Privacy Law Commons^™

Striving To Thrive: Balancing Digital Health Innovation And Patient Protection Under Thailand’S Legal Framework, Thidarat Liamsomboon

Theses and Dissertations

The digitalization of health care has fundamentally transformed how health care services are accessed, delivered, and experienced worldwide. Telemedicine, artificial intelligence–assisted diagnostics, electronic health records, wearables, and mobile health applications are no longer novelties, but have become a substantial part of a modern clinical practice. Although these technologies offer great prospects for making health care more accessible, reducing administrative burden, and improving the quality of care, they also pose significant legal and regulatory challenges. The rate of technological development has far outpaced Thailand’s existing legal frameworks for regulating medical practice, professional accountability, and patient protection. This regulatory “lag” has generated …

Richmond Electronic Monitoring: The City Sees You While You're Sleeping, Fakira D. Johnson

Law Student Publications

The United States has increasingly recognized its reputation as a prison state, with widespread acknowledgment of its high incarceration rates. As of 2021, the United States imprisoned one out of every five prisoners in the world. Additionally, of its own population, the United States imprisoned one out of every one hundred people.

In response to this notoriety, worsening prison overcrowding, and the heightened risks posed by the COVID-19 pandemic, all fifty states, the District of Columbia, and the federal government increased their utilization of alternative measures to traditional incarceration. As both an addition and an alternative to traditional incarceration, criminal …

Data Rights For Workers, Pauline Kim, Rachel Leavitt

Scholarship@WashULaw

Workers are subject to immense amounts of data collection on the job, and the algorithmic management tools built with that data can produce negative effects, including deskilling jobs, unstable work hours, reduced wages, and dangerous and degrading working conditions. Workers thus have significant interests how their data are collected and used, and yet they have been excluded from nearly all the recently enacted or proposed data protection laws. Their exclusion stems from data protection’s roots in privacy law and theory, which primarily focused on consumers as data subjects. Current data protection laws, even if expanded to cover workers, would provide …

From Privacy To The Data Economy: The Ftc’S Reframing Of Its Regulatory Priorities, Maria P. Angel

Scholarly Works

This Article argues that the Federal Trade Commission’s turn to “commercial surveillance” reflects a strategic shift away from traditional privacy frameworks toward addressing structural power dynamics in the data economy. Drawing on an analysis of 112 FTC documents, it identifies three core commitments: tackling systemic harms, adopting a political economy lens, and constraining corporate power. The Article contends that this reframing is both necessary in the AI age and should influence the future of privacy regulation in the United States, even amid efforts to limit the FTC’s authority.

Forget Me Not? Machine Unlearning’S Implications For Privacy Law, Jevan Hutson, Cedric Whitney, Jay T. Conrad

Articles

Generative AI systems are increasingly relied on and are already actively reshaping how we think about privacy and data protection law. Models ingest and process vast amounts of personal and sensitive data, challenging assurances of compliance with legal frameworks like the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) with increasing intensity. Machine unlearning is an emerging tool in practitioners’ attempts to address these challenges: the act of selectively removing or suppressing specific data, such as personal data that a data subject requests be deleted, from AI models as means of complying with legal obligations or …

Owning Data: Semantic Control As Inaccess To Information, Zvikomborero Chadambuka

FIU Law Review

This Article discusses the impacts of the introduction of a data ownership scheme on access to information. It does so with reference to the distinction between data, defined as some representation of information by a specific medium (the syntactic level), and the information itself (the semantic level). With respect to data, it then looks at the difference between standard property rights and intellectual property (IP) rights, similarly assessing impacts on access to information. Private control at the semantic level is bad policy as it effects particularly serious limitations, relative to private control at the syntactic level, on the availability of …

Let’S Talk About The Biological Reality Of Sex, Baby, John Parsi

FIU Law Review

Sex is at the very core of individual identity. It affects the conception of the self and the way others view the individual. Every day, one’s sex may open and close doors, access to communities, and opportunities. Laws that define sex may affirm scientific knowledge and protect people, or threaten to unravel the facts and the reality of sex. A deep unmooring of sex is underway, and this Article aims to halt it. On day one of the current presidential term, January 20, 2025, President Trump signed an Executive Order on “Defending Women from Gender Ideology Extremism and Restoring Biological …

Beyond Digital Pessimism: How A Focus On Trust Can Enhance Eu Digital Law, Neil Richards, Woodrow Hartzog, Claire Boine, Lea Despotis

Faculty Scholarship

Lawmakers looking to foster technological innovation on the European market are adopting laws they hope will promote consumer trust in digital products. Their strategy can be broken down into three components. First, they aim to empower consumers to choose how much data they want to share with companies through an express consent framework. Second, they seek to avoid harms from digital products through product safety law such as adapting the Product Safety Regulation to digital products or adopting the AI Act. Third, they endeavor to prevent manipulation of consumers through digital means.

