Privacy Law Commons^™

Genetic Privacy, Ifeoma Ajunwa, Forrest Briscoe

Indiana Law Journal

The last decade has brought many technological advances to genetic testing. Increasingly, genetic testing, which was previously reserved for clinical or medical settings, has made its way to other spaces. Most significantly, we are now seeing the re-introduction of genetic testing to the workplace. Although the Genetic Information Nondiscrimination Act (GINA), which became law in 2009, would seemingly prohibit genetic testing in the workplace, genetic testing, as part of workplace wellness programs, is lawful under the aegis of the Affordable Care Act (ACA). This poses a threat to genetic privacy in the workplace. While some, like the actor Angelina Jolie, …

Smartphones On Wheels In Southeast Asia: A Crossroads For Data Governance, Attamongkol Tantratian, Gunn Jiravuttipong

Journal of Law and Mobility

While the transformation of automobiles into data-generating “smartphones on wheels” has revolutionized mobility, it has also raised critical concerns over data privacy and sovereignty. Equipped with sensors and connected technologies, smart vehicles collect vast amounts of data, including personal information, driving patterns, and biometric identifiers. While auto-exporting jurisdictions such as the United States, the European Union, and China have introduced regulatory measures to address these challenges, countries importing smart vehicles remain vulnerable due to their limited influence over the auto companies’ integrated technology and data policies.

This Article examines the regulatory and economic challenges faced by developing nations integrating foreign-designed …

Faking It: A Proposed Solution To Counter Nonconsensual Pornographic Deepfakes, Rena Song

Washington and Lee Journal of Civil Rights and Social Justice

2024 Louise A. Halper Award Winner for Best Student Note.

Deepfakes have become popular due to their user-friendly nature and accessibility, allowing anyone to create one by installing deepfake software programs on their phones or laptops. Deepfake software programs allow creators to create hyper-realistic multimedia featuring anyone whose image they can find. Some industries have drawn positive uses from deepfakes; however, deepfakes also create harms that can have detrimental effects on people’s mental health, employment, and reputation. Women and children, including those without a large online presence, have become the target for nonconsensual pornographic deepfakes. Congress has yet to pass …

A New State Constitutional Right To Informational Privacy: The Origins Speak, Albert E. Scherr, Neal Kurk

Law Faculty Scholarship

[Excerpt] This article occupies the space between the ongoing, newly energized development of state constitutional law and the fraught public policy field of privacy protections. It analyzes a new state constitutional provision that is explicitly and exclusively about information privacy. The provision, Part I, Article 2b9 of the New Hampshire Constitution,10 reads as follows: An individual’s right to live free from governmental intrusion in private or personal information is natural, essential, and inherent.11 The provision extends an individual’s privacy right significantly beyond that of both the federal and New Hampshire state constitutions. It operates at the intersection of privacy and …

The Second Life Of Information, Thomas D. Haley

UF Law Faculty Publications

Information permeates every aspect of modern life. It is the price we pay for access to online services and the form in which we embody creative works. Law and policymaking tend to focus on first-order uses and transactions; information for access serves as the paradigmatic example. But information enjoys a robust second life—one that constitutes the true value and power that drives firms’ decisionmaking—as assets. Once aggregated and assetized, the power and risk associated with information increases exponentially.

To explore the implications of information’s second life, this Article introduces the concept of “untethered information.” Assetization depends on severing the connections …

Do Ais Dream Of Electric Boards?, Robert J. Rhee

UF Law Faculty Publications

When artificial intelligence (“AI”) acquires self-awareness, agency, and unique intelligence, it will attain ontological personhood. Management of firms by AI would be technologically and economically feasible. The law could confer AI with the status of legal personhood, as it did with the personhood of traditional business firms in the past, thus dispensing with the need for inserting AI as property within the legal boundary of a firm. As a separate and distinct entity, AI could function independently as a manager in the way that legal or natural persons do today: i.e., AI as director, officer, partner, member, or manager. Such …

The Expressive Power Of Protecting Intimate Privacy: A Comparative Study Of Legal And Platform Measures, Danielle Keats Citron, Jonathon W. Penney, Alexis Shore Ingber

Articles & Book Chapters

Intimate privacy violations exact profound costs to freedom, including chilling victims into silence; denying them sexual agency; and eroding trust critical to intimate expression and sharing. Effective intimate privacy protections could mitigate these harms via law’s expressive function—sending a message or “signal” that victims of intimate privacy invasions are valued, and their expressions worthy of protection. However, without proof, skepticism is warranted about potential expressive functions as there has been an absence of proof to back up these claims. This Article aims to help fill this void, making a theoretical and empirical case for a positive expressive impact of both …

