Privacy Law Commons^™

The Need For Cyber Resilience Of Space Assets: Law And Policy Considerations Of Ensuring Cybersecurity In Outer Space, Daniella Febbraro

Canadian Journal of Law and Technology

In 2018, NASA’s Jet Propulsion Laboratory was the subject of a data breach where over 500 megabytes of data from a major mission system was stolen by hackers. This attack affected NASA’s Deep Space Network, prompting the United States Johnson Space Center to disconnect the International Space Station from the affected gateway due to fears that mission systems could become compromised. NASA has acknowledged that its vast online presence, which includes thousands of publicly accessible datasets, offers a large potential target for cybercriminals. The 2018 incident was one of many, with NASA experiencing more than 6000 cyberattacks from 2017-2021 alone. …

What You Don’T Know Will Hurt You: Fighting The Privacy Paradox By Designing For Privacy And Enforcing Protective Technology, Perla Khattar

Washington Journal of Law, Technology & Arts

The persistence of the privacy paradox is proof that current industry regulation is insufficient to protect consumer’s privacy. Although consumer choice is essential, we argue that it should not be the main pillar of modern data privacy legislation. This article argues that legislation should aim to protect consumer’s personal data in the first place, while also giving internet users the choice to opt-in to the processing of their information. Ideally, privacy by design principles would be mandated by law, making privacy an essential component of the architecture of every tech-product and service.

Opaque Notification: A Country-By-Country Review, Lauren Mantel

Joint PIJIP/TLS Research Paper Series

No abstract provided.

From Hashtag To Hash Value: Using The Hash Value Model To Report Child Sex Abuse Material, Jessica Mcgarvie

Seattle Journal of Technology, Environmental, & Innovation Law

In the summer of 2021, Apple announced it would release a Child Safety Feature (CSF) aimed at reducing Child Sex Abuse Materials (CSAM) on its platform. The CSF would scan all images a user uploaded to their iCloud for CSAM, and Apple would report an account with 30 or more flagged images to the National Center for Missing and Exploited Children. Despite Apple’s good intentions, they received intense backlash, with many critics arguing the proposed CSF eroded a user’s privacy. This article explores the technology behind Apple’s CSF and compares it to similar features used by other prominent tech companies. …

A New Right Is The Wrong Tactic: Bring Legal Actions Against States For Internet Shutdowns Instead Of Working Towards A Human Right To The Internet (Part 1), Jay Conrad

Seattle Journal of Technology, Environmental, & Innovation Law

A New Right is the Wrong Tactic: Bring Legal Actions Against States for Internet Shutdowns Instead of Working Towards a Human Right to the Internet (Part 1) is the first of a two-part series dealing with an increasingly prevalent threat to human rights: State-sanctioned Internet shutdowns. Part 1 details the current tactics and impacts of Internet shutdowns and which human rights are most likely to be violated by or during a shutdown. Part 2 will address the deficiencies of advocating for Internet access to be a recognized human right as a means of combatting shutdowns. Despite the popularity of this …

Aclu V. Clearview Ai, Inc.,, Isra Ahmed

DePaul Journal of Art, Technology & Intellectual Property Law

No abstract provided.

Texas’ War On Social Media: Censorship Or False Flag, Leni Morales

DePaul Journal of Art, Technology & Intellectual Property Law

No abstract provided.

Your Biometric Data Is Concrete, Your Injury Is Imminent And Particularized: Articulating A Bipa Claim To Survive Article Iii Standing After Transunion V. Ramirez, Kelsey L. Kenny

Maine Law Review

Biometric data is a digital translation of self which endures in its accuracy for one’s entire lifespan. As integral elements of modern life continue to transition their operations exclusively online, the verifiable “digital self” has become indispensable. The immutable and sensitive nature of biometric data makes it peculiarly vulnerable to misappropriation and abuse. Yet the most frightening is the unknown. For an individual who has had their digital extension-of-self covertly stolen or leaked, the dangers that lie in the technology of the future are innumerable. The Illinois legislature recognized the danger associated with the cavalier collection and handling of biometric …

About-Face: How Facebook’S Restrictions On User Posts Could Violate Antitrust Law, Efrem Berk

Northwestern Journal of Technology and Intellectual Property

This Note examines whether Facebook’s restrictions on its users’ posts are subject to Sherman Act § 2. This Note looks at the economic activity generated by social media activity and argues that posts are commerce. While this piece finds that current antitrust jurisprudence likely favors Facebook, an alternative approach sought by some antitrust scholars could influence judges to preclude the platform’s restrictions.

