Privacy Law Commons^™

Police Surveillance And The Perils Of Techno-Solutionism, Prithika Balakrishnan

Michigan Journal of Race and Law

This Article charts domestic law enforcement’s use of video surveillance, beginning in the backlash to the Civil Rights movement in the late 1960s, continuing through the War on Terror and, more recently, in the context of the post-George Floyd public critiques of policing. The undergirding philosophy of policing’s embrace of surveillance technology is techno-solutionism, the view that all complex social situations can be simplified to measurable data primed for quick-fix, unbiased, algorithmic answers. While technology may have initially been adopted by police to respond to specific problems, it has changed the problems themselves, altered the array of potential solutions, and …

Fourth Amendment Anti-Theory, Matthew Tokson

Michigan Law Review

A review of The Digital Fourth Amendment: Privacy and Policing in Our Online World. By Orin Kerr.

A Real Account Of Deep Fakes, Benjamin L.W Sobel

Michigan Law Review

Laws regulating pornographic deepfakes are written to prohibit “digital forgeries,” “false” images, or media “indistinguishable” from “authentic” recordings. Yet the typical anti-deepfake law covers materials that aren’t forgeries, aren’t false, and that reasonable observers can easily distinguish from authentic recordings. Though drafted as if they regulate statements of fact, anti-deepfake laws actually target certain outrageous depictions per se—and rightly so, because pornographic deepfakes cause harm irrespective of their truth or falsity. However, the inapposite language of facts results in statutes with crucial ambiguities. Moreover, because anti-deepfake laws ban outrageous depictions irrespective of the factual assertions they make, they differ fundamentally …

The “Founder’S Gaze”: How The Fourth Amendment Is A Surveillance Technology That Enables Ai To Scale Control Over The Subaltern, Diego H. Alcalá Laboy

Michigan Journal of Race and Law

Much has been written about the rise of artificial intelligence and machine learning applications and how the current Fourth Amendment law has been unable to mitigate the privacy harm that these tools produce. This article explores how the development and usage of AI and machine learning models is dependent on the originalism principles of Fourth Amendment Law. Utilizing Critical Surveillance Studies and Anticolonial Theory, I posit that the Fourth Amendment is a surveillance technology that categorizes conduct, persons, and places to impose the material conditions for the subjugation of historically minoritized communities within the United States. Furthermore, this article explores …

Smartphones On Wheels In Southeast Asia: A Crossroads For Data Governance, Attamongkol Tantratian, Gunn Jiravuttipong

Journal of Law and Mobility

While the transformation of automobiles into data-generating “smartphones on wheels” has revolutionized mobility, it has also raised critical concerns over data privacy and sovereignty. Equipped with sensors and connected technologies, smart vehicles collect vast amounts of data, including personal information, driving patterns, and biometric identifiers. While auto-exporting jurisdictions such as the United States, the European Union, and China have introduced regulatory measures to address these challenges, countries importing smart vehicles remain vulnerable due to their limited influence over the auto companies’ integrated technology and data policies.

This Article examines the regulatory and economic challenges faced by developing nations integrating foreign-designed …

Marriage, Courts, And Substantive Equality: A Transformative Interpretation, Kushagr Bakshi

Michigan Law Review

Courts in various jurisdictions have relied on either the right to privacy or the right to equality to offer protections to the LGBTQ+ community. The use of different rights to achieve similar ends may seem like an empty distinction. But the differences in the nature and function of each right evince the differences in the construction of rights across jurisdictions. In the traditional liberal method of conceptualizing rights, privacy is typically a negative right, restricting the state from interfering in intimate relationships between individuals. Courts operating within a transformative framework of rights interpretation, however, rely on the positive right to …

Tort Liability, Privacy, And Regulatory Considerations For Level 3 Autonomous Vehicles, Ryan H. Jones

Michigan Technology Law Review

Recent developments in emerging technology, such as artificial intelligence, robotics, and autonomous vehicles, have generated inquiries about the incorporation of these technologies into the law, as well as the philosophical and ethical questions that accompany their use. This paper considers existing legal doctrine and regulatory frameworks as applied to the niche area of Level 3 autonomous vehicles. Specifically, this paper considers tort liability in the form of negligence and products liability, privacy risks, and regulatory considerations in relation to Level 3 vehicles. Finally, societal risks and potential solutions are considered to provide insight into potential areas of additional work.

