Privacy Law Commons^™

Rethinking Objectivity: The Problem Of Pretext In The Fourth Amendment, Monu S. Bedi

Indiana Law Journal

Pretextual encounters continue to erode the legitimacy of the Supreme Court’s Fourth Amendment jurisprudence. Simply put, a police officer can act on personal bias or animus as long as the search or seizure is deemed “objectively reasonable.” Numerous scholars (e.g., Bennett Capers, Gabriel Chin, and David Harris) have critiqued this objective standard, contending it perpetuates discriminatory practices, particularly against communities of color. The late Justice Ruth Bader Ginsburg herself suggested that the Court might need to reconsider the legal precedent she helped establish. More recently, Orin Kerr has also argued that the Court’s reliance on objective determinations is inconsistent with …

Systemically Valuable Transaction Costs, Mitchell C. Johnston

Indiana Law Journal

Ronald Coase’s famous theorem tells us that in a world without transaction costs, legal entitlements would be distributed efficiently. It is often treated as a corollary of the Coase Theorem that reductions in transaction costs generate increases in welfare as barriers to efficiency-increasing transactions fall. To be sure, not all voluntary transactions are efficiency increasing (for example, some transactions create negative externalities). In such cases, scholars have noted that transaction costs may inhibit socially inefficient transactions. But the situation is more complex. Drawing on ideas from systems theory, this Article advances a more complete theory of when transaction costs support …

Bridging The Digital Divide: The Role Of Evolving Space Law In Ensuring Equitable Access And Ethical Use Of Climate Data, Caitlin B. Riordan

Indiana Journal of Law and Social Equality

No abstract provided.

Fred H. Cate Appointed To 23andme Research Institute Privacy Advisory Board, Maurer School Of Law - Indiana University

Keep Up With the Latest News from the Law School (blog)

Indiana University Maurer School of Law Distinguished Professor Fred H. Cate, one of the nation’s foremost authorities on information privacy and security law, has been appointed as an inaugural member to the newly formed Privacy Advisory Board of the 23andMe Research Institute, a leading nonprofit medical research organization focused on advancing genetic and health discoveries.

The appointment cements the Law School’s position as a global leader at the intersection of law, data governance, and privacy.

Can Ai, As Such, Invade Your Privacy? An Experimental Study Of The Social Element Of Surveillance, Aileen Nielsen

Indiana Law Journal

The increasing use of AI rather than human surveillance puts pressure on two long-used cultural and (sometimes) legal distinctions: as between human and machine observers and as between content and metadata. Machines do more and more watching through advancing technology, rendering AI a plausible replacement for humans in surveillance tasks. Further, machines can commit to surveil only certain forms of information in a way that humans cannot, rendering the distinction between content and metadata increasingly relevant too for crafting privacy law and policy. Yet despite the increasing importance of these distinctions, their legal importance remains in four key domains of …

Ninth Amendment Neurorights, Joseph A. Tomain

Indiana Law Journal

Neurotechnology developments threaten two fundamental human rights: freedom of thought and mental privacy. For example, neuroscientists use brain scans to decode unspoken thoughts and to predict political ideology and sexual orientation. Additionally, they have successfully implanted false memories in the minds of mice. There are undoubtedly beneficial uses of this dual-use technology, such as identifying and treating a variety of medical conditions. But left unchecked, neurotechnology will be exploited by public and private actors alike. There is a growing and contested literature about how the law should respond to the increasing risks of neurotechnology. This Essay contributes to that literature …

Dean's Desk: Finding New Ways To Help Diminish Cybersecurity Threats, Christiana Ochoa

Christiana Ochoa (7/22-10/22 Acting; 11/2022-)

In an era when cyberattacks can paralyze hospitals, disrupt elections, and compromise the privacy of millions, the need for innovative cybersecurity and privacy protections has never been more urgent. But it is not just a question of new technologies; strong data protection depends as much on motivating people and organizations to use those technologies and make wise choices to diminish data risk.

