Privacy Law Commons^™

News That Will Not Break: How The First And Fourth Amendments Can Jointly Protect The Press From Secret Government Intrusions Into Newsgathering, Julianna Margolin

Fordham Law Review

The modern constitutional and statutory framework permits the U.S. government to obtain journalists’ confidential source information and work product by secretly serving third-party service providers with subpoenas. While the First Amendment protects journalists and the Fourth Amendment guards against unreasonable government searches, new technology and the involvement of third parties complicate the balance between independent newsgathering and government access.

This Note examines reporters’ privilege jurisprudence stemming from the seminal U.S. Supreme Court decision Branzburg v. Hayes, which declined to recognize a categorical privilege. This Note also explores the subpoena power in the digital age as it converges with privacy …

The Mirage Of Meta Pixel Code: Redefining Pii In The Era Of Generative Ai, Sophie Venter

Fordham Law Review

Data privacy laws are intended to put consumers in control of whether their identifying data can be sold and used for targeted advertising. However, these laws do not provide adequate protections in the era of generative artificial intelligence (AI). This Note examines one way that existing privacy law permits companies to profit from selling data for targeted advertising without obtaining user consent: transferring video watching data in a pixel code. Some U.S. Courts of Appeals have determined that these data transfers do not sufficiently identify users and the videos they watched to constitute violations of user privacy. This has led …

Ai, Antitrust, And The Marketplace Of Ideas, Maurice E. Stucke

Fordham Law Review

No abstract provided.

Emotionally Unstable: Addressing Emotional Distress As A Concrete Injury In Data Breach Cases Post-Transunion, Anna P. Cox

Fordham Law Review

Data breaches and data breach litigation are exponentially on the rise. Plaintiffs whose information is stolen in a data breach often claim emotional distress for fear of future harm the data breach may cause. However, plaintiffs who bring suit in federal court must show that they have suffered an injury in fact for purposes of Article III standing before a federal court will exercise jurisdiction. The U.S. Supreme Court’s decision in TransUnion LLC v. Ramirez requires that plaintiffs who seek money damages under a theory of risk of future harm show that they have suffered a present concrete injury to …

When The Screen Lies: Navigating Privacy And Publicity In An Ai World, Nancy M. Menagh

Fordham Law Review

A key issue of the 2023 SAG-AFTRA strike was the use of generative AI in the entertainment industry and, more specifically, the creation of uncanny digital replicas of performers being used without their knowledge or consent. Since then, concerns have only intensified around the unauthorized creation and use of digital replicas and the ease with which they can be made and disseminated online. Currently, there is a patchwork of state laws that attempt to target these issues, but they have proven ineffective against the challenges presented by digital replicas.

This Note analyzes the problems digital replicas have raised in the …

Is Your Data Good, Bad, Or Neutral?: Redefining Concreteness For Data Breach Harms, Jeeyoon Lim

Fordham Law Review

In recent years, the Supreme Court has tightened federal court standing requirements for intangible harms, including statutory harms. In TransUnion LLC v. Ramirez, the Court held that a mere statutory violation, absent a common-law analogue, is not sufficiently concrete to grant standing. The Court did not provide clear guidance as to how stringent the common-law analogue analysis must be, other than that it does not require an “exact duplicate.” Because of the ever-evolving nature of digital data, data breach victims attempting to enforce their statutory right to privacy in federal court have struggled to rely on tradition and history …

Are Your Secrets Safe?: Imposing A Fiduciary Duty On Healthcare Ai Developers Dealing With Sensitive Health Information, Lauren Quinn

Fordham Law Review

In 1996, Congress passed the Health Insurance Portability and Accountability Act (HIPAA) to establish standards for transmitting health information. For decades, the HIPAA Privacy Rule has operated as the primary regulation protecting health information in the United States. However, in the decades since HIPAA was enacted, new technologies have demonstrated the shortcomings of the Privacy Rule. In particular, the development of healthcare artificial intelligence (AI) has created new privacy concerns and exacerbated existing ones. This Note examines the current healthcare privacy framework in the United States and considers how healthcare AI complicates it. This Note also explores how AI developers …

Abortion Travel Restrictions Under The Dormant Commerce Clause After National Pork Producers Council V. Ross, Katherine Bartley

Fordham Law Review

Since Dobbs v. Jackson Women’s Health Organization, twelve states have banned abortion entirely, and seven states have banned abortion earlier in pregnancy than the standard set in Roe v. Wade. As abortion access dwindles, patients increasingly cross state lines to seek reproductive healthcare. In response, antiabortion state officials and lawmakers have made efforts to restrict interstate travel for abortion care.