In this essay, we argue that while laudable, …

Against Ai Half Measures, Woodrow Hartzog, Neil Richards, Ryan Durrie, Jordan Francis

Faculty Scholarship

So far, U.S. consumer protection policy for artificial intelligence (AI) accountability has largely consisted of industry-led approaches such as encouraging transparency, mitigating bias, promoting principles of ethics, and empowering people. These approaches are vital, but they are only half measures. To bring AI within the rule of law, lawmakers must start drawing substantive lines.

In this Article, we identify four AI regulatory approaches to consumer, data, and democratic harms as half measures. First, transparency does not produce accountability on its own. Second, while mitigating bias in AI systems is critical, even unbiased systems are a threat to the vulnerable. Third, …

Privacy’S Autonomy Thicket: Disentangling Choice, Consent And Control, Jordan Francis, Woodrow Hartzog, Neil Richards

Faculty Scholarship

When it comes to talking about autonomy, privacy law could use a little clarity. Its discourse uses terms like “choice,” “consent,” and “control” to evoke autonomy, but these terms are too rarely defined and too often used interchangeably, even though they can mean very different things. The three terms have become entangled in a way that has become confusing and counterproductive. We call this problem “privacy’s autonomy thicket,” and it matters because it encourages talking past each other in policy debates, enabling the redefinition of these terms in misleading ways that produce weak and disempowering “notice and choice” regimes.

In …

Tapping Out Of The Wiretap: Whether Consumers Have A Reasonable Expectation Of Privacy Against Internet Tracking Technology, Ashley Faranesh

Brooklyn Journal of Corporate, Financial & Commercial Law

The California Invasion of Privacy Act (CIPA), a statute born in an era of rotary phones and analog surveillance, is now at the heart of a legal crisis over internet tracking and privacy. Plaintiffs have increasingly weaponized the CIPA against online businesses that use standard Web-tracking tools, triggering a wave of litigation that stretches the statute far beyond its intended purpose. This Note argues that such application misreads the legislative intent behind the CIPA and risks destablizing core structures of the internet economy and financially crippling online businesses. Courts applying literal interpretations are undermining the CIPA’s purpose by conflating commonplace …

Frankenstein Sinatra: The Argument For A Federal Postmortem Right Of Publicity In The Ai-Era, Ian Samide

Brooklyn Journal of Corporate, Financial & Commercial Law

Artificial Intelligence has fundamentally revolutionized the way media is generated and presents new and unique threats to the right of publicity. By enabling users to create high-quality, realistic deep fakes of individuals’ voices, images, or likenesses, Artificial Intelligence has created novel risks to the right of publicity. Additionally, right of publicity is currently governed by state law. This system is proving to be flawed in the internet age, as content is rarely confined to a single jurisdiction, resulting in unpredictability and juridical disputes. This note argues that a federal right of publicity is necessary to regulate Artificial Intelligence effectively and …

Between Sovereignty And Commons: Legal Frameworks For Digital Data Governance In India, Anushka Sachan

Journal of Law and Public Policy

This legislative note critically examines the Indian Digital Personal Data Protection (DPDP) Act, 2023, with a focus on its provisions that imply data sovereignty and their implications for the governance of digital commons. Drawing on the seminal works on data commons, the note explores the conceptual and practical tensions between centralised data sovereignty, participatory, and decentralised models of data stewardship. While data sovereignty is often justified on grounds of national security and control, it may inadvertently hinder the development of inclusive and accountable frameworks for managing data as a public good.

Face Card Declined: The Deepfake Threat To Biometric Security In Financial Systems, Hazel Fernandez

Washington and Lee Law Review Online

Once limited to entertainment and disinformation, deepfakes are now extending into the financial sector, where voice and facial impersonations exploit biometric authentication systems to facilitate fraudulent transactions. This evolution exposes gaps in existing legal and regulatory frameworks, raising critical questions about consumer protection and institutional safeguards. This Note argues for a reconceptualization of deepfake harms as both a privacy and a financial security issue. It examines the illusion of consent generated by synthetic impersonation and insufficient statutory protections. The analysis examines the patchwork of federal, state, and international laws governing data privacy and artificial media, highlighting the gaps that allow …

Investigating The Relationship Between Noun Classes And Plant Folk Taxonomy In Chasu Language Of Kilimanjaro Region In Tanzania, Peter Rabson Mziray