The Indiana University Maurer School of Law has spent more than 30 years answering cybersecurity and privacy challenges with a distinctive, holistic approach: an interdisciplinary, human-centered legal education that equips students to lead at the intersection of technology, …

Genetic Privacy, Ifeoma Ajunwa, Forrest Briscoe

Indiana Law Journal

The last decade has brought many technological advances to genetic testing. Increasingly, genetic testing, which was previously reserved for clinical or medical settings, has made its way to other spaces. Most significantly, we are now seeing the re-introduction of genetic testing to the workplace. Although the Genetic Information Nondiscrimination Act (GINA), which became law in 2009, would seemingly prohibit genetic testing in the workplace, genetic testing, as part of workplace wellness programs, is lawful under the aegis of the Affordable Care Act (ACA). This poses a threat to genetic privacy in the workplace. While some, like the actor Angelina Jolie, …

Federalism, State Action, And Workers' Medical Privacy, Ani B. Satz

Indiana Law Journal

Injured workers entering state workers’ compensation systems effectively forego their medical privacy. This is due to widespread judicial misinterpretation of the HIPAA Privacy Rule (HPR) as excluding injured workers from federal medical privacy protections. As a result, medical privacy for workers’ compensation claims is effectively governed by state law. This Article argues that states have failed to protect the medical privacy of injured workers adequately and that there is a pressing need for legislative reform. The Article presents the first comprehensive survey in the legal literature of state action protecting the medical privacy of injured workers. Part I describes the …

Data Injustice In Global Justice, Asaf Lubin, Cherry Tang

Articles by Maurer Faculty

In May 2020, the United Nations Secretary-General unveiled a sweeping “Data Strategy for Action by Everyone, Everywhere,” seeking to unlock the UN’s “full data potential.” The International Criminal Court’s Office of the Prosecutor followed suit, declaring in 2023 its intent to acquire advanced cyber forensic tools so as to hold the “widest range of digital evidence globally.” Across international institutions, data-driven governance has become the norm, with humanitarian agencies and tribunals transforming into “data hubs and information clearinghouses.” This Article critiques the unfettered datafication of global justice by international courts and organizations. These entities have aggressively expanded their data-driven operations …

Legal Implications Of Digital Health Apps Informing Food Allergy Labeling For Consumers' Health And Privacy Protection, Kathy Keunghee Kim

Maurer Theses and Dissertations

This dissertation examines food allergy labeling’s use in a digital format. Allergy information is typically found on food packaging and containers to help consumers identify individually concerned allergens. Given the critical role that food allergy labels play in preventing unexpected allergic reactions before selecting or consuming food, it is essential to comprehend the labeling descriptions. However, current regulations and laws regarding allergy labeling often confuse consumers due to the existence of mandatory and voluntary Precautionary Allergy Labeling (PAL) categories and the absence of laws and regulations that require allergy information for restaurant meals. Technology companies have introduced digital health and …

Connected Vehicles And Data Privacy & Sovereignty In The Global South, Uduak Ekott, Zhe Che, Attamongkol Tantratian

Maurer Student Articles

This essay examines data privacy and data sovereignty concerns associated with connected vehicles, with particular attention to countries in the Global South. It considers the collection and cross-border transfer of personal and vehicle data, surveys data protection and localization frameworks in several jurisdictions, and discusses regulatory approaches that importing countries may adopt to protect privacy and digital sovereignty.

Oliva Elected To American Law Institute, James Owsley Boyd

Keep Up With the Latest News from the Law School (blog)

Jenn Oliva, Professor of Law and Val Nolan Faculty Fellow, has been elected to the American Law Institute, the organization announced yesterday (Oct. 4).

She becomes the 18th member of the Indiana University Maurer School of Law faculty to earn the prestigious recognition.

“This is a tremendous honor for Professor Oliva and we are proud to have her on our faculty,” said Indiana Law Dean Christiana Ochoa, who holds an ex officio role with the ALI. “Since Jenn joined us in 2023 she’s quickly become an invaluable member of the Maurer community and we’re thrilled to see her recognized.”

Information Accountability Foundation Names Two Maurer Faculty To Leadership Positions, James Owsley Boyd

Keep Up With the Latest News from the Law School (blog)

he Information Accountability Foundation (IAF) has appointed two Indiana University Maurer School of Law faculty to lead the organization.

Fred H. Cate, a distinguished professor and C. Ben Dutton Professor of Law, was named the nonprofit think tank’s new executive director, while Stan Crosley, an adjunct faculty member and 1994 graduate of the Law School, was appointed chief policy strategist.

