Privacy Law Commons^™

Emerging Compliance In The Generative Decentralized Era, Nizan Geslevich Packin

Brooklyn Journal of Corporate, Financial & Commercial Law

Is it the end of compliance as we know it? Emerging technologies such as Artificial Intelligence (“AI”), including Generative AI (“GenAI”), and blockchain are reshaping regulatory compliance in the Web 3.0 era. As machine-generated data becomes the norm, traditional models reliant on human oversight are becoming obsolete, necessitating swift adaptation from regulators and industry stakeholders. Historically, compliance was designed to be managed by humans due to the need for critical thinking, ethical considerations, and nuanced decision-making. Yet, in today’s era, this approach is no longer viable. Addressing this need, Regulatory Technology (“RegTech”) has played a key role in modernizing compliance …

The Privacy Act Of 1974: The American Bill Of Rights On Data And Its Unfinished Business, Dongsheng Zang

Articles

In the midst of the artificial intelligence (“AI”) revolution and the debates around it in 2023, this Article proposes to revisit the history of the Privacy Act of 1974, a federal statute that attempted to revolutionize the notion of privacy in response to automated data processing in the computer age. By recognizing that an individual should have the right to control data about herself, the 1974 Act went beyond the Warren-Brandeis framework of privacy based on tort law—the 1974 Act was essentially an American Bill of Rights on data.

The Article first tracks the conceptual development of this new idea …

Tort Liability, Privacy, And Regulatory Considerations For Level 3 Autonomous Vehicles, Ryan H. Jones

Michigan Technology Law Review

Recent developments in emerging technology, such as artificial intelligence, robotics, and autonomous vehicles, have generated inquiries about the incorporation of these technologies into the law, as well as the philosophical and ethical questions that accompany their use. This paper considers existing legal doctrine and regulatory frameworks as applied to the niche area of Level 3 autonomous vehicles. Specifically, this paper considers tort liability in the form of negligence and products liability, privacy risks, and regulatory considerations in relation to Level 3 vehicles. Finally, societal risks and potential solutions are considered to provide insight into potential areas of additional work.

Unfenced: The Fourth Circuit Gives Geofencing Its First Appellate Go-Ahead In United States V. Chatrie, Jordan Wallace-Wolf

Washington and Lee Law Review Online

In United States v. Chatrie, the Fourth Circuit issued the first federal appellate opinion on the Fourth Amendment status of geofencing queries. The opinion is significant because geofences present a conceptual challenge to the framework of Carpenter v. United States, the reigning Supreme Court precedent on the Fourth Amendment status of digital searches. That opinion held that long-term tracking of a target individual was a search. However, geofencing reveals information about an indeterminate number of individuals for only a short time, in virtue of their being at a target location during a target span of time. Does the …

The False Choice Between Digital Regulation And Innovation, Anu Bradford

Northwestern University Law Review

This Article challenges the common view that more stringent regulation of the digital economy inevitably compromises innovation and undermines technological progress. This view, vigorously advocated by the tech industry, has shaped the public discourse in the United States, where the country’s thriving tech economy is often associated with a staunch commitment to free markets. U.S. lawmakers have also traditionally embraced this perspective, which explains their hesitancy to regulate the tech industry to date. The European Union has chosen another path, regulating the digital economy with stringent data privacy, antitrust, content moderation, and other digital regulations designed to shape the evolution …

Information Accountability Foundation Names Two Maurer Faculty To Leadership Positions, James Owsley Boyd

Keep Up With the Latest News from the Law School (blog)

he Information Accountability Foundation (IAF) has appointed two Indiana University Maurer School of Law faculty to lead the organization.

Fred H. Cate, a distinguished professor and C. Ben Dutton Professor of Law, was named the nonprofit think tank’s new executive director, while Stan Crosley, an adjunct faculty member and 1994 graduate of the Law School, was appointed chief policy strategist.

Founded in 2013, the IAF works with global regulators and industry executives to promote organizational accountability, data stewardship, and data ethics. Its mission is to help regulators and responsible companies better understand the challenges around Artificial Intelligence and data governance …

The Outer Limits Of Digital Privacy Protections: A Review Of The Privacy Fallacy, Michael Conklin

Dickinson Law Review (2017-Present)

No abstract provided.