Who Owns Data? Constitutional Division In Cyberspace, Dongsheng Zang

Articles

Privacy emerged as a concern as soon as the internet became commercial. In early 1995, Lawrence Lessig warned that the internet, though giving us extraordinary potential, was “not designed to protect individuals against this extraordinary potential for others to abuse.” The same technology can “destroy the very essence of what now defines individuality.” Lessig urged that “a constitutional balance will have to be drawn between these increasingly important interests in privacy, and the competing interest in collective security.” Lessig envisioned that creating property rights in data would help individuals by giving them control of their data. As utopian as property …

Understanding Dark Patterns In Home Iot Devices, Monica Kowalczyk, Johanna Gunawan, David Choffnes, Daniel J. Dubois, Woodrow Hartzog, Christo Wilson

Faculty Scholarship

Internet-of-Things (IoT) devices are ubiquitous, but little attention has been paid to how they may incorporate dark patterns despite consumer protections and privacy concerns arising from their unique access to intimate spaces and always-on capabilities. This paper conducts a systematic investigation of dark patterns in 57 popular, diverse smart home devices. We update manual interaction and annotation methods for the IoT context, then analyze dark pattern frequency across device types, manufacturers, and interaction modalities. We find that dark patterns are pervasive in IoT experiences, but manifest in diverse ways across device traits. Speakers, doorbells, and camera devices contain the most …

The Limitations Of Privacy Rights, Daniel J. Solove

Notre Dame Law Review

Individual privacy rights are often at the heart of information privacy and data protection laws. The most comprehensive set of rights, from the European Union’s General Data Protection Regulation (GDPR), includes the right to access, right to rectification (correction), right to erasure (deletion), right to restriction, right to data portability, right to object, and right to not be subject to automated decisions. Privacy laws around the world include many of these rights in various forms.

In this Article, I contend that although rights are an important component of privacy regulation, rights are often asked to do far more work than …

Comment: The United Nations And Robot Rights, Heather Alexander

Canadian Journal of Law and Technology

This comment predicts that robot rights under the law are likely to become a reality in the next fifty years, possibly in multiple countries, as governments pass laws granting rights to robots, including civil rights like voting. This comment calls on the United Nations (‘‘UN”) to be pro-active in guiding the emergence of robot rights by convening a working group on robot rights to better guide member states through what will be a time of momentous change.

Why are robots likely to soon gain rights in some UN member states? There have been huge advances in AI that can pass …

Regulating Uncertain States: A Risk-Based Policy Agenda For Quantum Technologies, Tina Dekker, Florian Martin-Bariteau

Canadian Journal of Law and Technology

Many countries are taking a national approach to developing quantum strategies with a strong focus on innovation. However, societal, ethical, legal, and policy considerations should not be an afterthought that is pushed aside by the drive for innovation. A responsible, global approach to quantum technologies that considers the legal, ethical, and societal dimensions of quantum technologies is necessary to avoid exacerbating existing global inequalities. Quantum technologies are expected to disrupt other transformative technologies whose legal landscape is still under development (e.g., artificial intelligence [‘‘AI”], blockchain, etc.). The shortcomings of global policies regarding AI and the digital context teach lessons that …

Crowdsourcing Justice, Matthew Dylag

Canadian Journal of Law and Technology

Social media has become ubiquitous in the daily lives of Canadians. Beyond connecting with friends and family, people also turn to social media to find information and seek advice on any number of topics, be it home cooking, workout routines, or automobile purchases. Indeed, social media is a flexible vehicle that can be leveraged for communication on almost any topic. It is not surprising, therefore, that individuals are also turning to social media to help resolve their legal problems. Even a cursory examination of social media will reveal that it is not uncommon for individuals who are experiencing legal difficulties …

From Cartier To Codification: Website-Blocking Injunctions And Third-Party Internet Service Provider Respondents, Dan Mackwood

Canadian Journal of Law and Technology

In recent years, the proliferation of commercial-scale copyright infringement through unauthorized online content streaming has created persisting legal hurdles for Canadian rights holders seeking redress. John Doe defendants in online copyright disputes can easily preserve their anonymity and operate their infringing enterprises from unknown locations, undeterred by injunctions issued against them directly. These anonymized administrators of illicit streaming platforms offer users unauthorized access to content for a lower cost than or as a free alternative to the access provided by the legitimate rights holder. This form of copyright infringement has reportedly resulted in up to hundreds of thousands of lost …

Cryptocurrencies And Climate Change: A Net-Zero Paradox, Jason Maclean

Canadian Journal of Law and Technology

Cryptocurrencies pose a number of complex law and policy problems, the most pressing of which are the industry’s climate and environmental impacts. This article examines the climate and environmental impacts of crypto-assets in the broader law and policy context of the UN Paris Agreement and the global goal of reaching net-zero emissions by 2050 or earlier. This approach not only illuminates the limitations and paradoxical nature of the crypto-industry’s climate commitments, but also the limitations and paradoxical nature of ‘‘net zero” itself as the predominant framing of national, subnational, and nonstate actors’ climate pledges. The article concludes by examining the …

Copyright Throughout A Creative Ai Pipeline, Sancho Mccann

Canadian Journal of Law and Technology

Consider the following fact pattern.