Federalism, State Action, And Workers' Medical Privacy, Ani B. Satz

Indiana Law Journal

Injured workers entering state workers’ compensation systems effectively forego their medical privacy. This is due to widespread judicial misinterpretation of the HIPAA Privacy Rule (HPR) as excluding injured workers from federal medical privacy protections. As a result, medical privacy for workers’ compensation claims is effectively governed by state law. This Article argues that states have failed to protect the medical privacy of injured workers adequately and that there is a pressing need for legislative reform. The Article presents the first comprehensive survey in the legal literature of state action protecting the medical privacy of injured workers. Part I describes the …

The Warrant Exception That Isn't: Fisa Section 702, "Defensive" Searches, And The Fourth Amendment, Noah C. Chauvin

Faculty Articles

Section 702 of the Foreign Intelligence Surveillance Act allows the government to conduct warrantless electronic surveillance of non-Americans who are located overseas. Although the surveillance targets foreigners, Americans' communications are "incidentally" collected, too. Once the government has acquired Americans' communications, court-approved rules allow it to conduct warrantless searches for and through them in its Section 702 databases. Intelligence agencies have used these rules to turn this foreign intelligence program into a domestic spying tool, conducting tens of thousands of warrantless "backdoor" searches for Americans' private communications obtained under Section 702 every year.

Section 702 periodically sunsets; Congress most recently reauthorized …

Oh Mother, Where Art Thou Paycheck?: Answering The Mommy Blogger Dilemma With Increased Privacy And Financial Protections For Minors, Sarah M. Parker

SPARK Symposium Presentations

This paper provides an overview of the current child entertainment laws and highlights the need for increased protection of minors working on social media, ultimately arguing for the adoption of a nationwide Coogan Law modeled after Illinois' law and the European Union's General Data Protection Regulation. The paper provides a sample Uniform Coogan Code that jurisdictions could adopt to implement such protections for minors online, including provisions covering required savings, financial access by parents, and the right to be forgotten.

Katz'S Imperfect Circle: An Empirical Study Of Reasonable Expectations Of Privacy, Tonja Jacobi, Christopher Brett Jaeger

Faculty Articles

Under Katz v. United States, the Fourth Amendment restricts government actions that infringe upon expectations of privacy that society recognizes as reasonable. This foundational test has long been criticized as circular, both because courts can shape the very expectations they seek to identify through their decisions and because governments can manipulate those expectations to expand the reach of their own power. But how do members of society decide what expectations are reasonable, and how do judges ascertain those expectations? And are expectations of privacy malleable even without deliberate manipulation?

This Article shows that the circularity critique is both understated …

Die Wirkliche Gefahr Liegt In Der Erosion Der Autonomie: Ein E-Mail-Interview Über Kognitive Freiheit Und Die Problematische Nutzung Neuronaler Daten, Nita Farahany, James Kennaway, Bernd Bösel

Faculty Scholarship

In this interview, James Kennaway and Bernd Bösel talk to Nita Farahany about significant themes related to the idea of mind control, as discussed in her book "The Battle for Your Brain" (2023). The book outlines the risks that neurotechnology poses to "cognitive freedom". EEG and EMG data are increasingly used in consumer products, raising concerns about potential misuse. Companies and governments could exploit cognitive biometric data for manipulation or control. Farahany calls for clear legal protections and highlights differences between U.S. and European regulations. She warns of neurotechnological warfare and advocates for global bans. While full mind control remains …

Internet Search Engines’ Privacy Violations And The Lack Of Federal Regulation To Protect Consumers Rights, Elsa M. G. Rodriguez Ogando

Dickinson Law Review (2017-Present)

The United States’ current legal framework regarding internet search engines is disadvantageous to consumers. Federal privacy laws (although not encompassing search engines) grant businesses a strong legal basis in privacy claims and alibies for arbitrary behavior; these laws favor businesses over consumers. Moreover, state privacy laws empower nonspecific agencies to oversee privacy matters and enforce consumers’ rights. Thus, the U.S. privacy legal framework is in need of a new federal law that establishes consumers’ rights, as well as a federal agency dedicated solely to privacy matters. This Article proposes a federal law recommendation based on the standards of the California …

Chronically Online: Apportioning Liability In Social Media Litigation Based On User Engagement, Rebecca Vangelos

Fordham Law Review

The average American teenager spends nearly five hours on social media every day. This result is by design: social media platforms like Instagram, Snapchat, and TikTok deploy persuasive technologies—including infinite scroll, personalized content recommendation feeds, and dark patterns—to capture and retain teen attention. These intentional design features exploit adolescent vulnerabilities to foster social media dependency. Accordingly, a growing body of scientific evidence links the extensive use of social media to the teen mental health crisis in the United States.