Leading The Charge: How Increased Adoption Of Electric Vehicles Renews Calls For Data Privacy Protection In The United States, Patrick Rogers

William & Mary Environmental Law and Policy Review

This Note will examine the privacy risks associated with constructing the nationwide [electric vehicle] EV charging network and propose solutions to mitigate this risk. Part I of this Note will discuss the Biden Administration’s climate policy and legislation and focus on the transportation sector. Part II will explain EV charging and expound on the cybersecurity and privacy concerns of the charging process. Part III will survey the current regulatory landscape at the federal level and highlight California’s approach to data privacy. Finally, Part IV examines recently proposed federal and model state legislation in light of the Fair Information Practice Principles …

Back To The Future: Revisiting State Constitutions To Protect Against New Technological Intrusions, Matthew Radford

Washington and Lee Law Review

The Fourth Amendment is crucial for protecting Americans from government intrusion. However, new technologies such as pole cameras, reverse keyword searches, and geofence searches provide new ways for governments to gather information about individuals. As these new technologies develop, the Fourth Amendment has struggled to advance alongside this new technology.

Thankfully, the Fourth Amendment is not the only protection Americans have from government intrusion. Every single state has its own state constitution and analog to the Federal Fourth Amendment. In fact, some states had their own analog amendments even before the adoption of the Federal Fourth Amendment. While oftentimes the …

R. V. Bykovets: An Affirmation Of Canadians’ Right To Informational Privacy, Bertina Lou

Canadian Journal of Law and Technology

The R. v. Bykovets decision illustrates how new technological realities can reconfigure societal norms and values in ways that demand recognition in the eyes of the law. This case commentary summarizes the Supreme Court’s 2024 Bykovets decision and situates it in jurisprudence on Section 8 of the Canadian Charter in relation to informational privacy. It also demonstrates how the normative approach applied by the SCC in Bykovets, which reflects increased accountability for third parties to safeguard individuals’ privacy, appropriately reconciles divergences in jurisprudence over time.

La décision R c. Bykovets illustre comment les nouvelles réalités technologiques peuvent reconfigurer les …

Regulating Algorithmic Harms, Sylvia Lu

Law & Economics Working Papers

In recent years, the rapid expansion of artificial intelligence (AI) innovations has led to a rise in algorithmic harms—harms emerging from AI operations that pose significant threats to civil rights and democratic values in today’s technological landscape. A facial recognition system for improving criminal detection wrongly collected sensitive personal data and flagged racial minorities as shoplifters. A risk-prediction algorithm adopted to identify patients denied medical treatment to Black individuals with poor health conditions. A social media algorithm intended to boost social engagement exacerbated addictive behavior and mental illness in teenagers. These harms are becoming increasingly ubiquitous yet often manifest in …

Aligned With The Blueprint For An Ai Bill Of Rights? An Ai Transparency Evaluation Of Company Privacy Notices And Explanations, Jonathan A. Obar, Giuseppina D'Agostino, Motunrayo Akinyemi

Conference Papers

In its Blueprint for an AI Bill of Rights, the White House lists “notice and explanation” as one of five principles fundamental to protecting the American public as artificial intelligence (AI) is deployed. The Blueprint states “[y]ou should know that an automated system is being used and understand how and why it contributes to outcomes that impact you.” In its description of the notice/explanation principle, The White House emphasizes the importance of plain language explanations about AI use. Furthermore, a company should describe how it plans to use AI systems, how the systems work, and explain any risks to consumers. …

Train Or Restrain? Using International Perspectives To Inform The American Fair Use Analysis Of Copyright In Generative Artificial Intelligence Training, Serena Lightstone

Northwestern Journal of International Law & Business

The rise of generative artificial intelligence (“AI”) has brought questions regarding the permissibility of using copyrighted materials in training generative AI systems around the globe. This article examines whether such use constitutes infringement under the American fair use doctrine, drawing insights from the regulatory approaches of the European Union (EU) and Japan.

Ultimately, this article advocates for United States courts to recognize the permissibility of using copyrighted materials in training generative AI models, rejecting the EU’s rights-holder-centric approach, and going beyond Japan’s limited-permissibility solution. Through a detailed four-factor fair use analysis, this article demonstrates that training generative AI on copyrighted …

“Can I Have It Non-Personalised?” An Empirical Investigation Of Consumer Willingness To Share Data For Personalized Services And Ads, Monika Leszczynska, Daria Baltag

