Privacy Law Commons^™

Who Should Be Liable? Examining The Corporate Liability Regime For Cybersecurity Risks, Angel R. Gardner

Student Journal of Information Privacy Law

The growth of the Internet of Things (IoT) poses new and substantial security risks for individual and national security. The IoT leaves networks susceptible to hacking, a form of unauthorized access into another person’s system or device. All devices that use the IoT are at risk of unauthorized access—a few examples include vehicles or medical devices. Currently, there are no regulations requiring corporations to protect their software from unauthorized intrusions. However, the current tort landscape does not allow for individuals to recover when there are unauthorized network intrusions where there is no tangible harm. This paper discusses why cybersecurity intrusions …

Editorial Board Vol. 2. No.1 (2024), Hannah Babinski Editor-In-Chief

Student Journal of Information Privacy Law

Masthead Editorial Board Vol. 2. No.1 (2024)

An Inadequate Band-Aid: Existing Privacy Law Has Uncertain Application To Web-Scraped Personal Information Used To Train Ai, Jody L. Eckman

Student Journal of Information Privacy Law

To legislate high-growth technology requires fine-tuned balance, but the current state of AI legislation swings in favor of AI providers given U.S. lawmakers near non-existent response. From healthcare to education, the financial industry to the legal field, AI has gained a grip stronger than any legal band-aid lawmakers might believe to be in place and protecting consumers. I argue that based on a survey of current U.S. legislation, AI providers are being given the chance to have their cake and eat it too at the expense of consumers’ rights. Such a perfectly permissible feast is why lawmakers must promptly and …

The Right To Privacy And The Japanese Constitution, Mark A. Sayre

Student Journal of Information Privacy Law

Much focus has been placed on the rapid adoption of laws and regulations governing information and data privacy around the globe. While such laws and regulations are undoubtedly critical in quelling increasing concerns about invasions of privacy enabled by technological advancements, a focus on new laws and regulations alone overlooks a critical and more foundational source of privacy rights—national constitutions. This paper analyzes whether a right to privacy exists under the Japanese Constitution and how the nature and scope of such a right is impacted by Japanese culture. An overview of key early court cases framing the right to privacy …

The Broader Lessons Of Privacy Law, Salome Viljoen

Articles

This Article explores the trend of privacy—and what kind of techno-social or legal effect ought to count as a “privacy harm”—expanding to encompass a growing set of social factors. This big-tent approach to privacy has several virtues. However, it also comes with a few costs. While others have explored the conceptual and doctrinal tradeoffs that an expansive approach to privacy may entail, this Article focuses on a secondary effect the trend toward expansiveness has had on the relationship between privacy scholarship and legal scholarship more broadly. This Article suggests that the internal expansiveness of privacy means that insights developed within …

Privacy’S Commodification And The Limits Of Antitrust, Jeffrey L. Vagle

Arkansas Law Review

This Article argues that the buying and selling of personal data forms what Debra Satz calls a “noxious market,” and, thus, any regulation of information privacy should not accept or depend upon its commodification but should stand on its own. This Article proceeds in three parts. Part I first lays out the history and effects of data commodification, arguing that the market created by this commodification is noxious and undesirable. Part II examines the renewal of antitrust’s purpose as a regulatory tool, especially in the context of its use in the regulation of large technology firms. Finally, Part III argues …

Implementing Information Fiduciaries, Samuel E. Marticke

Georgia State University Law Review

This Note discusses the information fiduciary model, proposed by Jack Balkin, where fiduciary duties would be imposed on data collectors and analyzes how such a model could come to pass in the United States.

Secrecy On Steroids: How Overzealous State Confidentiality Laws Expose Leakers And Whistleblowers To Retaliatory Prosecution, Frank D. Lomonte, Anne Marie Tamburro

University of Miami Law Review

It is well-documented that the federal government has a secrecy problem. Thousands of times a year, inconsequential documents are needlessly stamped “classified,” which can mean prison for anyone who leaks them. But the addiction to secrecy doesn’t stop with the Pentagon. State public-records statutes are riddled with their own local version of “classified information” that puts people at risk of prosecution even for well-intentioned whistleblowing.