Postmortem Privacy, Anita L. Allen, Jennifer E. Rothman

Michigan Law Review

Since their inception in the late nineteenth century, privacy rights have been widely understood to terminate with a person’s death. The “no-privacy-rights-for- the-dead” doctrine has been repeated for nearly 130 years. As demonstrated in this Article, the reality on the ground deviated from this common pronouncement even early on. The divergence is so great today that sustained consideration of postmortem privacy is essential. This is especially so given urgent calls to protect the digital assets of the dead and evolving technology that allows for the reanimation of deceased performers and loved ones. This Article provides a theoretical foundation for determining …

Regulating Algorithmic Harms, Sylvia Lu

Law & Economics Working Papers

In recent years, the rapid expansion of artificial intelligence (AI) innovations has led to a rise in algorithmic harms—harms emerging from AI operations that pose significant threats to civil rights and democratic values in today’s technological landscape. A facial recognition system for improving criminal detection wrongly collected sensitive personal data and flagged racial minorities as shoplifters. A risk-prediction algorithm adopted to identify patients denied medical treatment to Black individuals with poor health conditions. A social media algorithm intended to boost social engagement exacerbated addictive behavior and mental illness in teenagers. These harms are becoming increasingly ubiquitous yet often manifest in …

Consumer Privacy And The Dobbs Disruption, Mason R. Clark

University of Michigan Journal of Law Reform

The right to reproductive privacy is under attack in the United States, and it is losing ground. Dobbs v. Jackson Women’s Health Organization, the Supreme Court’s 2022 decision that overruled Roe v. Wade’s constitutional protection of abortion and jeopardized privacy rights by proxy, reflects this losing posture. Scholarship in reproductive privacy varyingly critiques federal privacy initiatives, evaluates regulatory interventions, and proposes civil rights frameworks in response to Dobbs. This Article, however, pinpoints how Dobbs created a gaping hole in state consumer privacy laws even as they propagated across the United States. Currently, there are no state consumer privacy …

The Broader Lessons Of Privacy Law, Salome Viljoen

Articles

This Article explores the trend of privacy—and what kind of techno-social or legal effect ought to count as a “privacy harm”—expanding to encompass a growing set of social factors. This big-tent approach to privacy has several virtues. However, it also comes with a few costs. While others have explored the conceptual and doctrinal tradeoffs that an expansive approach to privacy may entail, this Article focuses on a secondary effect the trend toward expansiveness has had on the relationship between privacy scholarship and legal scholarship more broadly. This Article suggests that the internal expansiveness of privacy means that insights developed within …

On The Genealogy Of Intimate Digital Harm, Aziz Z. Huq

Michigan Law Review

A review of The Fight for Privacy: Protecting Dignity, Identity, and Love in the Digital Age. By Danielle Keats Citron.

Don't Call It 'Privacy': Data Protection, From Ideas To Constitutional Law, Raphaël Beauregard-Lacroix

SJD Dissertations

Data protection law has been subject to various criticisms, among which is one of a fundamental kind: devoted to procedures, it lost sight of its privacy-bound origins. This dissertation aims to provide a novel historical and comparative account of the transatlantic development of data protection law, from the origins to this day, identifying how it may yet succeed in reaching the policy goals its original proponents imagined, and untangling key legal concepts along the way.

The regulatory concept of data protection was founded on three basic principles: purpose limitation, universality, and institutional supervision and enforcement. These three principles trace their …

Valuing Social Data, Amanda Parsons, Salome Viljoen

Articles

Social data production—accumulating, processing, and using large volumes of data about people—is a unique form of value creation that characterizes the digital economy. Social data production also presents critical challenges for the legal regimes that encounter it. This Article provides scholars and policymakers with the tools to comprehend this new form of value creation through two descriptive contributions. First, it presents a theoretical account of social data, a mode of production that is cultivated and exploited for two distinct (albeit related) forms of value: prediction value and exchange value. Second, it creates and defends a taxonomy of three “scripts” that …

Research Access To Social Media Data: Lessons From Clinical Trial Data Sharing, Christopher J. Morten, Gabriel Nicholas, Salomé Vilgoen

Articles

For years, social media companies have sparred with lawmakers over how much independent access to platform data they should provide researchers. Sharing data with researchers allows the public to better understand the risks and harms associated with social media, including areas such as misinformation, child safety, and political polarization. Yet researcher access is controversial. Privacy advocates and companies raise the potential privacy threats of researchers using such data irresponsibly. In addition, social media companies raise concerns over trade secrecy: the data these companies hold and the algorithms powered by that data are secretive sources of competitive advantage. This Article shows …

Aerial Trespass And The Fourth Amendment, Randall F. Khalil

Michigan Law Review

Since 1973, courts have analyzed aerial surveillance under the Fourth Amendment by applying the test from Katz v. United States, which states that a search triggers the Fourth Amendment when a government actor violates a person’s “reasonable expectation of privacy.” The Supreme Court applied Katz to aerial surveillance three times throughout the 1980s, yet this area of the law remains unsettled and outcomes are unpredictable. In 2012, the Supreme Court recognized an alternative to the Katz test in Jones v. United States, which held that a search triggers the Fourth Amendment when a government actor physically intrudes into …