This Note examines abortion travel restrictions under the “Dormant” Commerce Clause doctrine, which limits state laws that burden interstate commerce. In 2023, the U.S. Supreme Court affirmed but narrowed the judge-made doctrine in National Pork Producers Council v. …

The Illusion Of Inclusion: The False Promise Of The New Governance Project For Content Moderation, Brenda Dvoskin

Fordham Law Review

Because private companies now control the most prominent communication platforms, the most pressing question in the field of content moderation is how to ensure that the governance of public discourse responds to public values. The prevailing approach, given that the state cannot regulate speech directly, is that state regulation can be substituted with audited self-regulation, broad stakeholder participation, and negotiated rulemaking. In this model, which this Article refers to as the “new governance model for content moderation,” companies include advocates as representatives of the public in their processes to govern online speech. Ideally, they negotiate policy goals and share responsibility …

Chronically Online: Apportioning Liability In Social Media Litigation Based On User Engagement, Rebecca Vangelos

Fordham Law Review

The average American teenager spends nearly five hours on social media every day. This result is by design: social media platforms like Instagram, Snapchat, and TikTok deploy persuasive technologies—including infinite scroll, personalized content recommendation feeds, and dark patterns—to capture and retain teen attention. These intentional design features exploit adolescent vulnerabilities to foster social media dependency. Accordingly, a growing body of scientific evidence links the extensive use of social media to the teen mental health crisis in the United States.

Despite these negative effects, social media companies have largely evaded accountability for the harm they have caused to teens. Recent lawsuits …

Re-Recording The Record: The Case For A Stronger Moral Right Of Integrity In The United States, Alexandria Touron

Fordham Law Review

In the United States, musical artists have limited legal recourse over transferring ownership of their music to third parties, even when such transfers may harm the artist’s reputation or the integrity of the work. Even the most prominent musicians, like Taylor Swift, must operate within an industry structure that normalizes the transfer of rights and, thus, control of their creative works. This occurs because U.S. law ties artists’ rights almost exclusively to economic ownership of their work unless they specifically bargain to keep their moral rights. However, most other countries have comprehensive moral rights frameworks where all artists can protect …

National Security And Federalizing Data Privacy Infrastructure For Ai Governance, Margaret Hu, Eliott Behar, Davi Ottenheimer

Fordham Law Review

This Essay contends that data infrastructure, when implemented on a national scale, can transform the way we conceptualize artificial intelligence (AI) governance. AI governance is often viewed as necessary for a wide range of strategic goals, including national security. It is widely understood that allowing AI and generative AI to remain self-regulated by the U.S. AI industry poses significant national security risks. Data infrastructure and AI oversight can assist in multiple goals, including: maintaining data privacy and data integrity; increasing cybersecurity; and guarding against information warfare threats. This Essay concludes that conceptualizing data infrastructure as a form of critical infrastructure …

Juror Privacy Via Anonymity, Jayne S. Ressler

Fordham Law Review

Anonymous juries delivered verdicts in the hush-money criminal trial of Donald J. Trump, as well as both of E. Jean Carroll’s defamation cases against him. After the defamation cases concluded, the judge cautioned the jurors against ever publicly revealing their identities. This was sound advice, as recent doxing, threats of violence, and online posts filled with hatred and vitriol illustrate the dangers facing American jurors. The scholarly literature analyzing anonymous juries focuses primarily on the propriety of their use in criminal cases to protect jurors from physical harm. Missing from the conversation, however, is an examination of anonymity’s role in …

Expecting Medication Surveillance, Jennifer D. Oliva

Fordham Law Review

In response to federal financial incentives and mandates, all fifty states, the District of Columbia, and three U.S. territories administer electronic prescription drug monitoring programs (PDMPs). Federal and state policymakers justified the implementation and enhancement of ubiquitous prescription drug monitoring by contending that expansive state drug surveillance was a necessary weapon in the war against the American drug overdose crisis. As is often the case with tools designed for law enforcement surveillance, however, PDMPs have proven susceptible to mission creep. Although pioneer PDMPs were paper-based systems that limited their surveillance to a narrow class of heavily regulated controlled substances, modern …

Confronting Carpenter: Rethinking The Third-Party Doctrine And Location Information, Charlie Brownstein

Fordham Law Review

The third-party doctrine enables law enforcement officers to obtain personal information shared with third parties without a warrant. In an era of highly accessible technology, individuals’ location information is consistently being transmitted to third parties. Due to the third-party doctrine, this shared information has been available to law enforcement, without the individual knowing or having an opportunity to challenge this availability. Law enforcement has utilized this doctrine to obtain comprehensive information regarding individuals’ whereabouts over long periods of time.

The U.S. Supreme Court recently limited the reach of the third-party doctrine regarding location data held by cellphone providers. However, this …

Exploring Financial Data Protection And Civil Liberties In An Evolved Digital Age, Amanda Lindner

Fordham Journal of Corporate & Financial Law

There is no comprehensive financial privacy law that can protect consumers from a company’s collection sharing and selling of consumer data. The most recent federal financial privacy law, the Gramm-Leach-Bliley Act (“GLBA”), was enacted by Congress over 20 years ago. Vast technological and financial changes have occurred since 1999, and financial privacy law is due for an upgrade.