Journal of Humanities and Social Sciences

The current study investigates the relationship between noun classes and plant folk taxonomy in Chasu (G 22). The study focuses on two objectives: the first objective is to describe the plant folk taxonomy in Chasu and the second objective is to determine the relationship between noun classes and plant folk taxonomy in Chasu. Data were collected from rural villages in Same and Mwanga districts by using free listing, field interviews (jungle-walk-and-identify), and written texts containing Chasu plant names. The findings reveal that Chasu folk taxonomy reflects different ethnobotanical categories; including a unique beginner which is mmea/mimea ‘plant(s)’, and three life …

Data As Policy, Janet Freilich, W. Nicholson Price Ii

Faculty Scholarship

A large literature on regulation highlights the many different methods of policy-making: command-and-control rulemaking, informational disclosures, tort liability, taxes, and more. But the literature overlooks a powerful method to achieve policy objectives: data. The state can provide (or suppress) data as a regulatory tool to solve policy problems. For administrations with expansive views of government’s purpose, government-provided data can serve as infrastructure for innovation and push innovation in socially desirable directions; for administrations with deregulatory ambitions, suppressing or choosing not to collect data can reduce regulatory power or serve as a back-door mechanism to subvert statutory or common law rules. …

Living Property, Joseph William Singer

Seattle University Law Review

The Supreme Court has increasingly defined property rights that are per se exempt from regulation in the absence of compensation, most recently in Cedar Point Nursery v. Hassid (2021) and Tyler v. Hennepin County (2023). The Court claims that it can identify property rights that are categorically protected from regulation by reference to history, tradition, and precedent. Yet this approach is oddly ahistorical; it is inconsistent with the fact that property law changed dramatically over U.S. history, as well as varying tremendously among the states. It is also inconsistent with the historical context of the Founding era. At that time, …

Table Of Contents

Seattle University Law Review

Table of Contents

The Roots Of Credit Inequality, Andrea Freeman

Seattle University Law Review

Debt oppression began before the United States became a country. Settlers enslaved Africans and Indigenous people, treating them as property that they could buy and sell for their economic and personal benefit. When enslavement became illegal, new economic systems and laws that included sharecropping, Black Codes, and Jim Crow kept Black people in servitude. Laws that prohibited enslaved people from owning property or selling goods to white people evolved into restrictions on Black people’s occupations and market participation, both formal and informal. When Black entrepreneurs overcame these obstacles and built wealth within Black business enclaves, white people enforced their racist …

“A Plain Denial”: Reclaiming Equal Protection In American Juvenile Law, Addie C. Rolnick, David S. Tanenhaus, Justin Iverson, Danielle L. Silvestri

Seattle University Law Review

Juvenile courts are based on the premise that children are different from adults and should therefore be treated differently. Children may be treated more informally by courts, punished for different purposes, and brought before the court for different behaviors. Since In re Gault, the Supreme Court has been clear that there are limits to how different juvenile courts can be. Juveniles are entitled to many of the same procedural protections as adult criminal defendants, although the Court has preserved some procedural differences where it has determined that their benefit is outweighed by the need to preserve the informality, flexibility, …

Redefining Section 230 Immunity, Lucas Dini

Seattle University Law Review

Section 230 of the Communications Decency Act has provided broad immunity to online platforms for third-party content which was the foundation for the internet's growth. However, the rise in the use of artificial intelligence (AI) to produce algorithms to curate content to users of online services has blurred the line between being a passive host of third party content and active editorial control. This Note examines the legal, policy, and constitutional implications of applying Section 230 immunity to platforms that use AI to curate and promote third-party content. This analysis argues that algorithmic promotion of third-party content constitutes a platform's …

Overcrowding The System: Rethinking Juvenile Justice In Washington State, Mckenna White

Seattle University Law Review

The recent crisis at Green Hill School highlights the detrimental consequences of severe overcrowding in Washington State’s Juvenile Rehabilitation system—a problem exacerbated by the implementation of the JR to 25 legislation. This Note argues that the juvenile rehabilitation system, which is currently struggling to manage a wide age range of offenders, necessitates a fundamental rethinking of juvenile justice practices. By examining neurological research indicating continued brain development into the mid-twenties, along with the high prevalence of trauma among justice-involved youth, this Note proposes the creation of a dedicated third system of care within the Department of Children, Youth, and Families …

Addressing The Root Of Housing Insecurity: Washington Should Divest From “Crime-Free” Housing Programs, Sarah Cerdena

