Privacy Law Commons^™

The Health Care Industry Is Ready For A Revolution: Its Privacy Laws Are Not, Erin Rutherford

Student Scholarship

This paper highlights the costs and benefits associated with the gathering, storing, analyzing, and digitizing of health information; examines current privacy laws and their inadequacies in the new and constantly changing digital health world; and then provides a proposal framework to balance encouraging innovation while protecting individual autonomy. The article specifically proceeds as follows. This paper first discusses of the evolution of the health industry, from paper records to the wide array of sources generating health information today. Next, it considers the benefits to the ever-increasing amount of health information, which, while considerable can often be in tension with privacy …

Aerial Trespass And The Fourth Amendment, Randall F. Khalil

Michigan Law Review

Since 1973, courts have analyzed aerial surveillance under the Fourth Amendment by applying the test from Katz v. United States, which states that a search triggers the Fourth Amendment when a government actor violates a person’s “reasonable expectation of privacy.” The Supreme Court applied Katz to aerial surveillance three times throughout the 1980s, yet this area of the law remains unsettled and outcomes are unpredictable. In 2012, the Supreme Court recognized an alternative to the Katz test in Jones v. United States, which held that a search triggers the Fourth Amendment when a government actor physically intrudes into …

Digital Privacy For Reproductive Choice In The Post-Roe Era, Aziz Z. Huq, Rebecca Wexler

Faculty Scholarship

The overruling of Roe v. Wade has unleashed a torrent of regulatory and punitive activity restricting previously lawful reproductive options. But the turn to the expansive criminal law and new schemes of civil liability creates novel concerns, quite distinct from the pre-Roe landscape a half-century ago. Reproductive choice, and its nemesis, turn upon information. For pregnant people, deciding on a choice of medical care entails a search for advice and services. Information is at a pre­mium for them. Meanwhile, efforts to regulate abortion began with clinic closings. But they will quickly extend to civil actions and criminal indictments of patients, …

A Game Theoretic Approach To Balance Privacy Risks And Familial Benefits, Ellen W. Clayton, Jia Guo, Murat Kantarcioglu, Et Al.

Vanderbilt Law School Faculty Publications

As recreational genomics continues to grow in its popularity, many people are afforded the opportunity to share their genomes in exchange for various services, including third-party interpretation (TPI) tools, to understand their predisposition to health problems and, based on genome similarity, to find extended family members. At the same time, these services have increasingly been reused by law enforcement to track down potential criminals through family members who disclose their genomic information. While it has been observed that many potential users shy away from such data sharing when they learn that their privacy cannot be assured, it remains unclear how …

Your Biometric Data Is Concrete, Your Injury Is Imminent And Particularized: Articulating A Bipa Claim To Survive Article Iii Standing After Transunion V. Ramirez, Kelsey L. Kenny

Maine Law Review

Biometric data is a digital translation of self which endures in its accuracy for one’s entire lifespan. As integral elements of modern life continue to transition their operations exclusively online, the verifiable “digital self” has become indispensable. The immutable and sensitive nature of biometric data makes it peculiarly vulnerable to misappropriation and abuse. Yet the most frightening is the unknown. For an individual who has had their digital extension-of-self covertly stolen or leaked, the dangers that lie in the technology of the future are innumerable. The Illinois legislature recognized the danger associated with the cavalier collection and handling of biometric …

Policing The Police: Establishing The Right To Record And Civilian Oversight Boards To Oversee America’S Police, Michael G. Brewster

Brooklyn Law Review

Police misconduct is a persistent issue in the United States that undermines public trust in law enforcement and the criminal justice system as a whole. The video of George Floyd’s arrest and murder played an irreplaceable role in bringing attention to the case and sparking nationwide discussions about the state of policing in America. The video, showing former Minneapolis police officer Derek Chauvin kneeling on Mr. Floyd’s neck for several minutes, also helped convict Mr. Chauvin of murder at trial. Recording police activity is an important means of holding officers accountable for their actions and protecting citizens from abuse of …

Extended Privacy For Extended Reality: Xr Technology Has 99 Problems And Privacy Is Several Of Them, Suchismita Pahi, Calli Schroeder

Notre Dame Journal on Emerging Technologies

Americans are rapidly adopting innovative technologies which are pushing the frontiers of reality. But, when they look at how their privacy is protected within the new extended reality (XR), they will find that U.S. privacy laws fall short. The privacy risks inherent in XR are inadequately addressed by current U.S. data privacy laws or courtcreated frameworks that purport to protect the constitutional right to be free from unreasonable searches. Many scholars, including Ryan Calo, Danielle Citron, Sherry Colb, Margaret Hu, Orin Kerr, Kirsten Martin, Paul Ohm, Daniel Solove, Rebecca Wexler, Shoshana Zuboff, and others, have highlighted the gaps in U.S. …

Confused About Copyright?, Sara Anne Hook

Graduate Scholarship and Professional Work

No abstract provided.