As a result, loopholes exist where companies can share financial data without being subject to laws or regulations. Additionally, federal financial privacy related laws provide little to no recourse for consumers to self-remediate with litigation, also known as a private right of …

Interpleader As A Vehicle For Challenging The Constitutionality Of Private Citizen Action Statutes, Delia Parker

Fordham Law Review

The rise of vigilante-esque statutes creates obstacles for litigants seeking to challenge a statute’s constitutionality. State legislatures in Texas and California enacted laws regulating constitutionally protected activity (abortion and firearm possession, respectively) through statutes enforced solely by private actors. The state legislatures cleverly crafted Texas S.B. 8, as well as other copycat statutes, as bounty hunter statutes to block litigants’ usual path to pre-enforcement adjudication—filing a claim against the state to enjoin its actors from enforcing the improper provisions.

The Texas and California state legislatures attempted to forbid constitutionally protected conduct by granting enforcement power to an infinite number of …

Face The Facts, Or Is The Face A Fact?: Biometric Privacy In Publicly Available Data, Daniel Levin

Fordham Intellectual Property, Media and Entertainment Law Journal

Recent advances in biometric technologies have caused a stir among the privacy community. Specifically, facial recognition technologies facilitated through data scraping practices have called into question the basic precepts we had around exercising biometric privacy. Yet, in spite of emerging case law on the permissibility of data scraping, comparatively little attention has been given to the privacy implications endemic to such practices.

On the one hand, privacy proponents espouse the view that manipulating publicly available data from, for example, our social media profiles, derogates from users’ expectations around the kind of data they share with platforms (and the obligations such …

Failed Analogies: Justice Thomas’S Concurrence In Biden V. Knight First Amendment Institute, Sarah S. Seo

Fordham Intellectual Property, Media and Entertainment Law Journal

Twenty-six years ago, twenty-six words created the internet. Section 230 of the Communications Decency Act is a short, yet powerful, provision that notably protects social media platforms, among other interactive computer services, from liability for content created by third-party users. At the time of its enactment, Section 230 aimed to encourage the robust growth of the then-nascent internet while protecting it from government regulation. More recently, however, it has been wielded by Big Tech companies like Twitter and Facebook to prevent any liability for real-world harms that stem from virtual interactions conducted over their platforms.

Although the Supreme Court has …

A World Without Roe: The Constitutional Future Of Unwanted Pregnancy, Julie Suk

Faculty Scholarship

With the demise of Roe v. Wade, the survival of abortion access in America will depend on new legal paths. In the same moment that Dobbs v. Jackson Women’s Health Organization has constrained access to abortion in the United States, other constitutional democracies have moved in the opposite direction, expanding access to safe, legal, and free abortions. They have done so without reasoning from Roe’s vision of the private zone of unwanted pregnancy. The development of abortion law outside the United States provides critical insights that can inform future efforts to vindicate the constitutional rights of women facing unwanted pregnancies. …

On The Propertization Of Data And The Harmonization Imperative, Luis Miguel M. Del Rosario

Fordham Law Review

The digital age has paved the way for unforeseen and unconscionable harms. Recent experiences with security breaches, surveillance programs, and mass disinformation campaigns have taught us that unchecked data collection, use, retention, and transfer have the potential to affect everything from health-care access to national security. And they have shown the growing need for a solution that addresses this proliferation of intangible collective harms. This Note champions data propertization—the process of establishing a bundle of rights in data comparable to those that comprise property interests—as the proper method for preventing and redressing data harms. More specifically, this Note analyzes Illinois’s …

Schrems's Slippery Slope: Strengthening Governance Mechanisms To Rehabilitate Eu-U.S. Cross-Border Data Transfers After Schrems Ii, Edward W. Mclaughlin

Fordham Law Review

In July 2020, the Court of Justice of the European Union (CJEU) invalidated the Privacy Shield Framework, the central data governance mechanism that once governed cross-border data transfers from the European Union (EU) to the United States. For the second time in five years, Europe’s top court invalidated the primary method of cross-border data transfers. Both times the CJEU found that the United States’s surveillance laws were, and remain, overbroad and fail to provide EU citizens with protections that are essentially equivalent to those guaranteed under the EU’s General Data Protection Regulation (GDPR) in light of the Charter of Fundamental …

23andme: Attack Of The Clones And Other Concerns, Claire M. Amodio

Fordham Intellectual Property, Media and Entertainment Law Journal

A few years ago, ancestry websites took the world by storm. People were fascinated with their history and heritage and wanted to find out more about where they came from. Then along came 23andMe, which allowed people to not only unearth their familial roots, but also bring to light unknown medical conditions or predispositions to certain medical issues. 23andMe then took the unprecedented step of teaming up with a pharmaceutical company to create drugs with its users’ genetic information. After this announcement, some users were caught off guard, having had no idea that their genetic information—something so sensitive and uniquely …