Seattle University Law Review

Crime-Free Rental Housing Properties (CFRHPs) have proven to be an ineffective and inequitable approach to public safety. Often, tenants in these properties are evicted—at times, extrajudicially—as a result of conduct that does not rise to violations of their lease provisions, much less criminal behavior. By placing extraordinary power in the hands of local law enforcement to carry out these ordinances, CFRHPs predictably pose significant harm to Black and Latinx communities, survivors of domestic violence, disabled tenants, and low-income tenants generally. Recently, the Washington State Supreme Court grappled with the tensions arising between CFRHPs and the enforcement of Washington landlord-tenant law. …

Volume 49 Masthead

Seattle University Law Review

Volume 49 Masthead

Esg Investing Breaches Erisa Fiduciary Duties? A Closer Look At Spence V. American Airlines, Inc., Eric Chin-Ru Chang

Seattle University Law Review

In Spence v. American Airlines, Inc., the U.S. District Court for the Northern District of Texas found that American Airlines breached its fiduciary duties due to BlackRock’s ESG investing practices. Contrary to some reports suggesting that the ruling prohibits ESG investing under ERISA, a closer look at the ruling shows that the court only targeted American Airlines’ failure to manage conflicts of interest appropriately, rather than the legality of ESG investing itself. In light of the intensifying ESG backlash in the United States, this Article cautions against further restrictive measures on ESG investing. Such measures would exacerbate the widening …

Mandating Fluoride: A Constitutional Exercise Of Police Power, Anita Jahangiri

Seattle University Law Review

This Note addresses the ongoing debate over fluoridation: the regulation of fluoride levels in public water systems. Extensive research indicates fluoridation, when regulated at the recommended concentration, is both safe and highly effective in preventing dental caries. Better known as cavities, dental caries is a preventable yet widespread health issue that disproportionately affects low-income populations. Reducing dental health disparities among economic classes is a pressing public health issue. Fluoridation is not merely a policy option, but a critical, proven tool to address such disparities and uphold the collective welfare of Washingtonians. This Note focuses on fluoridation as a public health …

Neurodiversity In The Courtroom: Expanding Jury Service Accessibility Beyond Physical Disability, Samantha L. Mabe

Seattle University Law Review

The Americans with Disabilities Act has required equal access to jury service for decades; however, efforts to accommodate jurors with disabilities have been slow to develop beyond some minor accommodations for physical disabilities. While neurodivergent people frequently struggle to navigate a world catered toward neurotypical people, jury service remains inaccessible for many neurodivergent people who need accommodations to attend trial and engage in jury deliberations. If courts and advocates do not consider how to develop accommodations to secure the service of neurodivergent jurors, they will miss out on the unique skillsets that neurodivergent people can bring to resolving disputes.

Disabled …

Emotionally Unstable: Addressing Emotional Distress As A Concrete Injury In Data Breach Cases Post-Transunion, Anna P. Cox

Fordham Law Review

Data breaches and data breach litigation are exponentially on the rise. Plaintiffs whose information is stolen in a data breach often claim emotional distress for fear of future harm the data breach may cause. However, plaintiffs who bring suit in federal court must show that they have suffered an injury in fact for purposes of Article III standing before a federal court will exercise jurisdiction. The U.S. Supreme Court’s decision in TransUnion LLC v. Ramirez requires that plaintiffs who seek money damages under a theory of risk of future harm show that they have suffered a present concrete injury to …

Agentizing Privacy Preferences Without Privatizing Data Protection Policy, Frank Pasquale, Vanna Carter

Cornell Law Faculty Publications

This essay explores how consumers might exercise newly restored agency in a digital environment increasingly shaped by generative AI. Rather than expecting consumers to read privacy-related terms of service, policymakers should encourage the emergence of Automated Consumer Agents (“ACAs”) capable of interpreting privacy provisions and acting on behalf of users according to their stated preferences. These systems could automatically reject objectionable forms of data extraction, translating consumer values into actionable decisions in online transactions.

Despite this promise, the rise of ACAs would also present new problems. Without supportive policy and legal frameworks, agentization of privacy preferences could itself reproduce or …

Is Your Data Good, Bad, Or Neutral?: Redefining Concreteness For Data Breach Harms, Jeeyoon Lim

Fordham Law Review

In recent years, the Supreme Court has tightened federal court standing requirements for intangible harms, including statutory harms. In TransUnion LLC v. Ramirez, the Court held that a mere statutory violation, absent a common-law analogue, is not sufficiently concrete to grant standing. The Court did not provide clear guidance as to how stringent the common-law analogue analysis must be, other than that it does not require an “exact duplicate.” Because of the ever-evolving nature of digital data, data breach victims attempting to enforce their statutory right to privacy in federal court have struggled to rely on tradition and history …