Faculty Scholarship

European regulators, courts, and scholars are currently debating the legality of data processing for personalization purposes. Should businesses require separate consent for processing user data for personalized advertising, especially when offering free services reliant on such ads for revenue? Or is general consent for the contract enough, given personalized advertising’s role in fulfilling contractual obligations? This study investigates whether these legal distinctions reflect differences in people’s willingness to share data with businesses for personalization. Are consumers less willing to share their data for personalized advertising than for personalized services that they clearly contracted for? Does that change if the service …

The Post-Dobbs Reality: Privacy Expectations For Period-Tracking Apps In Criminal Abortion Prosecutions, Sophie L. Nelson

Pepperdine Law Review

The Supreme Court’s decision to overturn Roe v. Wade and Planned Parenthood v. Casey in June 2022 was met with waves of both support and criticism throughout the United States. Several states immediately implemented or began drafting trigger laws that criminalize seeking and providing an abortion. These laws prompted several period-tracking app companies to encrypt their users’ data to make it more difficult for the government to access period- and pregnancy-related information for criminal investigations. This Comment explores whether the Fourth Amendment and U.S. privacy statutes protect users of period-tracking apps from government surveillance. More specifically, this Comment argues that …

Content Moderation And The Least Cost Avoider, Paul Rosenzweig

Joint PIJIP/TLS Research Paper Series

No abstract provided.

Fitting A Block Into A Sphere Mold: The Inadequacy Of Current Data Privacy Regulations In Protecting Data Privacy Within The Blockchain Space, Jenny Yang

Washington and Lee Journal of Civil Rights and Social Justice

Despite global imposition of data privacy laws and regulations, data privacy is a nonexistent luxury amongst the data-charged world we live in. Data privacy has long been established as a fundamental right. Entities have successfully established robust methodologies around existing data privacy laws and regulations to utilize past consumer behavior to predict, impact and manipulate current and future consumer behaviors. This phenomenon has been commonly coined as “corporate surveillance.” Emerging spaces arising through technological developments have greater access into consumer data to impact economic choices. Specifically, the blockchain space, through its unique open-source and permanent traits, has been able to …

Skirting The Fourth Amendment: How Law Enforcement Agencies Abuse Technology And Constitutional Exceptions To Surveille The Public, Matthew Lloyd

Washington and Lee Journal of Civil Rights and Social Justice

Existing Fourth Amendment law does not protect against law enforcement use of data gathered through the internet either by private companies who actively search their customer’s data and submit evidence of misconduct to law enforcement or from private companies who acquire the data on behalf of law enforcement. In an effort to pursue criminals, courts have permitted Fourth Amendment jurisprudence to develop in a manner that permits sweeping invasions of privacy without any probable cause through the private search doctrine or without any procedural protections through the third-party doctrine. It will require substantial judicial or legislative action to return the …

Personal Data And Vaccination Hesitancy: Covid-19’S Lessons For Public Health Federalism, Charles D. Curran

Catholic University Law Review

During the COVID-19 vaccination campaign, the federal government adopted a more centralized approach to the collection of public health data. Although the states previously had controlled the storage of vaccination information, the federal government’s Operation Warp Speed plan required the reporting of recipients’ personal information on the grounds that it was needed to monitor the safety of novel vaccines and ensure correct administration of their multi-dose regimens.

Over the course of the pandemic response, this more centralized federal approach to data collection added a new dimension to pre-existing vaccination hesitancy. Requirements that recipients furnish individual information deterred vaccination among undocumented …

The Lack Of Responsibility Of Higher Education Institutions In Addressing Phishing Emails And Data Breaches, Muxuan (Muriel) Wang

Duke Law & Technology Review

Higher education institutions (HEIs) are highly susceptible to cyberattacks, particularly those facilitated through phishing, due to the substantial volume of confidential student and staff data and valuable research information they hold. Despite federal legislations focusing on bolstering cybersecurity for critical institutions handling medical and financial data, HEIs have not received similar attention. This Note examines the minimal obligations imposed on HEIs by existing federal and state statutes concerning data breaches, the absence of requirements for HEIs to educate employees and students about phishing attacks, and potential strategies to improve student protection against data breaches.

