 25.6 billion in …

The Struggle To Define Privacy Rights And Liabilities In A Digital World And The Unfortunate Role Of Constitutional Standing, Juan Olano

University of Miami Law Review

Today’s world runs on data. The creation and improvement of technological products and services depend on the exchange of data between people and companies. As people’s lives become more digitized, companies can collect, store, and analyze more data, and in turn, create better technology. But, because consumer data can be very sensitive (think Social Security numbers, GPS location, fingerprint recognition, etc.) this cyclical exchange comes with serious privacy risks; especially in light of more frequent and sophisticated cyberattacks. This creates a face-off between technological growth and privacy rights. While it makes sense that people should be willing to subside some …

Industrial Cyber Vulnerabilities: Lessons From Stuxnet And The Internet Of Things, Lawrence J. Trautman, Peter C. Ormerod

Faculty Publications

Cyber breaches continue at an alarming pace with new vulnerability warnings an almost daily occurrence. Discovery of the industrial virus Stuxnet during 2010 introduced a global threat of malware focused toward disruption of industrial control devices. By the year 2020, it is estimated that over 30 billion Internet of Things (IoT) devices will exist. The IoT global market spend is estimated to grow from $591.7 billion in 2014 to $1.3 trillion in 2019 with a compound annual growth rate of 17%. The installed base of IoT endpoints will grow from 9.7 billion in 2014 to more than 25.6 billion in …

The Court Must Play Its Interpretative Role: Defending The Defend Trade Secrets Act’S Extraterritorial Reach, Jada M. Colon

The University of Cincinnati Intellectual Property and Computer Law Journal

The exact reach of the Defend Trade Secrets Act’s extraterritoriality provision has yet to be interpreted by the courts. If United States securities, trademark, and antitrust law serves as any indication of what is to be expected, the Defend Trade Secrets Act may be subject to an inconsistent array of interpretation. When faced with interpreting the extraterritorial scope of the Defend Trade Secrets Act for the first time, the court must set a strong precedent by enacting a single, uniform effects test that will not falter when applied in different circumstances and by different circuits. Courts interpreting United States securities, …

“Private” Cybersecurity Standards? Cyberspace Governance, Multistakeholderism, And The (Ir)Relevance Of The Tbt Regime, Shin-Yi Peng

Cornell International Law Journal

We are now living in a hyper-connected world, with a myriad of devices continuously linked to the Internet. Our growing dependence on such devices exposes us to a variety of cybersecurity threats. This ever-increasing connectivity means that vulnerabilities can be introduced at any phase of the software development cycle. Cybersecurity risk management, therefore, is more important than ever to governments at all developmental stages as well as to companies of all sizes and across all sectors. The awareness of cybersecurity threats affects the importance placed on the use of standards and certification as an approach.

The Resilient Foundation Of Democracy: The Legal Deconstruction Of The Washington Posts's Condemnation Of Edward Snowden, Hanna Kim

Indiana Law Journal

On September 17, 2016, The Washington Post (“the Post”) made history by being the first paper to ever call for the criminal prosecution of its own source —Edward Snowden. Yet, two years prior to this editorial, the Post accepted the 2014 Pulitzer Prize in Public Service for its “revelation of widespread secret surveillance by the National Security Agency”—an honor which would not have been bestowed had Snowden not leaked the documents through this news outlet. The other three major media outlets that received and published Snowden’s documents and findings—The Guardian, The New York Times, and The Intercept—all have taken the …

Jurisdiction, The Internet, And The Good Faith Exception: Controversy Over The Government’S Use Of Network Investigative Techniques, Maureen Weidman

Dickinson Law Review (2017-Present)

In February 2015, the FBI discovered a website dedicated to child pornography located on the Tor Network, a network designed to protect its users’ identities on the Internet. Due to the structure of the Tor Network, the FBI could not take down the website and identify users who previously accessed the website. Instead, the FBI kept the website operational for 30 days and applied for a search warrant in the Eastern District of Virginia to use a device called a Network Investigative Technique (“NIT”). This device operated similarly to malware and “attached” to computers accessing the website, allowing the government …

Humans Forget, Machines Remember: Artificial Intelligence And The Right To Be Forgotten, Eduard Fosch Villaronga, Peter Kieseberg, Tiffany Li

Faculty Scholarship

To understand the Right to be Forgotten in context of artificial intelligence, it is necessary to first delve into an overview of the concepts of human and AI memory and forgetting. Our current law appears to treat human and machine memory alike – supporting a fictitious understanding of memory and forgetting that does not comport with reality. (Some authors have already highlighted the concerns on the perfect remembering.) This Article will examine the problem of AI memory and the Right to be Forgotten, using this example as a model for understanding the failures of current privacy law to reflect the …

Pii In Context: Video Privacy And A Factor-Based Test For Assessing Personal Information, Daniel L. Macioce Jr.