Founded in 2013, the IAF works with global regulators and industry executives to promote organizational accountability, data stewardship, and data ethics. Its mission is to help regulators and responsible companies better understand the challenges around Artificial Intelligence and data governance …

The Rights Of Donor-Conceived Persons In Colorado: America's First Foray Into Abolishing Anonymous Gamete Donation, Madeline Ash

Indiana Law Journal

On May 31, 2022, Colorado became the first state in the country to ban anonymous gamete (i.e., sperm and egg) donation through the enactment of the Donor- Conceived Persons and Families of Donor-Conceived Persons Protection Act. By 2043, donor-conceived Coloradans over the age of eighteen will gain access to the donor’s identifying information, such as the donor’s full name and permanent address, as well as their medical history. However, this newfound right to information also imposes heightened obligations on donor gamete agencies to obtain and track the data from their donors. Given the novelty of such legislation in the United …

The Trade Origins Of Privacy Law, Anupam Chander

Indiana Law Journal

The desire for trade propelled the growth of data privacy law across the world. Countries with strong privacy laws sought to ensure that their citizens’ privacy would not be compromised when their data traveled to other countries. Even before this vaunted Brussels Effect pushed privacy law across the world through the enticement of trade with the European Union, Brussels had to erect privacy law within the Union itself. And as the Union itself expanded, privacy law was a critical condition for accession.

But this coupling of privacy and trade leaves a puzzle: how did the U.S. avoid a comprehensive privacy …

Coping With Coppa: Exploring Alternatives To The Children's Online Privacy Protection Act, Andrew Parra

Indiana Journal of Law and Social Equality

The Children’s Online Privacy Protection Act of 1998 (COPPA) stands as one of the greatest protectors of children’s privacy for nearly twenty-five years. However, COPPA has struggled to keep pace with technological changes during this time, and the COVID-19 pandemic highlighted the shortcomings of COPPA regulations as children were forced to spend increased amounts of time in digital spaces. As the Federal Trade Commission (FTC) is set to make changes to COPPA, it is necessary to consider what changes would be most beneficial to protect children. This paper will explore the current regulatory framework, its strengths and weaknesses, and then …

Expecting Medication Surveillance, Jennifer D. Oliva

Articles by Maurer Faculty

In response to federal financial incentives and mandates, all fifty states, the District of Columbia, and three U.S. territories administer electronic prescription drug monitoring programs (PDMPs). Federal and state policymakers justified the implementation and enhancement of ubiquitous prescription drug monitoring by contending that expansive state drug surveillance was a necessary weapon in the war against the American drug overdose crisis. As is often the case with tools designed for law enforcement surveillance, however, PDMPs have proven susceptible to mission creep. Although pioneer PDMPs were paper-based systems that limited their surveillance to a narrow class of heavily regulated controlled substances, modern …

Direct To Consumer Or Direct To All: Home Dna Tests And Lack Of Privacy Regulations In The United States, Karen J. Kukla

IP Theory

Although the U.S. has some measures of privacy protection for genetic data, the lack of a comprehensive approach to protecting direct-to-consumer genetic testing results in privacy violations for both consumers and their relatives. This essay explores the critical need for the U.S. government to address these privacy violations and argues that the U.S. should approach the problem and strategize a solution similar to the European Union’s (EU) General Data Protection Regulation (GDPR). Part I identifies current United States law, both federal and state regulations that address DTC-GT and genetic privacy. Part II examines the lack of regulation surrounding current DTC-GT …

Encouraging Public Access To Pharmaceuticals Through Modified Protection Of Clinical Trial Data, Scott M. Nolan Ii

IP Theory

Part I of this Article investigates the development of pharmaceuticals and clinical trial data with a focus on patent and data protection. Part II evaluates the effects of protection and the challenges it poses to widespread public pharmaceutical access. Part III discusses two scholarly approaches to the public access issue that focus on clinical data protection and their associated challenges. In light of these scholarly works, Part IV suggests a new approach to clinical trial data protection that aims to improve public pharmaceutical access while maintaining the incentives to invent for drug developers.

On Facial Recognition, Regulation, And "Data Necropolitics", Antonio Pele, Caitlin Mulholland

Indiana Journal of Global Legal Studies

This paper argues for actual and legal regulation of artificial intelligence (AI) and facial recognition. These new technologies represent great opportunities to improve the welfare of societies. However, some of their uses can also enhance discrimination and, eventually, lead to violence. From a comparative approach (examining the European Union and Brazil), we address the current and future aspects of facial regulation, AI, and personal data. This paper shows that regulation is relevant to protect the rule of law, free markets, and individual freedoms. It also examines the looming risks unfolding from the unregulated uses of new technologies. Our concept of …

Introduction: The Risk Of Digitalization: Transforming Government Into A Digital Leviathan, Jose Vida Fernandez

Indiana Journal of Global Legal Studies

This paper provides an overview of the threats posed by digitalization, particularly with regard to the public sector. It starts by describing digital risks as true global risks and argues that their scope and severity have not been recognized until now. The most well-known challenges come from the transformation of the private sector (economy, society, and individuals) and the emergence of large private powers that dominate the digital environment (digital feudal lord). However, there are even greater challenges coming from the digitization of government, creating almighty public bodies detached from laws that kept them locked until now.