Do Not Touch My Data: Exploring A Disclosure-Based Framework To Address Data Access, Francis Morency

Washington and Lee Journal of Civil Rights and Social Justice

Companies have too much control over people’s information. In the data marketplace, companies package and sell individuals’ data, and these individuals have little to no bargaining power over the process. Companies may freely buy and sell people’s data in the private sector for targeted marketing and behavior manipulation. In the justice system, an unchecked data marketplace leaves black and brown communities vulnerable to serious data access issues caused by predictive sentencing, for example. Risk assessment algorithms in predictive sentencing rely on data on individuals and run all relevant data points to provide the likelihood that a defendant will recidivate low …

About-Face: How Facebook’S Restrictions On User Posts Could Violate Antitrust Law, Efrem Berk

Northwestern Journal of Technology and Intellectual Property

This Note examines whether Facebook’s restrictions on its users’ posts are subject to Sherman Act § 2. This Note looks at the economic activity generated by social media activity and argues that posts are commerce. While this piece finds that current antitrust jurisprudence likely favors Facebook, an alternative approach sought by some antitrust scholars could influence judges to preclude the platform’s restrictions.

Giving The Fourth Amendment Meaning: Creating An Adversarial Warrant Proceeding To Protect From Unreasonable Searches And Seizures, Ben Mordechai-Strongin

University of Michigan Journal of Law Reform

For at least the past 40 years, police and prosecutors have had free reign in conducting illegal searches and seizures nominally barred by the Fourth Amendment. The breadth of exceptions to the warrant requirement, the lax interpretation of probable cause, and especially the “good faith” doctrine announced in U.S. v. Leon have led to severe violations of privacy rights, trauma to those wrongly searched or seized, and a court system overburdened by police misconduct cases. Most scholars analyzing the issue agree that the rights guaranteed by the Fourth Amendment—to be free from unreasonable search and seizure—have been severely eroded or …

Who Owns Data? Constitutional Division In Cyberspace, Dongsheng Zang

Articles

Privacy emerged as a concern as soon as the internet became commercial. In early 1995, Lawrence Lessig warned that the internet, though giving us extraordinary potential, was “not designed to protect individuals against this extraordinary potential for others to abuse.” The same technology can “destroy the very essence of what now defines individuality.” Lessig urged that “a constitutional balance will have to be drawn between these increasingly important interests in privacy, and the competing interest in collective security.” Lessig envisioned that creating property rights in data would help individuals by giving them control of their data. As utopian as property …

Law Informs Code: A Legal Informatics Approach To Aligning Artificial Intelligence With Humans, John J. Nay

Northwestern Journal of Technology and Intellectual Property

Artificial Intelligence (AI) capabilities are rapidly advancing. Highly capable AI could cause radically different futures depending on how it is developed and deployed. We are unable to specify human goals and societal values in a way that reliably directs AI behavior. Specifying the desirability (value) of AI taking a particular action in a particular state of the world is unwieldy beyond a very limited set of state-action-values. The purpose of machine learning is to train on a subset of states and have the resulting agent generalize an ability to choose high value actions in unencountered circumstances. Inevitably, the function ascribing …

A Loaded God Complex: The Unconstitutionality Of The Executive Branch’S Unilaterally Withholding Zero-Days, Brendan Gilligan

Northwestern Journal of Technology and Intellectual Property

No abstract provided.

Understanding Dark Patterns In Home Iot Devices, Monica Kowalczyk, Johanna Gunawan, David Choffnes, Daniel J. Dubois, Woodrow Hartzog, Christo Wilson

Faculty Scholarship

Internet-of-Things (IoT) devices are ubiquitous, but little attention has been paid to how they may incorporate dark patterns despite consumer protections and privacy concerns arising from their unique access to intimate spaces and always-on capabilities. This paper conducts a systematic investigation of dark patterns in 57 popular, diverse smart home devices. We update manual interaction and annotation methods for the IoT context, then analyze dark pattern frequency across device types, manufacturers, and interaction modalities. We find that dark patterns are pervasive in IoT experiences, but manifest in diverse ways across device traits. Speakers, doorbells, and camera devices contain the most …

The Limitations Of Privacy Rights, Daniel J. Solove

Notre Dame Law Review

Individual privacy rights are often at the heart of information privacy and data protection laws. The most comprehensive set of rights, from the European Union’s General Data Protection Regulation (GDPR), includes the right to access, right to rectification (correction), right to erasure (deletion), right to restriction, right to data portability, right to object, and right to not be subject to automated decisions. Privacy laws around the world include many of these rights in various forms.

