Privacy Law Commons^™

A Look Into The Data Privacy Crystal Ball: A Survey Of Possible Outcomes For The Eu-U.S. Privacy Shield Agreement, Emily Linn

Vanderbilt Journal of Transnational Law

The trade relationship between the European Union and the United States, the largest cross-border data flow in the world, is in a state of uncertainty. Operating under different notions of what privacy should look like and divergent legal protections for personal data, the European Union and United States have struggled to reach a mutually acceptable agreement in the past. This Note analyzes their latest attempt, the EU-U.S. Privacy Shield, with specific emphasis on (1) the way it has improved upon its predecessor, the EU-U.S. Safe Harbor; (2) the weaknesses that still remain; and (3) the external factors that threaten the …

The Law And Policy Of People Analytics, Matthew T. Bodie, Miriam A. Cherry, Marcia L. Mccormick, Jintong Tang

Faculty Publications

(Excerpt)

Recently, leading technology companies such as Google and IBM have started experimenting with "people analytics," a new data-driven approach to human resources management. People analytics is just one example of the phenomenon of "big data," in which analyses of huge sets of quantitative information are used to guide a variety of decisions. Applying big data to workplace situations could lead to more effective work outcomes, as in Moneyball, where the Oakland A's baseball franchise used statistics to assemble a winning team on a shoestring budget. People analytics is the name given to this new approach to personnel management …

War In The Expanse: The Metaphysics Of Cyberspace, Roy Balleste

Canadian Journal of Law and Technology

No abstract provided.

Do They Want To Regulate Online Profiling?, Laura Garcia Vargas

Canadian Journal of Law and Technology

Online profiling or behavioural tracking is the process by which private companies track and gather data about users’ activities in online platforms. The data collected by all the companies is aggregated with the purpose of creating a comprehensive profile about users. Since at least 15 years ago, there have been several attempts to regulate online profiling in order to reduce its privacy implications. In general, these regulations have tried to limit the way the information is used, the type of data that is collected, and impose or suggest the security standards that the companies should take to protect it.

This …

A Whole New Meaning To Having Our Head In The Clouds: Voice Recognition Technology, The Transmission Of Our Oral Communications To The Cloud And The Ability Of Canadian Law To Protect Us From The Dangers It Presents, Sarit K. Mizrahi

Canadian Journal of Law and Technology

Voice recognition technology is now included in modern devices as a matter of course, being used in anything from our cellular telephones, to our televisions, and even the toys of our children. While we may voluntarily interact with some of our devices using this technology, such as conversing with Siri on our iPhones, many of us remain unaware as to the dangerous implications of using voice recognition technology.

Its ability to record some of our most personal conversations allows private companies to eavesdrop on us in an unprecedented manner and amass highly sensitive information about our lives that would have …

The Lawful Access Fallacy: Voluntary Warrantless Disclosures, Customer Privacy, And Government Requests For Subscriber Information, Matthew P. Ponsford

Canadian Journal of Law and Technology

This paper explores the recent legal, political, privacy, and communications developments surrounding warrantless government requests for basic subscriber information. I assert the current practice remains marred in secrecy and therefore poses a significant threat to Canadian civil liberties and privacy rights.

Can You Hear Me Now? Conceptions Of Privacy In Section 8, Chris Sewrattan

Canadian Journal of Law and Technology

This article will examine the different conceptions of privacy that are present in the jurisprudence of s. 8 of the Canadian Charter of Rights and Freedoms. Section 8 guarantees that everyone has the right against unreasonable search and seizure. As a constitutional right, the protection covers the privacy relationship between the state and the individual. It confers privacy over information for which there exists a reasonable expectation of privacy. The article will analyze a taxonomy of four privacy conceptions present in the literature and discuss their presence in s. 8 case law. It will then examine two criticisms that arise …

Privacy And Insurance In Canada, England, And France - How Does The Responsible Insurer Put Guidelines And Procedures In Place For Retaining And Destroying Personal Information, Christopher Whitehead

Canadian Journal of Law and Technology

In this article, I will be discussing records containing personal data or information, and how ‘‘guidelines and procedures” are ‘‘put . . . in place for retaining and destroying [such] information” by private-sector insurers carrying on business in Canada, England, and France. Where I discuss Canada, I use the examples of the law of Ontario — which belongs to the English legal tradition —and of Quebec — whose private law belongs to the French legal tradition. As it happens, these are the two traditions with which I have the most experience relating to personal information.