Layered Fiduciaries In The Information Age, Zhaoyi Li

Indiana Law Journal

Technology companies such as Facebook have long been criticized for abusing customers’ personal information and monetizing user data in a manner contrary to customer expectations. Some commentators suggest fiduciary law could be used to restrict how these companies use their customers’ data.1 Under this framework, a new member of the fiduciary family called the “information fiduciary” was born. The concept of an information fiduciary is that a company providing network services to “collect, analyze, use, sell, and distribute personal information” owes customers and end-users a fiduciary duty to use the collected data to promote their interests, thereby assuming fiduciary liability …

Guilty Of Probable Cause: Public Arrest Records And Dignity In The Information Age, Nicholas Thompson

Indiana Journal of Global Legal Studies

The United States is exceptional among Western nations in its treatment of criminal records. Today, an estimated one-third of Americans1 bear the “modern equivalent of branding”: the publicly-accessible criminal record.2 Far from remaining locked in digital limbo, these records serve a variety of purposes, from legitimate law enforcement use to extortion against arrestees seeking to scrub their mugshots from a Google search.3 It would be natural to assume that such records result from an individual’s commission of a crime, for which the individual is duly convicted and then marked with the brand of the state for the transgression. But the …

Big Data, Big Gap: Working Towards A Hipaa Framework That Covers Big Data, Ryan Mueller

Indiana Law Journal

One lasting impact of the Health Insurance Portability and Accountability Act (HIPAA) is the privacy protections it provides for our sensitive health information. In the era of Big Data, however, much of our health information exists outside the traditional doctor-patient dynamic. From wearable technology, to mobile applications, to social media and internet browsing, Big Data organizations collect swaths of data that shed light on sensitive health information. Big Data organizations largely fall outside of HIPAA’s current framework because of the stringent requirements for when the HIPAA protections apply, namely that the data must be held by a covered entity, and …

2l Brian Hills Honored With Iapp Annual Westin Scholar Award, James Owsley Boyd

Keep Up With the Latest News from the Law School (blog)

No abstract provided.

The Law Of Employee Data: Privacy, Property, Governance, Matthew T. Bodie

Indiana Law Journal

The availability of data related to the employment relationship has ballooned into an unruly mass of performance metrics, personal characteristics, biometric recordings, and creative output. The law governing this collection of information has been awkwardly split between privacy regulations and intellectual property rights, with employees generally losing on both ends. This Article rejects a binary approach that either carves out private spaces ineffectually or renders data into isolated pieces of ownership. Instead, the law should implement a hybrid system that provides workers with continuing input and control without blocking efforts at joint production. In addition, employers should have fiduciary responsibilities …

Illusory Privacy, Thomas Haley

Indiana Law Journal

For decades, regulators, consumer advocates, and privacy theorists have grappled with one of privacy’s most important questions: how to protect private information that consumers unwittingly give away with the click of an “I accept” button. Reform efforts remain mired in a morass of text, focusing on the increasing volume and complexity of firms’ terms of service and privacy policies. This Article moves beyond such existing approaches. By analyzing terms of service and privacy policies from hundreds of top websites—which this Article calls “platform terms”—this Article demonstrates that the prevailing “notice and consent” paradigm of privacy regulation cannot provide meaningful protection. …

The Oslo Accords: A Modern-Day Story Of Occupation Told Through Violations Of The Right To Freedom Of Privacy, Catherine Demetrovich

Indiana Law Journal

The Israeli-Palestinian conflict began in the early 1900s when the disputed land, what is now the West Bank and the Gaza Strip, fell under British rule. After the Six- Day War in 1967, Israel took control of the West Bank, Golan Heights, and the Gaza Strip. Since then, tensions between Israel and Palestine have continued to grow. This Note explores a modern-day occupation question: Israel’s control over Palestine’s information and communication technology (ICT) sector. Along with privacy and human rights violations, Israel’s control is in direct violation of the Oslo Accords— guaranteeing Palestinians limited self-governance in Gaza and the West …

The Reasonable Intelligence Agency, Asaf Lubin

Articles by Maurer Faculty

Article 57(2) of the First Additional Protocol to the Geneva Conventions requires parties to an armed conflict to “do everything feasible to verify” their objects of attack and take “all precautions” to minimize civilian casualties and unintentional damage to civilian property. This obligation has been interpreted in international law to require state parties to set up an “effective intelligence gathering system” that would properly identify targets using all technical means at the disposal of the combating forces.

But existing law has failed to define what “effective intelligence” looks like. Quite the opposite. Modern history is filled with examples of intelligence …