In this Article, I contend that although rights are an important component of privacy regulation, rights are often asked to do far more work than …

Gone Fishing: Casting A Wide Net Using Geofence Warrants, Ryan Tursi

Washington Law Review

Technology companies across the country receive requests from law enforcement agencies for cell phone location information near the scenes of crimes. These requests rely on the traditional warrant process and are known as geofence warrants, or reverse location search warrants. By obtaining location information, law enforcement can identify potential suspects or persons of interest who were near the scene of a crime when they have no leads. But the use of this investigative technique is controversial, as it threatens to intrude upon the privacy of innocent bystanders who had the misfortune of being nearby when the crime took place. Innocent …

Aadhaar: India’S National Identification System And Consent-Based Privacy Rights, Anvitha S. Yalavarthy

Vanderbilt Journal of Transnational Law

India’s national identification program, Aadhaar, created the largest national biometric database in the world. While the program is touted as voluntary, the increasing dependence on it, and the laws surrounding it, make it de facto mandatory. This Note examines the social and legal landscapes surrounding the Aadhaar program along with the principles of data privacy and biometric data collection in the European Union and the United States to show how those principles can and should apply to the Aadhaar system.

This Note suggests that the way to strengthen the Aadhaar system’s privacy regime is by balancing the principles of necessity …

When Taint Teams Go Awry: Laundering Unconstitutional Violations Of The Fourth Amendment, Edward S. Adams, William C. Price Jr.

Arkansas Law Review

In this Article, we examine the legal landscape in which taint teams operate, why taint teams are constitutionally problematic, and propose a solution to protect the attorney-client privilege. In Part I, we will first describe what taint teams are supposed to protect—attorney-client privilege. Next, we review how a taint team gets its documents to review, namely the doctrine surrounding (secret) search warrants. Part I ends with a non exhaustive summary of remedies available when attorney-client privilege is violated during searches. In Part II, we explain the current policies and practices surrounding taint teams, including sources of procedure for taint teams …

Comment: The United Nations And Robot Rights, Heather Alexander

Canadian Journal of Law and Technology

This comment predicts that robot rights under the law are likely to become a reality in the next fifty years, possibly in multiple countries, as governments pass laws granting rights to robots, including civil rights like voting. This comment calls on the United Nations (‘‘UN”) to be pro-active in guiding the emergence of robot rights by convening a working group on robot rights to better guide member states through what will be a time of momentous change.

Why are robots likely to soon gain rights in some UN member states? There have been huge advances in AI that can pass …

Regulating Uncertain States: A Risk-Based Policy Agenda For Quantum Technologies, Tina Dekker, Florian Martin-Bariteau

Canadian Journal of Law and Technology

Many countries are taking a national approach to developing quantum strategies with a strong focus on innovation. However, societal, ethical, legal, and policy considerations should not be an afterthought that is pushed aside by the drive for innovation. A responsible, global approach to quantum technologies that considers the legal, ethical, and societal dimensions of quantum technologies is necessary to avoid exacerbating existing global inequalities. Quantum technologies are expected to disrupt other transformative technologies whose legal landscape is still under development (e.g., artificial intelligence [‘‘AI”], blockchain, etc.). The shortcomings of global policies regarding AI and the digital context teach lessons that …

Crowdsourcing Justice, Matthew Dylag

Canadian Journal of Law and Technology

Social media has become ubiquitous in the daily lives of Canadians. Beyond connecting with friends and family, people also turn to social media to find information and seek advice on any number of topics, be it home cooking, workout routines, or automobile purchases. Indeed, social media is a flexible vehicle that can be leveraged for communication on almost any topic. It is not surprising, therefore, that individuals are also turning to social media to help resolve their legal problems. Even a cursory examination of social media will reveal that it is not uncommon for individuals who are experiencing legal difficulties …

From Cartier To Codification: Website-Blocking Injunctions And Third-Party Internet Service Provider Respondents, Dan Mackwood