Alex paints some original works on canvas and posts photos of them online. Becca downloads those images and uses them to train an AI (training configures the AI’s model parameters to useful values). Becca posts the resulting trained parameter values on her website under a license that reserves to Becca the right to use the parameters commercially. Cory uses those parameter values in a program that is designed to produce artwork. Cory clicks create and the program produces a work. This work is new to Cory, but it looks a lot like one of Alex’s …

Perceiving Critical Infrastructure With A New Awareness Of Cyber Risk, Duncad Card

Canadian Journal of Law and Technology

North America’s critical infrastructure has been the subject of cyber-attack, in various cycles of activity, for many years. In March of 2017, a cyber-attack caused periodic ‘‘blind-spots” for electricity distribution grid operators in the Western US for about 10 dangerous hours. In May of this year, there was panic at the gas pumps across many States in southeastern United States, which has been attributed to a cyber-attack on a major US pipeline that disrupted fuel supplies to the US East coast. US Commerce Secretary Raimondo soon after that attack announced that those sorts of attacks are becoming more frequent and …

Book Review Rethinking The Jurisprudence Of Cyberspace, David Cowan

Canadian Journal of Law and Technology

It is a common claim that law is always catching up with technology. This is not entirely fair. The European Union’s General Data Protection Regulation1 (GDPR) could be viewed as a case of technology having to catch up to the law. That said, clearly there are challenges in law and in the legal profession, both in terms of how the law can adapt to changes in the digital world and the disruption of the legal profession. On the former point, there are perhaps three broad schools of thought: existing law is sufficient for adapting to new technological challenges, as it …

Crispr, Like Any Other Technology: Shedding Determinism & Reviving Athens, Jon Khan

Canadian Journal of Law and Technology

This article examines current narratives surrounding CRISPR (clustered regularly interspaced short palindromic repeats) and the current Canadian treatment of this novel biotechnology. It argues that Canada’s current approach to genetic research and CRISPR appear to have succumbed to the false narrative of technological determinism. It argues that Canada must buck the narrative and alter the current status quo in two principal ways: Canada should pursue more somatic CRISPR clinical trials in humans and permit pre-clinical germline editing. To design a regulatory regime for clinical germline editing and better guidance on somatic CRISPR clinical trials, Canada should engage Deliberative Polling to …

Recognizing Operators’ Duties To Properly Select And Supervise Ai Agents – A (Better?) Tool For Algorithmic Accountability, Richard Zuroff

Canadian Journal of Law and Technology

In November of 2020, the Privacy Commissioner of Canada proposed creating GDPR-inspired rights for decision subjects and allowing financial penalties for violations of those rights. Shortly afterward, the proposal to create a right to an explanation for algorithmic decisions was incorporated into Bill C-11, the Digital Charter Implementation Act. This commentary proposes that creating duties for operators to properly select and supervise artificial agents would be a complementary, and potentially more effective, accountability mechanism than creating a right to an explanation. These duties would be a natural extension of employers’ duties to properly select and retain human employees. Allowing victims …

If A Machine Could Talk, We Would Not Understand It: Canadian Innovation And The Copyright Act’S Tpm Interoperability Framework, Anthony D. Rosborough

Canadian Journal of Law and Technology

This analysis examines the legal implications of technological protection measures (‘‘TPMs”) under Canada’s Copyright Act. Through embedded computing systems and proprietary interfaces, TPMs are being used by original equipment manufacturers (‘‘OEMs”) of agricultural equipment to preclude reverse engineering and follow-on innovation. This has anti-competitive effects on Canada’s ‘‘shortline” agricultural equipment industry, which produces add-on or peripheral equipment used with OEM machinery. This requires interoperability between the interfaces, data formats, and physical connectors, which are often the subject of TPM control. Exceptions under the Act have provided little assistance to the shortline industry. The research question posed by this analysis is: …

Harmful Speech And The Covid-19 Penumbra, Kenneth Grad, Amanda Turnbull

Canadian Journal of Law and Technology

We make two central claims in this essay. First, the themes of malinformation have remained remarkably consistent across pandemics. What has changed is only the manner of their spread through evolving technologies and globalization. Thus, as with pandemic preparedness more generally, our failure to take proactive measures reflects a failure to heed the lessons of the past. Second, we argue that the COVID-19 pandemic presents a unique opportunity to tackle online falsehoods and mitigate their impact in the future.