Trust: A Model For Disclosure In Patent Law, Ari Ezra Waldman

Articles & Chapters

How to draw the line between public and private is a foundational, first-principles question of privacy law, but the answer has implications for intellectual property, as well. This project is the first in a series of papers about first-person disclosures of information in the privacy and intellectual property law contexts, and it defines the boundary between public and non-public information through the lens of social science — namely, principles of trust.

Patent law’s “public use” bar confronts the question of whether legal protection should extend to information previously disclosed to a small group of people. I present evidence that shows …

The Judicial Legacy Of Louis Brandeis And The Nature Of American Constitutionalism, Edward A. Purcell Jr.

Articles & Chapters

No abstract provided.

"Reasonable Zones Of Privacy"—The Supreme Court's Struggle To Find Clarity In The American Landscape Regarding Fourth Amendment Rights, Alex Alben

Washington Journal of Law, Technology & Arts

The U.S. Supreme Court has struggled over the years to develop the concept of what constitutes a "reasonable zone of privacy" when it comes to intrusion on an individual's physical space or activities. With the advent and widespread adoption of new technologies such as drones and listening devices, concern for protecting privacy has magnified, yet court doctrine remains inconsistent. The author, Washington State's Chief Privacy Officer, reviews the history of Supreme Court "search and seizure" rulings in prominent cases to identify both patterns and flaws on the topic of protecting citizen privacy.

Privacy's Trust Gap: A Review, Neil M. Richards, Woodrow Hartzog

Scholarship@WashULaw

It can be easy to get depressed about the state of privacy these days. In an age of networked digital information, many of us feel disempowered by the various governments, companies, and criminals trying to peer into our lives to collect our digital data trails. When so much is in flux, the way we think about an issue matters a great deal. Yet while new technologies abound, our ideas and thinking — as well as our laws — have lagged in grappling with the new problems raised by the digital revolution. In their important new book, Obfuscation: A User’s Guide …

The Third-Party Doctrine And The Future Of The Cloud, Neil M. Richards

Scholarship@WashULaw

When the government seeks electronic documents held in the cloud, what legal standard should apply? This simple question raises fundamental questions about the future of our civil liberties in the digital world. In a series of cases, government lawyers have argued that information shared with digital intermediaries—including emails and cloud-stored documents—can be seized without a warrant. Their argument rests upon a controversial Fourth Amendment principle known as the “Third-Party Doctrine,” which maintains that information shared even with trusted “third parties” loses a reasonable expectation of privacy under the Fourth Amendment, and with it, the protection of the warrant requirement. Criminal …

Secret Government Searches And Digital Civil Liberties, Neil M. Richards

Scholarship@WashULaw

In Secret Government Searches and Digital Civil Liberties, Neil Richards tackles the issue of what he describes as “secret government searches”—namely, examples of government surveillance that remain a secret to the search target. These can be physical or digital, carried out with a warrant or without, and unknown to everyone but the government or facilitated by a private company that is prohibited from notifying the target. Richards places these secret searches in historical, technological, and constitutional context and argues that they are unprecedented, historically and technologically, and inconsistent with key constitutional values, including freedom of thought, freedom of expression, and …

Trusting Big Data Research, Neil M. Richards, Woodrow Hartzog

Scholarship@WashULaw

Although it might puzzle or even infuriate data scientists, suspicion about big data is understandable. The concept doesn’t seem promising to most people. It seems scary. This is partly because big data research is shrouded in mystery. People are unsure about organizations’ motives and methods. What do companies think they know about us? Are they keeping their insights safe from hackers? Are they selling their insights to unscrupulous parties? Most importantly, do organizations use our personal information against us? Big data research will only overcome its suspicious reputation when people can trust it.