Techno-Legal Solutionism: Regulating Children's Online Safety In The United States, Maria P. Angel, Danah Boyd

Scholarly Works

Convinced that social media is directly harming children, policymakers have started to introduce legislation that requires technology companies to be safe by design through “duty of care” provisions. Unlike regulations that focus on product safety, these bills incorporate technosolutionist logics into regulation by presuming that technology companies can remedy complex harms like mental health duress and bullying if their products were only designed better. In this paper, we unpack the theory of change at the center of the “duty of care” included in the “Kids Online Safety Act” (KOSA). We argue that techno-legal solutionism is both ineffective as a framework …

Legal And Ethical Challenges Raised By Advances In Brain-Computer Interface Technology, Colin Conrad, Carla Heggie

Canadian Journal of Law and Technology

Brain-computer interfaces (BCI) consist of hardware and software that allow humans to control computers with their brain signals alone. Though these technologies are not new, existing approaches to BCI are either very limited in their capabilities or require highly invasive surgery. However, BCI has recently received increased attention due to advances that enable enhanced usability with less invasive approaches. Such advances could radically change the acceptance of the technology and BCI might become commonplace in the coming decades. In this article, we provide a technology scholar’s perspective on how these recent advances in BCI present new legal and ethical considerations. …

More Than ‘‘Responsible Ai” Bridging Artificial Intelligence Systems (Ais) And Aisystems Ethics Into Practice, Ruth Bankey

Canadian Journal of Law and Technology

This article reflects on the question ‘‘how should we approach the ethics of AI and technology?” through the example of how the Canada Revenue Agency (CRA) is working within this space to develop its Artificial Intelligence Systems (AIS) Ethics Lifelong Learning and Professional Development Strategy. This strategy is connected, but also acts as a critical counterpoint, to approaches to AI governance and accountability that are reliant on a notion of ‘‘Responsible AI”. In these contexts, responsible AI is understood as the regulatory adoption of ‘‘rules” diffused through a normative structure of hierarchical authority within the organization or business. Rather, this …

Legal Framework For The Use Of Artificial Intelligence (Ai) Technology In The Canadian Criminal Justice System, Gideon Christian

Canadian Journal of Law and Technology

This article seeks to identify and examine critical issues arising from the deployment and use of AI recidivism risk assessment tools in the Canadian criminal justice system. It commences with the historical evolution of these tools in the criminal justice system, tracing their development from the first generation to the emergence of AI-driven risk assessments. By examining the progression of risk assessment tools from their origins to the current AI-powered systems this research aims to provide a comprehensive understanding of the challenges and opportunities that these tools present. The article then delves into crucial issues such as algorithmic bias, highlighting …

Critical Data Theory, Margaret Hu

William & Mary Law Review

Critical Data Theory examines the role of AI and algorithmic decisionmaking at its intersection with the law. This theory aims to deconstruct the impact of AI in law and policy contexts. The tools of AI and automated systems allow for legal, scientific, socioeconomic, and political hierarchies of power that can profitably be interrogated with critical theory. While the broader umbrella of critical theory features prominently in the work of surveillance scholars, legal scholars can also deploy criticality analyses to examine surveillance and privacy law challenges, particularly in an examination of how AI and other emerging technologies have been expanded in …

Trinity Western University Decisions And Engineers’ Equity, Diversity, And Inclusion Obligations Under The Statutory Public Interest Mandate, Michelle Liu, Vanessa Matta

Canadian Journal of Law and Technology

Engineers create technologies but do not sufficiently care for their biased and inequitable outcomes despite the engineering profession’s statutory mandate to protect the public interest. The engineering and legal professions’ similar admission processes and statutory provisions mandating the protection of public interest may justify applying the Supreme Court of Canada’s interpretation of the legal profession’s public interest mandate in the Trinity Western University decisions to the engineering profession. The Supreme Court’s interpretation centres on equal access to the profession, diversity within its membership, and protection of 2SLGBTQ+ persons. The work begins by setting out the definitions and challenges of equity, …

The Automated Fourth Amendment, Maneka Sinha

Faculty Scholarship

Courts routinely defer to police officer judgments in reasonable suspicion and probable cause determinations. Increasingly, though, police officers outsource these threshold judgments to new forms of technology that purport to predict and detect crime and identify those responsible. These policing technologies automate core police determinations about whether crime is occurring and who is responsible. Criminal procedure doctrine has failed to insist on some level of scrutiny of—or skepticism about—the reliability of this technology. Through an original study analyzing numerous state and federal court opinions, this Article exposes the implications of law enforcement’s reliance on these practices given the weighty interests …

Masthead

Catholic University Journal of Law and Technology

No abstract provided.

Table Of Contents

Catholic University Journal of Law and Technology

No abstract provided.

Understanding The Line Between Art And Abuse: How Generative Ai Changes The Landscape Of Child Sexual Abuse Materials, Amy Trivison

Catholic University Journal of Law and Technology

No abstract provided.