We proceed in three parts. Part one addresses the harmful speech that inevitably follows in pandemic’s wake. We illustrate this through …

The Adverse Human Rights Impacts Of Canadian Technology Companies: Reforming Export Control With The Introduction Of Mandatory Human Rights Due Diligence, Siena Anstis, Rj Reid

Canadian Journal of Law and Technology

Netsweeper, a Canadian company, has produced and sold Internet-filtering technology to authoritarian regimes abroad. According to public research from the Citizen Lab, this technology has been used to censor religious content in Bahrain, information on Rohingya refugees in Myanmar and India, political campaign content in United Arab Emirates, and information on HIV/AIDS in Kuwait. This article considers how Canadian export control law deals with technologies that negatively impact human rights abroad and identifies a gap in the existing export control scheme. We suggest this gap could be closed by adopting a proactive human rights due diligence requirement on companies seeking …

Digital Surveillance Of Covid-19: Privacy And Equity Considerations, Elaine Gibson, Cal Dewolfe, Ilana Luther

Canadian Journal of Law and Technology

In this paper, we examine the potentially deleterious effects of surveillance on vulnerable Canadians. A wide range of digital surveillance technologies have either been deployed or considered for deployment both in Canada and around the world in response to the international emergency created by the COVID-19 pandemic. Some of these technologies are highly effective in predicting or identifying individual cases and/or outbreaks; others assist in tracing contacts or enforcing compliance with quarantine and isolation measures. However, there are necessarily risks associated with their deployment. First are the infringements on privacy rights of citizens and groups. Second, these technologies run the …

Kepastian Hukum Kantor Perwakilan Badan Usaha Jasa Konstruksi Asing Dalam Melakukan Kegiatan Usaha Di Indonesia, Emy Mutia Zahrina

"Dharmasisya” Jurnal Program Magister Hukum FHUI

Representative offices are present in Indonesia in order to meet the needs of global economic growth in all countries. Multinational companies expand their business to other countries through relocation policies. The aim is none other than an effort to reduce production costs through a number of comparative advantages possessed by Indonesia as well as seizing such a large market for these products, and through this way multinational companies benefit. The presence of representative offices in Indonesia is regulated by Presidential Decree Number 90 of 2000 concerning Representative Offices of Foreign Companies. Through the Presidential Decree, the government limits the scope …

Cross-Border Transfer Pricing Sebagai Tindakan Tax Avoidance, Elleanor Rigby Bangun

"Dharmasisya” Jurnal Program Magister Hukum FHUI

Transfer Pricing refers to pricing transaction within and between enterprises situated in different countries and belong to the same multinational group. Cross-border transaction inevitably affects international taxation, especially when multinational enterprises encounter two or more countries that apply different tax collection systems. Consequently, a Tax Treaty (Perjanjian Penghindaran Pajak Berganda/P3B) is made to resolve issues involving double taxation. However, since the Tax Treaty’s benefits vary by country, the investors or companies tend to abuse the agreement in order to gain the most profitable benefits or incentives. Abusing the benefits of Tax Treaty (P3B) could be categorized as an act against …

Resentralisasi Kewenagan Pengelolaan Pertambangan Mineral Dan Batura, Muhammad Salman Al Farisi

"Dharmasisya” Jurnal Program Magister Hukum FHUI

Amendments to Law No. 4 of 2009 became Law No. 4 of 2009 withdrawing almost all local government authority into central authority. Leaving room for delegation of some of the authority of the Central Government to provincial regional governments for the issuance of IPR and SIPB, even district-city governments no longer have space for authority over coal mineral mining matters. the authority of provincial or district/city regional governments in mining affairs, is a concurrent matter which in its handling involves the central government and regional governments, withdraws most of the authority and does not involve regional governments, of course it …

Analisis Terhadap Penerapan Asas Formil Dan Materiil Pembentukan Rancangan Undang-Undang Tentang Penghapusan Kekerasan Seksual, Siti Sharhana Drajat

"Dharmasisya” Jurnal Program Magister Hukum FHUI

Sexual violence in Indonesia has caused a public’s worry. The bill on the elimination of sexual violence (RUU PKS) is considered very important to be passed. Purpose of this article is to analyze the suitability of the principles in the RUU PKS with Indonesian act of Formulation of Laws and Regulation Number 12 of 2011 (UU P3). The method used in writing this article uses the normative legal research. Results of this study are formal principles in the anti sexual violence bill is appropriate with the UU P3 except the principle of openness. Likewise with the material principles in the …