Pepperdine Law Review

As a central concept in American information privacy law, personally identifiable information (PII) plays a critical role in determining whether a privacy violation has occurred. Under the Video Privacy Protection Act of 1988 (VPPA), PII “includes information which identifies a person as having requested or obtained specific video materials or services.” Despite the clarity that these words may have when the Statute was enacted, the line separating PII from non-PII in the context of streaming video is not easily drawn, in part due to the prevalence of behavior tracking technologies and the emergence of “big data” analytics. The First Circuit, …

Mapping Legalzoom's Disruptive Innovation, Matthew T. Ciulla

The Journal of Business, Entrepreneurship & the Law

No abstract provided.

The Rise Of Artificial Intelligence In The Legal Field: Where We Are And Where We Are Going, Sergio David Becerra

The Journal of Business, Entrepreneurship & the Law

The twenty-first century has brought significant technological advancement that permeates all aspects of our lives. The legal field, though slow in the adaption of this technology, is beginning to pick up the pace. Artificial Intelligence (AI) technology is used now to perform legal work once completed solely by legal practitioners. This Comment outlines what AI is and reviews the current use of AI in the legal field. It also identifies AI products and developments that are in place. Finally, it argues that lawyers will always be needed in the practice of law, despite the continued growth of AI.

These Walls Can Talk! Securing Digital Privacy In The Smart Home Under The Fourth Amendment, Stefan Ducich

Duke Law & Technology Review

Privacy law in the United States has not kept pace with the realities of technological development, nor the growing reliance on the Internet of Things (IoT). As of now, the law has not adequately secured the “smart” home from intrusion by the state, and the Supreme Court further eroded digital privacy by conflating the common law concepts of trespass and exclusion in United States v. Jones. This article argues that the Court must correct this misstep by explicitly recognizing the method by which the Founding Fathers sought to “secure” houses and effects under the Fourth Amendment. Namely, the Court must …

The Song Remains The Same: What Cyberlaw Might Teach The Next Internet Economy, Kevin Werbach

Florida Law Review

The next stage of the digital economy will involve trillions of networked devices across every industry and sphere of human activity: The Internet of the World. Early manifestations of this evolution through on-demand services such as Uber and Airbnb raise a host of serious legal questions. The stage seems set for a decisive battle between regulation and innovation. Yet this perception is mistaken. In the end, the emerging businesses will welcome government engagement, and regulatory actors will accept creative solutions to achieve their goals. Why expect such a resolution? Because the same story played out twenty years ago, in the …

Fighting Technology With Technology: Taking Aim At Electronic Sales Suppression, Richard Thompson Ainsworth, Robert Chicoine

Faculty Scholarship

Electronic sales suppression (ESS) is a fraud that has been a (prominent) feature of the North American retail business since at least 1996. The first EES case in the US dates from 1981. ESS is a global problem. Depending on the jurisdiction, and the research study consulted, ESS is estimated to be present in 34% (of Canadian), 50% (of German – two studies), and 70% (of Swedish and Slovenian) businesses. It may be the case today, that “you cannot leave home without” encountering (or participating in) ESS.

The most common types of sales suppression technology are Zappers and Phantomware programming. …

Regulating Data As Property: A New Construct For Moving Forward, Jeffrey Ritter, Anna Mayer

Duke Law & Technology Review

The global community urgently needs precise, clear rules that define ownership of data and express the attendant rights to license, transfer, use, modify, and destroy digital information assets. In response, this article proposes a new approach for regulating data as an entirely new class of property. Recently, European and Asian public officials and industries have called for data ownership principles to be developed, above and beyond current privacy and data protection laws. In addition, official policy guidances and legal proposals have been published that offer to accelerate realization of a property rights structure for digital information. But how can ownership …

Extremist Speech, Compelled Conformity, And Censorship Creep, Danielle Keats Citron

Notre Dame Law Review

Silicon Valley has long been viewed as a full-throated champion of First Amendment values. The dominant online platforms, however, have recently adopted speech policies and processes that depart from the U.S. model. In an agreement with the European Commission, the dominant tech companies have pledged to respond to reports of hate speech within twenty-four hours, a hasty process that may trade valuable expression for speedy results. Plans have been announced for an industry database that will allow the same companies to share hashed images of banned extremist content for review and removal elsewhere. These changes are less the result of …

International Cybertorts: Expanding State Accountability In Cyberspace, Rebecca Crootof

Cornell Law Review

States are not being held accountable for the vast majority of their harmful cyberoperations, largely because classifications created in physical space do not map well onto the cyber domain. Most injurious and invasive cyberoperations are not cybercrimes and do not constitute cyberwarfare, nor are states extending existing definitions of wrongful acts permitting countermeasures to cyberoperations (possibly to avoid creating precedent restricting their own activities). Absent an appropriate label, victim states have few effective and nonescalatory responsive options, and the harms associated with these incidents lie where they fall.