Some scholars and commentators have proposed review …

The Dynamic Effect Of Information Privacy Law, Ignacio Cofone

Minnesota Journal of Law, Science & Technology

Discussions of information privacy typically rely on the idea that there is a trade off between privacy and availability of information. But privacy, under some circumstances, can lead to creation of more information. In this article, I identify such circumstances by exploring the ex ante incentives created by entitlements to personal data and evaluating the long-term effects of privacy. In so doing, I introduce an economic justification of information privacy law. Under the standard law & economics account, as long as property rights are defined and transaction costs are low, initial right allocations should be irrelevant for social welfare. But …

Data Privacy And Protection In The Agriculture Industry: Is Federal Regulation Necessary?, Jody L. Ferris

Minnesota Journal of Law, Science & Technology

No abstract provided.

Substantiating Big Data In Health Care, Nathan Cortez

Faculty Journal Articles and Book Chapters

Predictive analytics and "big data" are emerging as important new tools for diagnosing and treating patients. But as data collection becomes more pervasive, and as machine learning and analytical methods become more sophisticated, the companies that traffic in health-related big data will face competitive pressures to make more aggressive claims regarding what their programs can predict. Already, patients, practitioners, and payors are inundated with claims that software programs, "apps," and other forms of predictive analytics can help solve some of the health care system's most pressing problems. This article considers the evidence and substantiation that we should require of these …

Performative Privacy, Scott Skinner-Thompson

Publications

Broadly speaking, privacy doctrine suggests that the right to privacy is non-existent once one enters the public realm. Although some scholars contend that privacy ought to exist in public, “public privacy” has been defended largely with reference to other, ancillary values privacy may serve. For instance, public privacy may be necessary to make the freedom of association meaningful in practice.

This Article identifies a new dimension of public privacy, supplementing extant justifications for the right, by arguing that many efforts to maintain privacy while in “public” are properly conceptualized as forms of performative, expressive resistance against an ever-pervasive surveillance society. …

Privacy And The Right To Record, Margot E. Kaminski

Publications

Many U.S. laws protect privacy by governing recording. Recently, however, courts have recognized a First Amendment “right to record.” This Article addresses how courts should handle privacy laws in light of the developing First Amendment right to record.

The privacy harms addressed by recording laws are situated harms. Recording changes the way people behave in physical spaces by altering the nature of those spaces. Thus, recording laws can be placed within a long line of First Amendment case law that recognizes a valid government interest in managing the qualities of rivalrous physical space, so as not to allow one person’s …

Health Information Equity, Craig Konnoth

Publications

In the last few years, numerous Americans’ health information has been collected and used for follow-on, secondary research. This research studies correlations between medical conditions, genetic or behavioral profiles, and treatments, to customize medical care to specific individuals. Recent federal legislation and regulations make it easier to collect and use the data of the low-income, unwell, and elderly for this purpose. This would impose disproportionate security and autonomy burdens on these individuals. Those who are well-off and pay out of pocket could effectively exempt their data from the publicly available information pot. This presents a problem which modern research ethics …

Standing After Snowden: Lessons On Privacy Harm From National Security Surveillance Litigation, Margot E. Kaminski

Publications

Article III standing is difficult to achieve in the context of data security and data privacy claims. Injury in fact must be "concrete," "particularized," and "actual or imminent"--all characteristics that are challenging to meet with information harms. This Article suggests looking to an unusual source for clarification on privacy and standing: recent national security surveillance litigation. There we can find significant discussions of what rises to the level of Article III injury in fact. The answers may be surprising: the interception of sensitive information; the seizure of less sensitive information and housing of it in a database for analysis; and …

An Expressive Theory Of Privacy Intrusions, Craig Konnoth

Publications

The harms of privacy intrusions are numerous. They include discrimination, reputational harm, and chilling effects on speech, thought, and behavior. However, scholarship has yet to fully recognize a kind of privacy harm that this article terms "expressive."