Despite these negative effects, social media companies have largely evaded accountability for the harm they have caused to teens. Recent lawsuits …

Immature (Data) Privacy, Yutang Hsiao

Buffalo Law Review

Sharenting, a combination of the words “sharing” and “parenting,” is a double-edged sword. It can cut both ways because even though it benefits parents by being a source of support and fostering community, it harms children in various significant and nuanced ways. While the world blames parents for sharing too much of their children’s data on social media, other actors also play a role and should share the blame. In this Article, I argue that the most fundamental question sharenting raises is in what ways children’s privacy is violated, and who commits the violation. Social media, as one of the …

The Evolution Of Surveillance And The Decline Of Privacy, Alan J. Geyer

Honors Undergraduate Theses

This study directly examines how surveillance law and technology have evolved in the United States and how privacy rights have declined correspondingly. The study specifically focuses on how advancements in surveillance technology have overstepped the boundaries of Fourth Amendment protections and analyzes whether these provisions are adequate for protecting citizens in the modern technological era. The study explores newly employed methods of technological surveillance, such as facial recognition, data collection, and automated license plate readers. It focuses on how government surveillance programs have reshaped legal and ethical understandings of privacy. The changes in surveillance and technology have been analyzed by …

Impacted Stakeholder Participation In Ai And Data Governance, Margot Kaminski, Gianclaudio Malgieri

Publications

Privacy law has long centered on the individual. But we observe a meaningful shift toward group harm and rights. There is growing recognition that data-driven practices, including the development and use of artificial intelligence (AI) systems, affect not just atomized individuals but also their neighborhoods and communities, including and especially situationally vulnerable and historically marginalized groups.

This Article explores a recent shift in both data privacy law and the newly developing law of AI: a turn towards stakeholder participation in the governance of AI and data systems, specifically by impacted groups often though not always representing historically marginalized communities. In …

The Kids Aren’T Alright: Creating Greater Protections For The Children Of Family Vloggers, Annie Dunn

Oklahoma Law Review

No abstract provided.

“Digital Integrity”: Defending The Judicial Integrity In The Digital Age, Guy Alon, Doron Menashe, Guy Itzhak Sender

Touro Law Review

Recent revelations have shown that the protection of the Fourth Amendment in the digital age is inadequate. Despite well-known exclusionary rules regarding evidence obtained by illegal search and seizure, current trends in the digital age and the law of evidence resulted in courts that tend to include such evidence, and by doing so, create significant risk of both substantive and procedural errors and hence increase the potential for wrongful convictions. To address the matter and try to empower and modernize the protection given by the Fourth Amendment, this article suggests performing a revolution in the law of evidence in the …

The Impact Of Artificial Intelligence On Copyright Infringement Liability, Sarah M. Rizzo

Touro Law Review

Although the rise of artificial intelligence platforms has been promoted as a solution to many of our problems, it is important to address the possible issues this new technology may be creating. With artificial intelligence evolving at such a rapid rate, questions arise as to how to effectively regulate and control this technology. Specifically, in the realm of intellectual property, how will copyright protection be ensured and how will liability for copyright infringement be apportioned with the expanding use of artificial intelligence? Users of artificial intelligence platforms should be able to employ such artificial intelligence products freely and confidently without …

Loopholes Of Liberty: The Supreme Court’S Evisceration Of The Fourth Amendment, David J. Looney

Touro Law Review

The Fourth Amendment’s protections against unwarranted government intrusion are currently undermined by the Supreme Court’s third party and open fields doctrines, which permit warrantless access to shared data and private land beyond a home’s curtilage, clashing with the Amendment’s aim to safeguard privacy and property in an era of advanced surveillance. These doctrines enable arbitrary governmental overreach, necessitating urgent review to restore constitutional protections. Rooted in Enlightenment principles, the Fourth Amendment historically protected “papers” and “effects” from physical trespass, as seen in Boyd v. United States. Katz v. United States introduced a “reasonable expectation of privacy” test, but its subjective …

Artificial Intelligence And Music Mash-Ups: Monetizing An Opt-In Closed Universe Database To Preserve Royalties And Credit For Composer And Sound Recording Rights Holders, Michael M. Epstein

Marquette Law Review

This Article charts the development of an opt-in database of music publishing and sound recording catalogues that would allow music industry stakeholders to profit from those who use artificial intelligence to generate new creative content from existing intellectual property. The database would be a portal to content that rights holders would consent to include in a library made available to the public. The database could be advertiser-supported, allowing for no-cost access by the public, or users could pay for a blanket license or per- search fee. Proceeds from the database would be distributed to rights holders based on the content …

Combating The Rising Threat Of Sextortion, Margaret Galles

Mitchell Hamline Law Journal of Public Policy and Practice

No abstract provided.