Giving The Fourth Amendment Meaning: Creating An Adversarial Warrant Proceeding To Protect From Unreasonable Searches And Seizures, Ben Mordechai-Strongin

University of Michigan Journal of Law Reform

For at least the past 40 years, police and prosecutors have had free reign in conducting illegal searches and seizures nominally barred by the Fourth Amendment. The breadth of exceptions to the warrant requirement, the lax interpretation of probable cause, and especially the “good faith” doctrine announced in U.S. v. Leon have led to severe violations of privacy rights, trauma to those wrongly searched or seized, and a court system overburdened by police misconduct cases. Most scholars analyzing the issue agree that the rights guaranteed by the Fourth Amendment—to be free from unreasonable search and seizure—have been severely eroded or …

Who Owns Data? Understanding The Rights & Duties Of Platform Stakeholders, James Steiner

Michigan Business & Entrepreneurial Law Review

While mindlessly scrolling Facebook, Instagram, or TikTok, users often forget that a complicated web of personal data ownership lies under the screen. This Note analyzes the legal interactions of users, platforms, and third-parties regarding this personal data. Hohfeldian analysis of rights and reciprocal duties in the context of California’s various data privacy statutes and common law doctrines provides a powerful tool for understanding the rocky legal landscape data stakeholders navigate. Courts add further definition to this landscape when adjudicating conflicts between these stakeholders. Legal scholars have also proposed frameworks to simplify the rules of engagement for these stakeholders. Data privacy …

Unprecedented Precedent And Original Originalism: How The Supreme Court’S Decision In Dobbs Threatens Privacy And Free Speech Rights, Leonard Niehoff

Articles

The U.S. Supreme Court’s decision in Dobbs v. Jackson Women’s Health Organization has drawn considerable attention because of its reversal of Roe v. Wade and its rejection of a woman’s constitutional right to terminate her pregnancy. The Dobbs majority, and some of the concurring opinions, emphasized that the ruling was a narrow one. Nevertheless, there are reasons to think the influence of Dobbs may extend far beyond the specific constitutional issue the case addresses.

This article explains why Dobbs could have significant and unanticipated implications for the law of privacy and the law of free expression. I argue that two …

The Great Regulatory Dodge, Helen Nissenbaum, Katherine Strandburg, Salome Viljoen

Articles

U.S. privacy law is in a renewed moment of regulatory possibility, with both Congress and the states considering sweeping consumer privacy laws. These new proposals to enact “omnibus” privacy protections could be couched as an antidote to the current U.S. privacy regime: a patchwork of sectoral privacy laws stitched atop the background of FTC consumer contract enforcement. However, this Essay maintains that a one-size-fits-all approach cannot successfully capture both privacy’s value and its variability. Yet, it is clearly the case that the present- day sectoral regime in the United States suffers from significant shortcomings. These shortcomings allow behaviors that seem …

“Bang!”: Shotspotter Gunshot Detection Technology, Predictive Policing, And Measuring Terry’S Reach, Harvey Gee

University of Michigan Journal of Law Reform

ShotSpotter technology is a rapid identification and response system used in ninety American cities that is designed to detect gunshots and dispatch police. ShotSpotter is one of many powerful surveillance tools used by local police departments to purportedly help fight crime, but they often do so at the expense of infringing upon privacy rights and civil liberties. This Article expands the conversation about ShotSpotter technology considerably by examining the adjacent Fourth Amendment issues emanating from its use. For example, law enforcement increasingly relies on ShotSpotter to create reasonable suspicion where it does not exist. In practice, the use of ShotSpotter …

Fighting Global Surveillance: Lessons From The American Muslim Community, Danna Z. Elmasry

University of Michigan Journal of Law Reform

The United States government has been spying on its citizens through a massive surveillance infrastructure that is unrestricted to a particular target or suspicion of wrongdoing. The statutory and regulatory authorities responsible for this infrastructure are sprawling and often secret. Built-in limitations and oversight mechanisms are riddled with loopholes or inaccessible due to exceedingly high thresholds. Litigation challenges to surveillance overreach often fail at standing. Under the current doctrine, plaintiffs must show that their own communications have been surveilled by a specific surveillance program. This Note contributes to surveillance reform by proposing a private right of action that sets the …

Suspect Development Systems: Databasing Marginality And Enforcing Discipline, Rashida Richardson, Amba Kak