The problem is particularly acute in Florida, where one of the state’s highest-ranking elected officials spent almost two years as the target of a criminal investigation for releasing records about an unresolved sexual harassment complaint …

Decoding Dobbs: A Typology To Better Understand The Roberts Court's Jurisprudence, Katie Yoder

Honors Projects

The U.S. Supreme Court first recognized Substantive Due Process (“SDP”) in the early twentieth century. In Lochner v. New York, the Court established that there are certain unenumerated rights that are implied by the Fourteenth Amendment.Though SDP originated in a case about worker’s rights and liberties, it quickly became relevant to many cases surrounding personal intimate decisions involving health, safety, marriage, sexual activity, and reproduction.Over the past 60 years, the Court relied upon SDP to justify expanding a fundamental right to privacy, liberty, and the right to medical decision making. Specifically, the court applied these concepts to allow for freedoms …

Train Or Restrain? Using International Perspectives To Inform The American Fair Use Analysis Of Copyright In Generative Artificial Intelligence Training, Serena Lightstone

Northwestern Journal of International Law & Business

The rise of generative artificial intelligence (“AI”) has brought questions regarding the permissibility of using copyrighted materials in training generative AI systems around the globe. This article examines whether such use constitutes infringement under the American fair use doctrine, drawing insights from the regulatory approaches of the European Union (EU) and Japan.

Ultimately, this article advocates for United States courts to recognize the permissibility of using copyrighted materials in training generative AI models, rejecting the EU’s rights-holder-centric approach, and going beyond Japan’s limited-permissibility solution. Through a detailed four-factor fair use analysis, this article demonstrates that training generative AI on copyrighted …

“Can I Have It Non-Personalised?” An Empirical Investigation Of Consumer Willingness To Share Data For Personalized Services And Ads, Monika Leszczynska, Daria Baltag

Faculty Scholarship

European regulators, courts, and scholars are currently debating the legality of data processing for personalization purposes. Should businesses require separate consent for processing user data for personalized advertising, especially when offering free services reliant on such ads for revenue? Or is general consent for the contract enough, given personalized advertising’s role in fulfilling contractual obligations? This study investigates whether these legal distinctions reflect differences in people’s willingness to share data with businesses for personalization. Are consumers less willing to share their data for personalized advertising than for personalized services that they clearly contracted for? Does that change if the service …

How Close Is Close Enough: A Step-By-Step Analysis To Resolve The Circuit Split Created By Misunderstanding The Spokeo Ruling, Cason Shipp

St. Mary's Law Journal

No abstract provided.

Covid-19: The Federal Government, Federalism, South Dakota, And American Indians, Jordan Janson

Helm's School of Government Conference - 2021-2024

This essay assesses the roles of the federal government and its relationship with Tribal Regions and states alike. Additionally, how COVID-19 affected states and localities and how different Presidential Administrations handled and responded to the pandemic while being compared with the state of South Dakota. Assessing whether or not the federal government overstepped reveals the preparedness of states. Certain states handled COVID-19-related issues better than others, and this essay addresses how Tribal Regions in states provided Governors with extreme complexities. Finally, this essay delves into the rights and responsibilities of the federal government and the state pertaining to American Indian …

The Post-Dobbs Reality: Privacy Expectations For Period-Tracking Apps In Criminal Abortion Prosecutions, Sophie L. Nelson

Pepperdine Law Review

The Supreme Court’s decision to overturn Roe v. Wade and Planned Parenthood v. Casey in June 2022 was met with waves of both support and criticism throughout the United States. Several states immediately implemented or began drafting trigger laws that criminalize seeking and providing an abortion. These laws prompted several period-tracking app companies to encrypt their users’ data to make it more difficult for the government to access period- and pregnancy-related information for criminal investigations. This Comment explores whether the Fourth Amendment and U.S. privacy statutes protect users of period-tracking apps from government surveillance. More specifically, this Comment argues that …

Barcoding Bodies: Rfid Technology And The Perils Of E-Carceration, Jackson Samples

Duke Law & Technology Review

Electronic surveillance now plays a central role in the criminal legal system. Every year, hundreds of thousands of people are tracked by ankle monitors and smartphone technology. And frighteningly, commentators and policymakers have now proposed implanting radio frequency identification (“RFID”) chips into people’s bodies for surveillance purposes. This Note examines the unique risks of these proposals—particularly with respect to people on probation and parole—and argues that RFID implants would constitute a systematic violation of individual privacy and bodily integrity. As a result, they would also violate the Fourth Amendment.

