Privacy Law Commons^™

Brief Of Public Health And Health Law Scholars As Amici Curiae Urging Affirmance In Support Of Plaintiffs-Appellees, Rachel L. Zacharias, Zeinab Bakhet, Kevin Costello, Maya Manian

Amicus Briefs & Court Filings

INTRODUCTION: Physicians’ use of their judgment and expertise to prescribe drugs and devices for purposes other than those approved by the Food and Drug Administration (“FDA”)—colloquially known as off-label use—is an indispensable feature of modern medicine. The FDA approves drugs as “safe and effective for specific indications.” Christopher M. Wittich, Christopher M. Burkle & William L. Lanier, Ten Common Questions (and Their Answers) About OffLabel Drug Use, 87 Mayo Clinic Procs. 982, 982 (2012). Federal law then generally leaves prescribing decisions, including off-label use of FDA-approved drugs and devices for a patient’s particular indication, to physicians acting under state law …

Cognitive Warfare: Generative Ai, False Realities, And International Humanitarian Law, Gary Corn

Joint PIJIP/TLS Research Paper Series

This paper, written as a draft chapter for the Lieber Institute for Law and Land Warfare's forthcoming book on International Law and Artificial Intelligence in Armed Conflict: The AI-Cyber Interplay, explores the IHL implications of a specific subfield or category of AI—Generative AI (GenAI). This new and rapidly evolving technology does not merely analyze or classify data; it also generates original image, audio, and video content. This synthetic content can be highly deceptive and manipulative, as in the case of so-called “deepfakes.” Combined with other information and communications technologies (ICT) and AI capabilities, GenAI has the potential to drastically transform …

T.H. V. The Czech Republic: A Step Forward Or Back For Lgbtq+ Rights And Discourse In Europe With The First Openly Non-Binary Applicant?, Katherine Olsson

Human Rights Brief

On December 9, 2025, the European Court of Human Rights (ECtHR) issued a final judgment in the case of T.H. v. The Czech Republic.  The case concerned a non-binary individual, T.H., who was assigned male at birth and, since May 2012, had repeatedly petitioned to change their sex/gender marker and personal numerical code on their national identity card.  Because the Czech system does not provide for the option of a neutral gender marker, T.H. petitioned to have their registered gender changed to female.

Lunch Shaming And The Right To Privacy, Ira P. Robbins

Scholarly Articles in Law Reviews & Journals

Lunch shaming is the practice of penalizing students who cannot afford to pay for their meals, resulting in them being denied food, served alternative meals, or publicly identified. The origins of lunch shaming can be traced to the financial pressures faced by school districts that struggle to balance tight budgets with the mandate to provide free or reduced-price meals to eligible students. Despite legislative efforts and advocacy campaigns aimed at mitigating the problems associated with lunch shaming, the practice persists, exacerbated by rising food costs and the expiration of pandemic-era food programs.

Many law journal and other articles have correctly …

The Stored Communications Act At 40: Re-Examining Ecs And Rcs In The Age Of Ai, Shanzay Pervaiz

Joint PIJIP/TLS Research Paper Series

Shanzay Pervaiz, Senior Legal Researcher, examines the Stored Communications Act (SCA) almost forty years after its enactment, focusing on how its core definitions of “electronic communication service” (ECS) and “remote computing service” (RCS) play a central role in regulating domestic and global government access to data. The definitions still shape key U.S. authorities such as FISA Section 702, the CLOUD Act, and international instruments governing law enforcement access to data, including the Budapest Convention and the United Nations Convention on Cybercrime. The paper also looks at the legislative history of the SCA, how U.S. courts define ECS and RCS, and …

A Proposed Tort To Address The Negligent Enablement Of Cloud Data Breaches, Michael L. Rustad

American University Business Law Review

[INTRODUCTION] The term “cloud computing” means the remote storage of software applications, tools, and data accessed through the internet. Cloud customers enter into subscription agreements with providers who give 24/7, on-demand, as-needed access to software, storage, and networking services owned and managed by providers through a web browser. “Many businesses are transitioning to the cloud for data storage, remote work, and collaboration.” Cloud providers operate their software as a software-as-a-service (“SaaS”) model, under which customers pay a subscription fee to access the software. Netflix and Amazon Prime Video are examples of subscription services that deliver television programs and videos through …

The Growing Divide: The Video Privacy Protection Act’S Inconsistent Subscriber Standard And The Need For Reform, Andrea Pacheco

American University Business Law Review

The Video Privacy Protection Act of 1988 (“VPPA”) has been brought into the twenty-first century due to a series of class action lawsuits surrounding consumer privacy rights in an increasingly digital world. A circuit split has emerged among the federal appellate courts on the meaning of the word “subscriber” under the VPPA and whether the statute’s protections should extend to casual users of goods and services provided by videotape service providers. The outcome of this debate carries significant implications for consumer privacy and business compliance obligations due to the escalation of business practices involving the collection of consumer data and …