Ban Cookie Banners: A Case Study In Tech Regulation, Kate Klonick

Faculty Publications

Few experiences on the modern internet are as universally reviled as the cookie banner. They clutter websites with pop-ups, interrupt user flow, make information harder to access, and demand repetitive, meaningless clicks. What was once heralded as a tool to advance individual autonomy and privacy has, in practice, become a daily annoyance that breeds cynicism with the very concept of consent itself. Cookie banners do not empower; they weary. They do not inform; they obscure. They do not prevent surveillance; they normalize it.

The tragedy of the cookie banner is that it embodies the best intentions but worst solutionism of …

Regenerating Justice: Chatgpt And The Legal Minefield Of Generative Ai, Katie Szilagyi

Canadian Journal of Law and Technology

This paper adopts an automation bias lens to cast doubt on the growing claims that GenAI is a transformational tool for legal industry. In this context, automation bias refers to the well-known psychological phenomenon in which human decision-makers unwittingly defer to automated processes, flowing from overreliance on the accuracy of the automation. Even well-meaning individuals aiming to keep a “human-in-the-loop” of any automated decision can fall prey to this well-documented phenomenon, trusting the technology more than it deserves to be trusted. Champions for current GenAI technologies often do acknowledge limitations within the existing landscape of tools, like GenAI’s tendency to …

The Law Of Digital Resurrection, Victoria J. Haneman

Scholarly Works

The digital right to be dead has yet to be recognized as an important legal right. Artificial intelligence, augmented reality, and nanotechnology have progressed to the point that personal data can be used to resurrect the deceased in digital form with appearance, voice, emotion, and memory recreated to allow interaction with a digital app, chat bot, or avatar that may be indistinguishable from that with a living person. Users may now have a completely immersive experience simply by loading the personal data of the deceased into a neural network to create a chatbot that inherits features and idiosyncrasies of the …

The Illusion Of Inclusion: The False Promise Of The New Governance Project For Content Moderation, Brenda Dvoskin

Scholarship@WashULaw

Because private companies now control the most prominent communication platforms, the most pressing question in the field of content moderation is how to ensure that the governance of public discourse responds to public values. The prevailing approach, given that the state cannot regulate speech directly, is that state regulation can be substituted with audited self-regulation, broad stakeholder participation, and negotiated rulemaking. In this model, which this article refers to as the “new governance model for content moderation,” companies include advocates as representatives of the public in their processes to govern online speech. Ideally, they negotiate policy goals and share responsibility …

Ai Ethics, Law, And Policy, Pauline Kim, Ryan Durrie

Scholarship@WashULaw

AI technologies promise many benefits, but they can also have significant negative impacts on human health, safety, well-being, and fundamental rights. This chapter explores the different governance tools that have been considered for guiding developments in AI in socially beneficial ways, examining the relevance of ethics, law, and policy. Each of these approaches offer tools to address these concerns; however, each has limitations, and none provides a complete solution in itself. Statements of ethical principles can articulate high-level values and goals to guide behavior but are usually quite vague and difficult to operationalize. They also lack any enforcement mechanism. In …

Dark Patterns In The Opt-Out Process And Compliance With The California Consumer Privacy Act (Ccpa), Jens Frankenreiter, Van Hong Tran, Aarushi Mehrotra, Ranya Sharma, Marshini Chetty, Nick Feamster, Lior Strahilevitz

Scholarship@WashULaw

To protect consumer privacy, the California Consumer Privacy Act (CCPA) mandates that businesses provide consumers with a straightforward way to opt out of the sale and sharing of their personal information. However, the control that businesses enjoy over the opt-out process allows them to impose hurdles on consumers aiming to opt out, including by employing dark patterns. Motivated by the enactment of the California Privacy Rights Act (CPRA), which strengthens the CCPA and explicitly forbids certain dark patterns in the opt-out process, we investigate how dark patterns are used in opt-out processes and assess their compliance with CCPA regulations. Our …

Re-Recording The Record: The Case For A Stronger Moral Right Of Integrity In The United States, Alexandria Touron

Fordham Law Review

In the United States, musical artists have limited legal recourse over transferring ownership of their music to third parties, even when such transfers may harm the artist’s reputation or the integrity of the work. Even the most prominent musicians, like Taylor Swift, must operate within an industry structure that normalizes the transfer of rights and, thus, control of their creative works. This occurs because U.S. law ties artists’ rights almost exclusively to economic ownership of their work unless they specifically bargain to keep their moral rights. However, most other countries have comprehensive moral rights frameworks where all artists can protect …