This Article draws on tort law and international law principles to construct …

"Fake News," No News, And The Needs Of Local Communities, Carol Pauli

Faculty Scholarship

The Quaker authors had in mind an ancient truth - that "love endures and overcomes" - and they were convinced that this truth is accessible to all. This article addresses truth at a more immediate and mundane level. It is concerned with the accurate information that local communities need in order to thrive.

The article proceeds in three steps. Part I reviews one way community needs were addressed when the first large-scale electronic communication technology entered individual homes in the form of radio and television. In those days, broadcasters had an affirmative duty to ascertain the problems of the communities …

Minimum Virtual Contacts: A Framework For Specific Jurisdiction In Cyberspace, Adam R. Kleven

Michigan Law Review

As the ubiquity and importance of the internet continue to grow, courts will address more cases involving online activity. In doing so, courts will confront the threshold issue of whether a defendant can be subject to specific personal jurisdiction. The Supreme Court, however, has yet to speak to this internet-jurisdiction issue. Current precedent, when strictly applied to the internet, yields fundamentally unfair results when addressing specific jurisdiction. To better achieve the fairness aim of due process, this must change. This Note argues that, in internet tort cases, the “express aiming” requirement should be discarded from the jurisdictional analysis and that …

Risk And Anxiety: A Theory Of Data Breach Harms, Daniel Solove, Danielle K. Citron

Faculty Scholarship

In lawsuits about data breaches, the issue of harm has confounded courts. Harm is central to whether plaintiffs have standing to sue in federal court and whether their claims are viable. Plaintiffs have argued that data breaches create a risk of future injury from identity theft or fraud and that breaches cause them to experience anxiety about this risk. Courts have been reaching wildly inconsistent conclusions on the issue of harm, with most courts dismissing data breach lawsuits for failure to allege harm. A sound and principled approach to harm has yet to emerge, resulting in a lack of consensus …

Getting To The Root Of The Problem: Written Representations To The Select Committee On Deliberate Online Falsehoods, Yi Siong Sui, Aaron Yoong, Hao Ren Lyndon Choo, Lixin Chen

Research Collection Yong Pung How School Of Law

The phenomenon of the spread of deliberate falsehoods has been exacerbated in the current day and age with the usage of technology. An examination of this issue shows that that the motivations and reasons for spreading such falsehoods have not changed. Instead, the primary mischief lies in the near instantaneous dissemination and ease of access via internet intermediaries.Despite this, there is a gap in the regulatory tools available to deal with this mischief. The solution hence should lie in imposing some sort of liability on internet intermediaries to remove deliberate falsehoods. Nevertheless, it is crucial that such intermediary liability must …

Exposing Secret Searches: A First Amendment Right Of Access To Electronic Surveillance Orders, Hannah Bloch-Wehba

Faculty Scholarship

Although, as a rule, court proceedings and judicial records are presumptively open to the public, electronic surveillance documents are exceptions. Like ordinary search warrants, surveillance applications are considered ex parte. But court orders frequently remain sealed indefinitely, even when there is no basis for continued secrecy. Indeed, secrecy — in the form of gag orders, local judicial rules, and even clerical filing and docketing practices — is built into the laws that regulate electronic surveillance.

This Article argues that this widespread secrecy violates the First Amendment right of access to court proceedings and documents. The history of search and seizure …

Fair Use And Social Media, John Dettinger

All Musselman Library Staff Works

This poster was created in a collaborative effort by Musselman Library’s Copyright Committee as part of a display for Fair Use Week 2018. The poster was intended to get viewers to think about the 4 factors of fair use in the context of two art projects that used social media photos: Yolocaust by Shahak Shapira and New Portraits by Richard Prince. It was also intended to get viewers thinking about the ways their social media content might get used beyond the original intention.

Tax Compliance In A Decentralizing Economy, Manoj Viswanathan

Georgia State University Law Review

Tax compliance in the United States has long relied on information from centralized intermediaries—the financial institutions,employers, and brokers that help ensure income is reported and taxes are paid. Yet while the IRS remains tied to these centralized entities,consumers and businesses are not. New technologies, such as sharing economy platforms (companies such as Airbnb, Uber, and Instacart)and the blockchain (the platform on which various cryptocurrencies are based) are providing new, decentralized options for exchanging goods and services.

Without legislative and agency intervention, these technologies pose a critical threat to the reporting system underlying domestic and international tax compliance. Until now, legal …