The United States’ Strengthened National Security Review Of Chinese Investment: Implications From The Tech War, Charles C. Wang, Ulia Liu, Holden H. Dong

American University International Law Review

In recent years, the national security review system of United States (U.S.) foreign investment has entered into a period of intensified scrutiny of Chinese investment. This article analyzes the latest development of the U.S. foreign investment national security review system after the enactment of the 2018 Foreign Investment Risk Review and Modernization Act (FIRRMA) and relevant Executive Orders. The U.S. review of Chinese investment has been greatly strengthened in terms of the expanded scope of review in high-tech areas and prolonged and unpredictable review time. China has become the primary target of the U.S. national security review, especially in the …

Content Moderation And The Least Cost Avoider, Paul Rosenzweig

Joint PIJIP/TLS Research Paper Series

No abstract provided.

The Domestic And International Limitations Of The Third-Party Doctrine In The Digital Age, Miguel E. Serrano

American University Business Law Review

This Comment argues that the third-party doctrine further alienates EU-U.S. partnerships because the doctrine subverts privacy interests as binding legal precedent. Part II will explore the history of the third-party doctrine up until the Carpenter decision and explain why U.S. privacy rights are linked with access to third-party information. This Comment will further outline EU data protection laws, EU legislation, and the CJEU’s Schrems II decision. In Part III, this Comment will also analyze the new data protection framework, Executive Order 14086, and discuss whether it fails to overcome the CJEU’s concerns over U.S. privacy laws for EU subjects. By …

A Trusted Framework For Cross-Border Data Flows, Alex Joel

Joint PIJIP/TLS Research Paper Series

The German Marshall Fund of the United States (GMF), in cooperation with the Tech, Law and Security Program (TLS) of the American University Washington College of Law, and with support from Microsoft, convened a Global Taskforce to Promote Trusted Sharing of Data comprising experts from civil society, academia, and industry to submit proposals for harmonizing approaches to global data use and sharing. Former US Ambassador to the Organisation for Economic Co-operation and Development (OECD) and GMF Distinguished Fellow Karen Kornbluh and Microsoft Chief Privacy Officer and Corporate Vice President Julie Brill co-chaired the taskforce; TLS Senior Project Director Alex Joel …

Opaque Notification: A Country-By-Country Review, Lauren Mantel

Joint PIJIP/TLS Research Paper Series

No abstract provided.

Necessity, Proportionality, And Executive Order 14086, Alex Joel

Joint PIJIP/TLS Research Paper Series

No abstract provided.

Stars, Stripes, And Surveillance: The United States' Failure To Regulate Data Privacy, Sam Begland

American University Law Review

In the wake of the United States Supreme Court’s devastating decision to strip Americans of their constitutional right to abortion in Dobbs v. Jackson Women’s Health Organization, data privacy is more salient than ever. Without adequate data regulations, state governments and anti-abortion activists alike can harass and prosecute pregnant people attempting to exercise their bodily autonomy. This comment argues that the United States has violated its obligations under the International Covenant on Civil and Political Rights (ICCPR) Article 17 by failing to protect against interference with the use and collection of reproductive health data. Further, this comment analyzes interpretations of …

Securing Patent Law, Charles Duan

Scholarly Articles in Law Reviews & Journals

A vigorous conversation about intellectual property rights and national security has largely focused on the defense role of those rights, as tools for responding to acts of foreign infringement. But intellectual property, and patents in particular, also play an arguably more important offense role. Foreign competitor nations can obtain and assert U.S. patents against U.S. firms and creators. Use of patents as an offense strategy can be strategically coordinated to stymie domestic innovation and technological progress. This Essay considers current and possible future practices of patent exploitation in this offense setting, with a particular focus on China given the nature …

Data Property, James Grimmelmann, Christina Mulligan

American University Law Review

In this, the Information Age, people and businesses depend on data. From your family photos to Google’s search index, data has become one of society’s most important resources. But there is a gaping hole in the law’s treatment of data. If someone destroys your car, they have committed the tort of conversion, and the law gives a remedy. But if someone deletes your data, it is far from clear that they have done you a legally actionable wrong. If you are lucky, and the data was stored on your own computer, you may be able to sue them for trespass …

Persistent Surveillance, Andrew Guthrie Ferguson

Scholarly Articles in Law Reviews & Journals

Persistent surveillance technologies grant police vast new investigative capabilities. The technologies both monitor targeted areas and generate databases of searchable information about people, places, and patterns that can be connected and accessed for criminal prosecutions.

