Privacy Law Commons^™

No Exit: Ten Years Of "Privacy Vs. Speech" Post-Sorrell, G. S. Hans

Vanderbilt Law School Faculty Publications

A decade has passed since the U.S. Supreme Court held in Sorrell vs. IMS Health that a Vermont privacy law violated the First Amendment. Somewhat surprisingly, the debate about the intersection between privacy laws and free speech protections has not progressed much in the intervening years. If anything, the concerns that some privacy advocates had following Sorrell-that the First Amendment could be used as a tool to overturn privacy regulations-have extended to other areas of economic regulation. As a public interest attorney working on technology law and policy, I entered into practice not long after Sorrell was decided, when it …

Pure Privacy, Jeffrey Bellin

Faculty Publications

n 1890, Samuel Warren and Louis Brandeis began a storied legal tradition of trying to conceptualize privacy. Since that time, privacy's appeal has grown beyond those authors' wildest expectations, but its essence remains elusive. One of the rare points of agreement in boisterous academic privacy debates is that there is no consensus on what privacy means.

The modern trend is to embrace the ambiguity. Unable to settle on boundaries, scholars welcome a broad array of interests into an expanding theoretical framework. As a result, privacy is invoked in debates about COVID-19 contact tracing, police body cameras, marriage equality, facial recognition, …

Catalyzing Privacy Law, Anupam Chander, Margot E. Kaminski, William Mcgeveran

Publications

The United States famously lacks a comprehensive federal data privacy law. In the past year, however, over half the states have proposed broad privacy bills or have established task forces to propose possible privacy legislation. Meanwhile, congressional committees are holding hearings on multiple privacy bills. What is catalyzing this legislative momentum? Some believe that Europe’s General Data Protection Regulation (GDPR), which came into force in 2018, is the driving factor. But with the California Consumer Privacy Act (CCPA) which took effect in January 2020, California has emerged as an alternate contender in the race to set the new standard for …

Agonistic Privacy & Equitable Democracy, Scott Skinner-Thompson

Publications

This Essay argues that legal privacy protections—which enable individuals to control their visibility within public space—play a vital role in disrupting the subordinating, antidemocratic impacts of surveillance and should be at the forefront of efforts to reform the operation of both digital and physical public space. Robust privacy protections are a touchstone for empowering members of different marginalized groups with the ability to safely participate in both the physical and digital public squares, while also preserving space for vibrant subaltern counterpublics. By increasing heterogeneity within the public sphere, privacy can also help decrease polarization by breaking down echo chambers and …

The Right To Contest Ai, Margot E. Kaminski, Jennifer M. Urban

Publications

Artificial intelligence (AI) is increasingly used to make important decisions, from university admissions selections to loan determinations to the distribution of COVID-19 vaccines. These uses of AI raise a host of concerns about discrimination, accuracy, fairness, and accountability.

In the United States, recent proposals for regulating AI focus largely on ex ante and systemic governance. This Article argues instead—or really, in addition—for an individual right to contest AI decisions, modeled on due process but adapted for the digital age. The European Union, in fact, recognizes such a right, and a growing number of institutions around the world now call for …

Algorithmic Impact Assessments Under The Gdpr: Producing Multi-Layered Explanations, Margot E. Kaminski, Gianclaudio Malgieri

Publications

Policy-makers, scholars, and commentators are increasingly concerned with the risks of using profiling algorithms and automated decision-making. The EU’s General Data Protection Regulation (GDPR) has tried to address these concerns through an array of regulatory tools. As one of us has argued, the GDPR combines individual rights with systemic governance, towards algorithmic accountability. The individual tools are largely geared towards individual “legibility”: making the decision-making system understandable to an individual invoking her rights. The systemic governance tools, instead, focus on bringing expertise and oversight into the system as a whole, and rely on the tactics of “collaborative governance,” that is, …

The Small-Er Screen: Youtube Vlogging And The Unequipped Child Entertainment Labor Laws, Amanda G. Riggio

Seattle University Law Review

Family vloggers are among the millions of content creators on YouTube. In general, vloggers frequently upload recorded videos of their daily lives. Family vloggers are unique because they focus their content around their familial relationships and the lives of their children. One set of family vloggers, the Ace Family, has recorded their children’s lives from the day they were born and continue to upload videos of each milestone, including “Elle Cries on Her First Rollercoaster Ride” and “Elle and Alaïa Get Caught Doing What!! **Hidden Camera**.” Another vlogging couple, Cole and Savannah LaBrant, post similar content, including videos titled “Baby …

Digital Gatekeepers, Thomas E. Kadri

Scholarly Works

If in William Blackstone's time we might have thought of a person's home as their castle, in Mark Zuckerberg's time we might say that their website is too. Under cyber-trespass laws like the Computer Fraud and Abuse Act, courts have treated online platforms as digital gatekeepers--as property owners that may permit and restrict access to websites much like landowners may do with private land in the real world. If platforms withhold their consent through words or inference, cyber-trespass laws let them enforce their preferences about who may access their services and gather information from the internet. Concerned about reputations and …