Depending on where the search is taking place and who the actors involved are--a teacher in a school, the police on the street, a food inspector in a restaurant--victims and observers might infer different messages from the search. The search marks the importance of certain societal values such as law enforcement or food safety. It can also send messages about certain groups by …

Biometric Cyberintelligence And The Posse Comitatus Act, Margaret Hu

Faculty Publications

This Article addresses the rapid growth of what the military and the intelligence community refer to as “biometric-enabled intelligence.” This newly emerging intelligence tool is reliant upon biometric databases—for example, digitalized storage of scanned fingerprints and irises, digital photographs for facial recognition technology, and DNA. This Article introduces the term “biometric cyberintelligence” to more accurately describe the manner in which this new tool is dependent upon cybersurveillance and big data’s massintegrative systems.

This Article argues that the Posse Comitatus Act of 1878, designed to limit the deployment of federal military resources in the service of domestic policies, will be difficult …

The Use Of Big Data Analytics By The Irs: Efficient Solutions Or The End Of Privacy As We Know It?, Kimberly A. Houser, Debra Sanders

Vanderbilt Journal of Entertainment & Technology Law

This Article examines the privacy issues resulting from the IRS's big data analytics program as well as the potential violations of federal law. Although historically, the IRS chose tax returns to audit based on internal mathematical mistakes or mismatches with third party reports (such as W-2s), the IRS is now engaging in data mining of public and commercial data pools (including social media) and creating highly detailed profiles of taxpayers upon which to run data analytics. This Article argues that current IRS practices, mostly unknown to the general public are violating fair information practices. This lack of transparency and accountability …

Flagging The Middle Ground Of The Right To Be Forgotten: Combatting Old News With Search Engine Flags, Hannah L. Cook

Vanderbilt Journal of Entertainment & Technology Law

Incomplete and outdated news articles present an increasing problem for individuals who find themselves stigmatized on the basis of truthful but misleading reports. This Article proposes a moderate solution between the European right to be forgotten and the protectionless status quo in the United States. It proposes a flagging system, administered through Federal Trade Commission adjudications, where links to articles whose private harms outweigh their public benefits are flagged in the search results of an individual. This flag will help combat psychological biases that may cause decisionmakers to place an irrational weight on these articles while preserving the ability of …

The Effect Of Legislation On Fourth Amendment Protection, Orin S. Kerr

Michigan Law Review

When judges interpret the Fourth Amendment, and privacy legislation regulates the government’s conduct, should the legislation have an effect on the Fourth Amendment? Courts are split three ways. Some courts argue that legislation provides the informed judgment of a coequal branch that should influence the Fourth Amendment. Some courts contend that the presence of legislation should displace Fourth Amendment protection to prevent constitutional rules from interfering with the legislature’s handiwork. Finally, some courts treat legislation and the Fourth Amendment as independent and contend that the legislation should have no effect. This Article argues that courts should favor interpreting the Fourth …

Compulsory Corporate Cyber-Liability Insurance: Outsourcing Data Privacy Regulation To Prevent And Mitigate Data Breaches, Minhquang N. Trang

Minnesota Journal of Law, Science & Technology

No abstract provided.

Only The Good Regulations Die Young: Recognizing The Consumer Benefits Of The Fcc's Now-Defunct Privacy Regulations, Paul R. Gaus

Minnesota Journal of Law, Science & Technology

No abstract provided.

The Dark Side Of Social Media Romance: Civil Recourse For Catfish Victims, Armida Derzakarian

Loyola of Los Angeles Law Review

No abstract provided.