In the face of this growing police surveillance, courts have struggled to make sense of a fragmented Fourth Amendment doctrine. The Supreme Court has offered some clues that “digital may be different” when it comes to surveillance, but lower courts have been left struggling to apply old law to new technologies. Warrantless use of persistent surveillance technologies raises hard questions about when a “search” occurs …

Chinese Technology Platforms Operating In The United States: Assessing The Threat (Originally Published As A Joint Report Of The National Security, Technology, And Law Working Group At The Hoover Institution At Stanford University And The Tech, Law & Security Program At American University Washington College Of Law), Gary Corn, Jennifer Daskal, Jack Goldsmith, Chris Inglis, Paul Rosenzweig, Samm Sacks, Bruce Schneier, Alex Stamos, Vincent Stewart

Joint PIJIP/TLS Research Paper Series

No abstract provided.

Piercing The Veil: Reconciling Fisa And The State Secrets Privilege In The Schrems Ii Era, Chris Baumohl

American University Law Review

Twenty years after 9/11 and the beginning of the “War on Terror,” access to judicial redress arising out of national security programs remains mired in a labyrinth of procedural hurdles, including the state secrets privilege. Nearly seventy years after the Supreme Court first enunciated the modern state secrets privilege, courts still struggle to articulate a practicable standard that appropriately balances the government’s need to protect its secrets and plaintiffs’ need to vindicate their constitutional rights. This issue is particularly acute in surveillance litigation, where broad construction of the privilege precludes plaintiffs from establishing standing. However, as the Ninth Circuit found …

Good Health And Good Privacy Go Hand-In-Hand (Originally Published By Jnslp), Jennifer Daskal

Joint PIJIP/TLS Research Paper Series

No abstract provided.

Hipaa Reform Or A Patchwork Scheme: A Look At Preemption, Scope, And The Inclusion Of A Private Right Of Action In A New Federal Data Privacy Law, David Cohen

Upper Level Writing Requirement Research Papers

No abstract provided.

The Georgia Life Act: Limiting Women's State Constitutional Right To Privacy, Phoebe Varunok

Upper Level Writing Requirement Research Papers

No abstract provided.

Criminalizing Asylum: Dna Testing Asylum Seekers Violates Privacy Rights, Scarlett L. Montenegro

American University Journal of Gender, Social Policy & the Law

Introduction.

On June 16, 2015, President Trump announced his 2016 presidential campaign and claimed that Mexicans are criminals who “[h]ave lots of problems . . . they’re bringing drugs. They’re bringing crime. They’re rapists . . . It’s coming from all over . . . Latin America.” President Trump has publicly expressed his hostility towards immigrants by calling them “animals” and blaming them for drugs and gangs in the United States. While in office, President Trump tweeted that immigrants were invading the United States and suggested that “we must immediately, with no Judges or Court Cases, bring them back from …

The Georgia Life Act: Limiting Women's State Constitutional Right To Privacy, Phoebe Varunok

American University Journal of Gender, Social Policy & the Law

No abstract provided.

Privacy And Security Across Borders, Jennifer Daskal

Scholarly Articles in Law Reviews & Journals

Three recent initiatives -by the United States, European Union, and Australiaare opening salvos in what will likely be an ongoing and critically important debate about law enforcement access to data, the jurisdictional limits to such access, and the rules that apply. Each of these developments addresses a common set of challenges posed by the increased digitalization of information, the rising power of private companies delimiting access to that information, and the cross-border nature of investigations that involve digital evidence. And each has profound implications for privacy, security, and the possibility of meaningful democratic accountability and control. This Essay analyzes the …

Legalizing Intelligence Sharing: A Consensus Approach, Brian Mund

American University National Security Law Brief

No abstract provided.

Carpenter V. United States And The Emerging Expectations Of Privacy In Data Comprehensiveness Applied To Browsing History, Daniel De Zayas

American University Law Review

No abstract provided.

Insidious Encroachment? Strengthening The "Crown Jewels": The 2018 Reauthorization Of Fisa Section 702, John F. Schifalacqua

American University National Security Law Brief

No abstract provided.

The Exclusionary Rule In The Age Of Blue Data, Andrew Ferguson

Scholarly Articles in Law Reviews & Journals

In Herring v. United States, Chief Justice John Roberts reframed the Supreme Court’s understanding of the exclusionary rule: “As laid out in our cases, the exclusionary rule serves to deter deliberate, reckless, or grossly negligent conduct, or in some circumstances recurring or systemic negligence.” The open question remains: how can defendants demonstrate sufficient recurring or systemic negligence to warrant exclusion? The Supreme Court has never answered the question, although the absence of systemic or recurring problems has figured prominently in two recent exclusionary rule decisions. Without the ability to document recurring failures, or patterns of police misconduct, courts can dismiss …

Dna And Law Enforcement: How The Use Of Open Source Dna Databases Violates Privacy Rights, Christine Guest

American University Law Review

No abstract provided.