Cyber Trespass And Property Concepts, Adam J. Macleod

Scholarly Articles

Access to information is the purpose of the Internet. Ask anyone born after the dawn of the information age; they will tell you that cyberspace is the place to go if one wants to know stuff. On the other hand, many of the people who put stuff on the Internet or on systems connected to the Internet will tell you that, without legal rights to control or block access, people will not have incentives to put on the Internet stuff that is worth knowing. In this tension between access and control, property is generally assumed to be on the side …

The Right To Benefit From Big Data As A Public Resource, Mary D. Fan

Articles

The information that we reveal from interactions online and with electronic devices has massive value—for both private profit and public benefit, such as improving health, safety, and even commute times. Who owns the lucrative big data that we generate through the everyday necessity of interacting with technology? Calls for legal regulation regarding how companies use our data have spurred laws and proposals framed by the predominant lens of individual privacy and the right to control and delete data about oneself. By focusing on individual control over droplets of personal data, the major consumer privacy regimes overlook the important question of …

Public (Ai)Ccomodations, Jevan Hutson, Deepak George, Aj Kidd, Sulaf Al-Saif, Mandy (Meiyun) Ku, Devin Glaser, Devin Glaser

Articles

This Note discusses the use of Al surveillance in places of public accommodations and its implications for civil rights and antidiscrimination law. Part I documents the extensive Al surveillance employed in areas of public accommodation, where American antidiscrimination laws explicitly provide for elevated protection. Part II uses critical race theory to explore how contemporary antidiscrimination law marries two approaches to antidiscrimination in a way that undercuts its own ability to remedy injustice. Part III reveals how antidiscrimination law fails to address issues implicated by Al surveillance in areas of public accommodations, and Part IV proposes a simple solution: abolish it.

"Slack" In The Data Age, Shu-Yi Oei, Diane M. Ring

Faculty Scholarship

This Article examines how increasingly ubiquitous data and information affect the role of “slack” in the law. Slack is the informal latitude to break the law without sanction. Pockets of slack exist for various reasons, including information imperfections, enforcement resource constraints, deliberate nonenforcement of problematic laws, politics, biases, and luck. Slack is important in allowing flexibility and forbearance in the legal system, but it also risks enabling selective and uneven enforcement. Increasingly available data is now upending slack, causing it to contract and exacerbating the risks of unfair enforcement.

This Article delineates the various contexts in which slack arises and …

A Duty Of Loyalty For Privacy Law, Neil M. Richards, Woodrow Hartzog

Faculty Scholarship

Data privacy law fails to stop companies from engaging in self-serving, opportunistic behavior at the expense of those who trust them with their data. This is a problem. Modern tech companies are so entrenched in our lives and have so much control over what we see and click that the self-dealing exploitation of people has become a major element of the internet’s business model.

Academics and policymakers have recently proposed a possible solution: require those entrusted with people’s data and online experiences to be loyal to those who trust them. But many have concerns about a duty of loyalty. What, …

The Case Of The Nosy Neighbors, Johanna Gunawan, Woodrow Hartzog

Faculty Scholarship

Inspired by companies like Clearview AI, Nextdoor, and Amazon, this case study asks students to assume the role of a high-ranking ethics-focused employee at a (fictional) neighborhood-focused social media company. It involves challenging ethical questions around how social media services and surveillance tools are built and used, and the complicated relationship between companies, their users, and law enforcement authorities. Students should pay particular attention to the values implicated by certain design decisions, and the competing incentives for corporations that might complicate the picture for ethical decision making.

The Covid-19 Pandemic And The Technology Trust Gap, Johanna Gunawan, David Choffnes, Woodrow Hartzog, Christo Wilson

Faculty Scholarship

Industry and government tried to use information technologies to respond to the COVID-19 pandemic, but using the internet as a tool for disease surveillance, public health messaging, and testing logistics turned out to be a disappointment. Why weren’t these efforts more effective? This Essay argues that industry and government efforts to leverage technology were doomed to fail because tech platforms have failed over the past few decades to make their tools trustworthy, and lawmakers have done little to hold these companies accountable. People cannot trust the interfaces they interact with, the devices they use, and the systems that power tech …

What Is Privacy? That’S The Wrong Question, Woodrow Hartzog

Faculty Scholarship

Privacy has never had a precise meaning. But in the early 1900s, the concept took on new life as a term of art in legal frameworks. The result has been a bit of a mess, as no singular definition has been adequate for all purposes. Daniel Solove, perhaps the most influential privacy scholar of our day, wrote at the turn of the millennium that privacy was “a concept in disarray.”

In this short essay reflecting upon Solove’s impact on the modern study of information privacy, I argue that the chaos and futility of competing conceptualizations of privacy is why Solove’s …

Second Thoughts On Fda's Covid-Era Mental Health App Policy, Michael Mattioli

Articles by Maurer Faculty

As the coronavirus pandemic swept across the globe in April 2020, the US Food and Drug Administration (FDA) made an unusual decision. The agency announced that it would relax its enforcement of compliance rules for “digital therapeutics”—smartphone apps designed to address mental health disorders. The measure was a response to widely reported upticks in symptoms of anxiety, depression, and substance abuse brought on by the pandemic. As an added benefit, the agency explained, digital therapeutics could promote social distancing by removing patients’ need to visit health care providers.

This essay explores the possible lasting effects of the FDA’s temporary suspension …