Democratizing Platform Privacy, Sari Mazzurco

Fordham Intellectual Property, Media and Entertainment Law Journal

The online platform political economy—that is, the interrelationship of economic and political power in the exchange of online services for personal information—has endowed platforms with overwhelming power to determine consumers’ information privacy. Mainstream legal scholarship on information privacy has focused largely on an economic problem: individual consumers do not obtain their “optimal” level of privacy due to a bevy of market failures. This Article presents the political issue: that platforms’ hegemonic control over consumers’ information privacy renders the rules they impose illegitimate from a democratic perspective. It argues platform hegemony over consumers’ information privacy is a political problem, in the …

Reconciling U.S. Banking And Securities Data Preservation Rules With European Mandatory Data Erasure Under Gdpr, Ronald V. Distante

Fordham Journal of Corporate & Financial Law

United States law, which requires financial institutions to retain customer data, conflicts with European Union law, which requires financial institutions to delete customer data on demand. A financial institution operating transnationally cannot comply with both U.S. and EU law. Financial institutions thus face the issue that they cannot possibly delete and retain the same data simultaneously. This Note will clarify the scope and nature of this conflict.

First, it will clarify the conflict by examining (1) the relevant laws, which are Europe’s General Data Protection Regulation (GDPR), the U.S. Bank Secrecy Act, and Securities and Exchange Commission (SEC) regulations, (2) …

Gender Equality And The First Amendment: Foreword, Jeanmarie Fenrich, Benjamin C. Zipursky, Danielle Keats Citron

Fordham Law Review

Gender equality demands equal opportunity to speak and be heard. Yet, in recent years, the clash between equality and free speech in the context of gender has intensified—in the media, the workplace, college campuses, and the political arena, both online and offline. The internet has given rise to novel First Amendment issues that particularly affect women, such as nonconsensual pornography, online harassment, and online privacy. On November 1–2, 2018, the Fordham Law Review brought together scholars and practicing lawyers from around the nation to address many of the pressing challenges facing feminists and free speech advocates today. The Symposium was …

Airbnb In New York City: Whose Privacy Rights Are Threatened By A Government Data Grab?, Tess Hofmann

Fordham Law Review

New York City regulators have vigorously resisted the rise of Airbnb as an alternative to traditional hotels, characterizing “home sharing” as a trend that is sucking up permanent housing in a city already facing an affordability crisis. However, laws banning short-term rentals have done little to discourage this practice, as Airbnb’s policy of keeping user information private makes it possible for illegal operators to evade law enforcement. Frustrated by this power imbalance, the New York City Council passed Local Law 146, which requires Airbnb to provide city officials with access to the names and information of its home sharing hosts …

When Law Frees Us To Speak, Danielle Keats Citron, Jonathon W. Penney

Fordham Law Review

A central aim of online abuse is to silence victims. That effort is as regrettable as it is successful. In the face of cyberharassment and sexualprivacy invasions, women and marginalized groups retreat from online engagement. These documented chilling effects, however, are not inevitable. Beyond its deterrent function, the law has an equally important expressive role. In this Article, we highlight law’s capacity to shape social norms and behavior through education. We focus on a neglected dimension of law’s expressive role: its capacity to empower victims to express their truths and engage with others. Our argument is theoretical and empirical. We …

American Courts And The Sex Blind Spot: Legitimacy And Representation, Michele Goodwin, Mariah Lindsay

Fordham Law Review

We argue the legacy of explicit sex bias and discrimination with relation to political rights and social status begins within government, hewn from state and federal lawmaking. As such, male lawmakers and judges conscribed a woman’s role to her home and defined the scope of her independence in the local community and broader society. Politically and legally, women were legal appendages to men—objects of male power (visà-vis their husbands and fathers). In law, women’s roles included sexual chattel to their spouses, care of the home, and producing offspring. Accordingly, women were essential in the home, as law would have it, …

Face Off: An Examination Of State Biometric Privacy Statutes & Data Harm Remedies, Maya E. Rivera

Fordham Intellectual Property, Media and Entertainment Law Journal

As biometric authentication becomes an increasingly popular method of security among consumers, only three states currently have statutes detailing how such data may be collected, used, retained, and released. The Illinois Biometric Information Privacy Act is the only statute of the three that enshrines a private right of action for those who fail to properly handle biometric data. Both the Texas Capture or Use Biometric Identifier Act Information Act and the Washington Biometric Privacy Act allow for state Attorneys General to bring suit on behalf of aggrieved consumers. This Note examines these three statutes in the context of data security …