Content Moderation And The Least Cost Avoider, Paul Rosenzweig

Joint PIJIP/TLS Research Paper Series

No abstract provided.

Fitting A Block Into A Sphere Mold: The Inadequacy Of Current Data Privacy Regulations In Protecting Data Privacy Within The Blockchain Space, Jenny Yang

Washington and Lee Journal of Civil Rights and Social Justice

Despite global imposition of data privacy laws and regulations, data privacy is a nonexistent luxury amongst the data-charged world we live in. Data privacy has long been established as a fundamental right. Entities have successfully established robust methodologies around existing data privacy laws and regulations to utilize past consumer behavior to predict, impact and manipulate current and future consumer behaviors. This phenomenon has been commonly coined as “corporate surveillance.” Emerging spaces arising through technological developments have greater access into consumer data to impact economic choices. Specifically, the blockchain space, through its unique open-source and permanent traits, has been able to …

Skirting The Fourth Amendment: How Law Enforcement Agencies Abuse Technology And Constitutional Exceptions To Surveille The Public, Matthew Lloyd

Washington and Lee Journal of Civil Rights and Social Justice

Existing Fourth Amendment law does not protect against law enforcement use of data gathered through the internet either by private companies who actively search their customer’s data and submit evidence of misconduct to law enforcement or from private companies who acquire the data on behalf of law enforcement. In an effort to pursue criminals, courts have permitted Fourth Amendment jurisprudence to develop in a manner that permits sweeping invasions of privacy without any probable cause through the private search doctrine or without any procedural protections through the third-party doctrine. It will require substantial judicial or legislative action to return the …

Children Seen But Not Heard, Stacey B. Steinberg

UF Law Faculty Publications

Children are expected to abide by the will of their parents. In the last 200 years, American jurisprudence has given parents the ability to control their children’s upbringing with few exceptions. The principle governing this norm is that parents know best and will use their better knowledge to protect their children’s welfare.

The COVID-19 pandemic, public school rules, and children’s privacy laws offer modern examples of regulations in which the interests of parents and children may not align. Minors may want access to vaccines, despite a parent’s refusal to sign a consent form. Minors may want to talk to their …

The Myth Of Children’S Online Privacy Protection, Stacey Steinberg

UF Law Faculty Publications

Digital technology has changed the landscape young people face as they come of age. It has changed how children interact with their parents, schools, community organizations, and the state. Despite many benefits, digital technologies that employ data collection, algorithms, and artificial intelligence pose significant risks for the next generation. Private businesses can collect, use, and sell a child’s data in ways never imagined by their families. Information collected by third parties with good intentions can be stolen through data breaches. Through faulty algorithms, websites can make inaccurate assumptions about young people’s interests, teachers can make inaccurate assumptions about a student’s …

On The Human Right To Healthy Menstruation, Bridget J. Crawford

Elisabeth Haub School of Law Faculty Publications

This short essay introduces the Bellagio Declaration on the Human Right to Healthy Menstruation, a statement signed by an interdisciplinary group of academics, artists, policymakers, clinicians, and practitioners in 2024. The Declaration frames the human right to healthy menstruation as including (1) non-discrimination on the basis of menstruation; (2) dignity in all matters related to menstruation; (3) access to facilities, resources, and supplies that facilitate the management of menstruation in a manner that is affordable and safe and that fosters a clean, healthy, and sustainable environment; (4) lifelong access to timely and medically accurate information about all aspects of menstruation; …

National Security And Federalizing Data Privacy Infrastructure For Ai Governance, Margaret Hu, Eliott Behar, Davi Ottenheimer

Fordham Law Review

This Essay contends that data infrastructure, when implemented on a national scale, can transform the way we conceptualize artificial intelligence (AI) governance. AI governance is often viewed as necessary for a wide range of strategic goals, including national security. It is widely understood that allowing AI and generative AI to remain self-regulated by the U.S. AI industry poses significant national security risks. Data infrastructure and AI oversight can assist in multiple goals, including: maintaining data privacy and data integrity; increasing cybersecurity; and guarding against information warfare threats. This Essay concludes that conceptualizing data infrastructure as a form of critical infrastructure …

On The Genealogy Of Intimate Digital Harm, Aziz Z. Huq

Michigan Law Review

A review of The Fight for Privacy: Protecting Dignity, Identity, and Love in the Digital Age. By Danielle Keats Citron.