University of Michigan Journal of Law Reform

Algorithmic accountability law—focused on the regulation of data-driven systems like artificial intelligence (AI) or automated decision-making (ADM) tools—is the subject of lively policy debates, heated advocacy, and mainstream media attention. Concerns have moved beyond data protection and individual due process to encompass a broader range of group-level harms such as discrimination and modes of democratic participation. While a welcome and long overdue shift, the current discourse ignores systems like databases, which are viewed as technically “rudimentary” and often siloed from regulatory scrutiny and public attention. Additionally, burgeoning regulatory proposals like algorithmic impact assessments are not structured to surface important –yet …

Remarks, Andrea Dennis

University of Michigan Journal of Law Reform

Over the course of one week, the Michigan Journal of Law Reform presented its annual Symposium, this year titled Reimagining Police Surveillance: Protecting Activism and Ending Technologies of Oppression. During this week, the Journal explored complicated questions surrounding the expansion of police surveillance technologies, including how police and federal agencies utilize their extensive resources to identify and surveil public protest, the ways in which technology employed by police is often flawed and disparately impacts people of color, and potential reforms of police surveillance technology. Before delving into these complicated questions, I presented remarks on the history of police surveillance …

Mental Health Mobile Apps And The Need To Update Federal Regulations To Protect Users, Kewa Jiang

Michigan Technology Law Review

With greater societal emphasis on the need for better mental health services coupled with COVID-19 limits, mental health mobile applications have significantly risen in variety, availability, and accessibility. As more consumers use mental health mobile applications, more data is generated and collected by mobile application companies. However, consumers may have the false assumption that the data collected is protected under HIPAA or have an expectation of privacy protection higher than current regulations afford. This Note examines HIPAA, Health Breach Notification Rule, and section 5 of the Federal Trade Commission Act, as well as how these regulations fall short of protecting …

Another Katz Moment?: Privacy, Property, And A Dna Database, Claire Mena

University of Michigan Journal of Law Reform

The Fourth Amendment protects the “right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures.” The understanding of these words seems to shift as new technologies emerge. As law enforcement’s arsenal of surveillance techniques has grown to include GPS tracking, cell phones, and cell site location information (CSLI), the Supreme Court has applied Fourth Amendment protections to these modern tools. Law enforcement continues to use one pervasive surveillance technique without limitations: the routine collection of DNA. In 2013, the Supreme Court in Maryland v. King held that law enforcement may routinely …

Unfair Collection: Reclaiming Control Of Publicly Available Personal Information From Data Scrapers, Andrew M. Parks

Michigan Law Review

Rising enthusiasm for consumer data protection in the United States has resulted in several states advancing legislation to protect the privacy of their residents’ personal information. But even the newly enacted California Privacy Rights Act (CPRA)—the most comprehensive data privacy law in the country— leaves a wide-open gap for internet data scrapers to extract, share, and monetize consumers’ personal information while circumventing regulation. Allowing scrapers to evade privacy regulations comes with potentially disastrous consequences for individuals and society at large.

This Note argues that even publicly available personal information should be protected from bulk collection and misappropriation by data scrapers. …

Data Privacy, Human Rights, And Algorithmic Opacity, Sylvia Lu

Fellow, Adjunct, Lecturer, and Research Scholar Works

Decades ago, it was difficult to imagine a reality in which artificial intelligence (AI) could penetrate every corner of our lives to monitor our innermost selves for commercial interests. Within just a few decades, the private sector has seen a wild proliferation of AI systems, many of which are more powerful and penetrating than anticipated. In many cases, AI systems have become “the power behind the throne,” tracking user activities and making fateful decisions through predictive analysis of personal information. Despite the growing power of AI, proprietary algorithmic systems can be technically complex, legally claimed as trade secrets, and managerially …

Privacy Frameworks For Smart Cities, Lindsey Tonsager, Jayne Ponder

Journal of Law and Mobility

This paper identifies some of the core privacy considerations raised by smart cities – government surveillance and data security in Part I. Then, Part II proposes a set of core principles for smart cities to consider in the development and deployment of smart cities to address privacy concerns. These principles include: (A) human-centric approaches to smart cities design and implementation, (B) transparency for city residents, (C) privacy by design, (D) anonymization and deidentification, (E) data minimization and purpose specification, (F) trusted data sharing, and (G) cybersecurity resilience.

Individuals As Gatekeepers Against Data Misuse, Ying Hu

Michigan Technology Law Review

This article makes a case for treating individual data subjects as gatekeepers against misuse of personal data. Imposing gatekeeper responsibility on individuals is most useful where (a) the primary wrongdoers engage in data misuse intentionally or recklessly; (b) misuse of personal data is likely to lead to serious harm; and (c) one or more individuals are able to detect and prevent data misuse at a reasonable cost.

As gatekeepers, individuals should have a legal duty to take reasonable measures to prevent data misuse where they are aware of facts indicating that the person seeking personal data from them is highly …