Canadian Journal of Law and Technology

In recent years, the proliferation of commercial-scale copyright infringement through unauthorized online content streaming has created persisting legal hurdles for Canadian rights holders seeking redress. John Doe defendants in online copyright disputes can easily preserve their anonymity and operate their infringing enterprises from unknown locations, undeterred by injunctions issued against them directly. These anonymized administrators of illicit streaming platforms offer users unauthorized access to content for a lower cost than or as a free alternative to the access provided by the legitimate rights holder. This form of copyright infringement has reportedly resulted in up to hundreds of thousands of lost …

Adopting Social Media In Family And Adoption Law, Stacey B. Steinberg, Meredith Burgess, Karla Herrera

Utah Law Review

Social media has dramatically changed the landscape facing families brought together through adoption. Just as adoptive families thirty years ago could not have predicted the impact of DNA technology on postadoption family life, adoptive families are only now beginning to grasp the impact of social media connectivity on the lives of their growing children. This change is related both to social media’s impact on family life and to fundamental shifts in our understanding of privacy more generally. Understanding the legal rights of parents and children in these circumstances is a novel and underexplored area of family law, constitutional law, and …

The Data Trust Solution To Data Sharing Problems, Kimberly A. Houser, John W. Bagby

Vanderbilt Journal of Entertainment & Technology Law

A small number of large companies hold most of the world’s data. Once in the hands of these companies, data subjects have little control over the use and sharing of their data. Additionally, this data is not generally available to small and medium enterprises or organizations who seek to use it for social good. A number of solutions have been proposed to limit Big Tech “power,” including antitrust actions and stricter privacy laws, but these measures are not likely to address both the oversharing and under-sharing of personal data. Although the data trust concept is being actively explored in the …

Cryptocurrencies And Climate Change: A Net-Zero Paradox, Jason Maclean

Canadian Journal of Law and Technology

Cryptocurrencies pose a number of complex law and policy problems, the most pressing of which are the industry’s climate and environmental impacts. This article examines the climate and environmental impacts of crypto-assets in the broader law and policy context of the UN Paris Agreement and the global goal of reaching net-zero emissions by 2050 or earlier. This approach not only illuminates the limitations and paradoxical nature of the crypto-industry’s climate commitments, but also the limitations and paradoxical nature of ‘‘net zero” itself as the predominant framing of national, subnational, and nonstate actors’ climate pledges. The article concludes by examining the …

Copyright Throughout A Creative Ai Pipeline, Sancho Mccann

Canadian Journal of Law and Technology

Consider the following fact pattern.

Alex paints some original works on canvas and posts photos of them online. Becca downloads those images and uses them to train an AI (training configures the AI’s model parameters to useful values). Becca posts the resulting trained parameter values on her website under a license that reserves to Becca the right to use the parameters commercially. Cory uses those parameter values in a program that is designed to produce artwork. Cory clicks create and the program produces a work. This work is new to Cory, but it looks a lot like one of Alex’s …

Perceiving Critical Infrastructure With A New Awareness Of Cyber Risk, Duncad Card

Canadian Journal of Law and Technology

North America’s critical infrastructure has been the subject of cyber-attack, in various cycles of activity, for many years. In March of 2017, a cyber-attack caused periodic ‘‘blind-spots” for electricity distribution grid operators in the Western US for about 10 dangerous hours. In May of this year, there was panic at the gas pumps across many States in southeastern United States, which has been attributed to a cyber-attack on a major US pipeline that disrupted fuel supplies to the US East coast. US Commerce Secretary Raimondo soon after that attack announced that those sorts of attacks are becoming more frequent and …

Book Review Rethinking The Jurisprudence Of Cyberspace, David Cowan

Canadian Journal of Law and Technology

It is a common claim that law is always catching up with technology. This is not entirely fair. The European Union’s General Data Protection Regulation1 (GDPR) could be viewed as a case of technology having to catch up to the law. That said, clearly there are challenges in law and in the legal profession, both in terms of how the law can adapt to changes in the digital world and the disruption of the legal profession. On the former point, there are perhaps three broad schools of thought: existing law is sufficient for adapting to new technological challenges, as it …

Crispr, Like Any Other Technology: Shedding Determinism & Reviving Athens, Jon Khan

Canadian Journal of Law and Technology

This article examines current narratives surrounding CRISPR (clustered regularly interspaced short palindromic repeats) and the current Canadian treatment of this novel biotechnology. It argues that Canada’s current approach to genetic research and CRISPR appear to have succumbed to the false narrative of technological determinism. It argues that Canada must buck the narrative and alter the current status quo in two principal ways: Canada should pursue more somatic CRISPR clinical trials in humans and permit pre-clinical germline editing. To design a regulatory regime for clinical germline editing and better guidance on somatic CRISPR clinical trials, Canada should engage Deliberative Polling to …