Personal Data And Vaccination Hesitancy: Covid-19’S Lessons For Public Health Federalism, Charles D. Curran

Catholic University Law Review

During the COVID-19 vaccination campaign, the federal government adopted a more centralized approach to the collection of public health data. Although the states previously had controlled the storage of vaccination information, the federal government’s Operation Warp Speed plan required the reporting of recipients’ personal information on the grounds that it was needed to monitor the safety of novel vaccines and ensure correct administration of their multi-dose regimens.

Over the course of the pandemic response, this more centralized federal approach to data collection added a new dimension to pre-existing vaccination hesitancy. Requirements that recipients furnish individual information deterred vaccination among undocumented …

Big Data Searches And The Future Of Criminal Procedure, Mary Fan

Articles

This Article proceeds in three parts. Part I illuminates the nostalgic Luddism that influences Fourth Amendment jurisprudence and the challenges posed by evolving technologies to this dominant lens. This Part explains the operation of geofence and keyword warrants and how their power to crack cold cases by unidentified perpetrators both tempt and terrify. The confusion in the courts over the constitutionality of geofence and keyword warrants is emblematic of the larger challenges of the Romantic Luddism in Fourth Amendment originalism that has grown in influence over the decades.

Part II frames and theorizes the concepts of collateral impact and collateral …

The Lack Of Responsibility Of Higher Education Institutions In Addressing Phishing Emails And Data Breaches, Muxuan (Muriel) Wang

Duke Law & Technology Review

Higher education institutions (HEIs) are highly susceptible to cyberattacks, particularly those facilitated through phishing, due to the substantial volume of confidential student and staff data and valuable research information they hold. Despite federal legislations focusing on bolstering cybersecurity for critical institutions handling medical and financial data, HEIs have not received similar attention. This Note examines the minimal obligations imposed on HEIs by existing federal and state statutes concerning data breaches, the absence of requirements for HEIs to educate employees and students about phishing attacks, and potential strategies to improve student protection against data breaches.

Techno-Legal Solutionism: Regulating Children's Online Safety In The United States, Maria P. Angel, Danah Boyd

Scholarly Works

Convinced that social media is directly harming children, policymakers have started to introduce legislation that requires technology companies to be safe by design through “duty of care” provisions. Unlike regulations that focus on product safety, these bills incorporate technosolutionist logics into regulation by presuming that technology companies can remedy complex harms like mental health duress and bullying if their products were only designed better. In this paper, we unpack the theory of change at the center of the “duty of care” included in the “Kids Online Safety Act” (KOSA). We argue that techno-legal solutionism is both ineffective as a framework …

My Body, Whose Choice? A Case For A Fundamental Right To Bodily Autonomy, Miri Trauner

Brooklyn Law Review

In 2022, the US Supreme Court decided Dobbs v. Jackson Women’s Health Organization, which overturned Roe v. Wade and the fundamental right to abortion it had established nearly fifty years prior. The Court’s decision threw into uncertainty the future of not only reproductive rights in this country, but also many other individual rights. At the same time as the decision, the world was still reeling from a global pandemic, and the development of COVID-19 vaccines had spurred widespread controversy over the constitutionality of vaccine mandates. Both advocates for abortion access and opponents to vaccine mandates shared a common cry: “my …

Speaking Back To Sexual Privacy Invasions, Brenda Dvoskin

Washington Law Review

Many big players in the internet ecosystem do not like hosting sexual expression. They often justify these bans as a protection of sexual privacy. For example, Meta states that it removes sexual imagery to prevent the nonconsensual distribution of sexual images. In response, this Article argues that banning digital sexual expression is counterproductive if the aim is to alleviate the harms inflicted by sexual privacy losses.

Contemporary sexual privacy theory, however, lacks analytical tools to explain why nudity bans harm the interests they intend to protect. This Article aims at building those tools. The main contribution is an invitation to …

The Consumer Bundle, Shelly Kreiczer-Levy

Washington Law Review

Can property law have a consumer protection purpose? One of the most important consumer law concerns today is the limited control consumers have over the digital assets and software-embedded products they purchase. Current proposals for reform focus on classifying the transaction as either license or sale and rely mostly on contract law and consumer protection regulation with a few calls for restoring ownership rights. This Article argues that property law can protect consumers by establishing a minimum bundle of rights for consumers: the “consumer’s bundle.” Working with property theory and an analysis of property values, this Article explains the importance …