Privacy Law Commons^™

Neurodiversity In The Courtroom: Expanding Jury Service Accessibility Beyond Physical Disability, Samantha L. Mabe

Seattle University Law Review

The Americans with Disabilities Act has required equal access to jury service for decades; however, efforts to accommodate jurors with disabilities have been slow to develop beyond some minor accommodations for physical disabilities. While neurodivergent people frequently struggle to navigate a world catered toward neurotypical people, jury service remains inaccessible for many neurodivergent people who need accommodations to attend trial and engage in jury deliberations. If courts and advocates do not consider how to develop accommodations to secure the service of neurodivergent jurors, they will miss out on the unique skillsets that neurodivergent people can bring to resolving disputes.

Disabled …

A Shield For Whom? The Disastrous Hidden Toll Of Section 230 On Children, Dominic Roschival

University of Cincinnati Law Review

No abstract provided.

Emotionally Unstable: Addressing Emotional Distress As A Concrete Injury In Data Breach Cases Post-Transunion, Anna P. Cox

Fordham Law Review

Data breaches and data breach litigation are exponentially on the rise. Plaintiffs whose information is stolen in a data breach often claim emotional distress for fear of future harm the data breach may cause. However, plaintiffs who bring suit in federal court must show that they have suffered an injury in fact for purposes of Article III standing before a federal court will exercise jurisdiction. The U.S. Supreme Court’s decision in TransUnion LLC v. Ramirez requires that plaintiffs who seek money damages under a theory of risk of future harm show that they have suffered a present concrete injury to …

When The Screen Lies: Navigating Privacy And Publicity In An Ai World, Nancy M. Menagh

Fordham Law Review

A key issue of the 2023 SAG-AFTRA strike was the use of generative AI in the entertainment industry and, more specifically, the creation of uncanny digital replicas of performers being used without their knowledge or consent. Since then, concerns have only intensified around the unauthorized creation and use of digital replicas and the ease with which they can be made and disseminated online. Currently, there is a patchwork of state laws that attempt to target these issues, but they have proven ineffective against the challenges presented by digital replicas.

This Note analyzes the problems digital replicas have raised in the …

The Loyalty Trap: How Loyalty Programs Hook Us With Deals, Hack Our Brains, And Hike Our Prices, Samuel A.A. Levine, Stephanie T. Nguyen

Center for Law and the Economy

This paper examines the devolution of loyalty programs — from simple coupon programs to major lines of business transforming the retail experience. This devolution is happening in three stages. In the first stage — the hook — companies entice consumers by promising generous upfront benefits if consumers enroll. In the second stage — the hack — companies use loyalty programs to extract deep insights into our spending habits and willingness to pay, effectively hacking our brains. And in the third stage — the hike — companies make these programs worse for consumers — raising fees, devaluing points, limiting redemption options, …

Agentizing Privacy Preferences Without Privatizing Data Protection Policy, Frank Pasquale, Vanna Carter

Cornell Law Faculty Publications

This essay explores how consumers might exercise newly restored agency in a digital environment increasingly shaped by generative AI. Rather than expecting consumers to read privacy-related terms of service, policymakers should encourage the emergence of Automated Consumer Agents (“ACAs”) capable of interpreting privacy provisions and acting on behalf of users according to their stated preferences. These systems could automatically reject objectionable forms of data extraction, translating consumer values into actionable decisions in online transactions.

Despite this promise, the rise of ACAs would also present new problems. Without supportive policy and legal frameworks, agentization of privacy preferences could itself reproduce or …

Is Your Data Good, Bad, Or Neutral?: Redefining Concreteness For Data Breach Harms, Jeeyoon Lim

Fordham Law Review

In recent years, the Supreme Court has tightened federal court standing requirements for intangible harms, including statutory harms. In TransUnion LLC v. Ramirez, the Court held that a mere statutory violation, absent a common-law analogue, is not sufficiently concrete to grant standing. The Court did not provide clear guidance as to how stringent the common-law analogue analysis must be, other than that it does not require an “exact duplicate.” Because of the ever-evolving nature of digital data, data breach victims attempting to enforce their statutory right to privacy in federal court have struggled to rely on tradition and history …

Are Your Secrets Safe?: Imposing A Fiduciary Duty On Healthcare Ai Developers Dealing With Sensitive Health Information, Lauren Quinn

Fordham Law Review

In 1996, Congress passed the Health Insurance Portability and Accountability Act (HIPAA) to establish standards for transmitting health information. For decades, the HIPAA Privacy Rule has operated as the primary regulation protecting health information in the United States. However, in the decades since HIPAA was enacted, new technologies have demonstrated the shortcomings of the Privacy Rule. In particular, the development of healthcare artificial intelligence (AI) has created new privacy concerns and exacerbated existing ones. This Note examines the current healthcare privacy framework in the United States and considers how healthcare AI complicates it. This Note also explores how AI developers …

Dignity And Deepfakes, Michael Goodyear

Articles & Chapters

Today, we face a dangerous technosocial combination: AI-generated deepfakes and the Internet. Believable and accessible, these deepfakes have already spread sex, lies, and false advertisements across the Internet and targeted everyone from Taylor Swift to middle school students. Dissemination of deepfakes inflicts multifarious dignitary harms against their victims—especially women and LGBTQ+ persons—stripping them of control over their own identities, harming their reputations, and ostracizing them from society through shame.

Yet this is not the first time a new technology for capturing one’s likeness and a method for disseminating images threatened individuals’ dignity. In the late nineteenth century, the right of …

Law Enforcement, Reproductive Health Information, And The Hipaa Privacy Rule, Stacey A. Tovino

Faculty Articles

On April 26, 2024, the federal Department of Health and Human Services (HHS) promulgated a final rule (Final Rule) amending the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. The Final Rule prohibits HIPAA covered entities and business associates from using and disclosing protected health information (PHI) to conduct criminal, civil, or administrative investigations into an individual for the mere act of seeking, obtaining, providing, or facilitating lawful reproductive health care. The Final Rule also prohibits HIPAA covered entities and business associates from using and disclosing PHI to impose criminal, civil, and administrative liability on any individual, or to …

Fairer Public Benefit In Copyright Law, Amanda Levendowski Tepski

Cardozo Law Review

In 1966, a court considered expressly whether a secondary use of copyrighted works served a public benefit. While public benefit has become a subfactor of the fair use doctrine, it remains undefined, uncodified, and undertheorized. Courts often invoked public benefit in pivotal cases involving novel technologies, from home video recorders to digital libraries to algorithms—but they did not need to. After the recent Supreme Court decision in Google v. Oracle, however, public benefit is unavoidable: The Court stated that “we must take into account the public benefits the copying will likely produce.” A qualitative analysis of key public benefit cases …

Civil Liability For Invasions Of Privacy: Whither Singapore?, Yu Han Lam

Research Collection Yong Pung How School Of Law

Intrusions upon privacy are becoming increasingly common in Singapore. Singapore has yet to establish a tort addressing this issue, although the SAL Law Reform Committee has proposed a tort of misuse of private information. Australia has also recently introduced a statutory tort of serious invasion of privacy. This article will argue for the need for a Singapore tort of intrusion upon seclusion, on top of the already proposed tort of misuse of private information, to cover more appropriately instances of intrusions upon privacy.

Full Issue

Indian Journal of Law and Technology

No abstract provided.

Editorial Board

Indian Journal of Law and Technology

No abstract provided.

Are You The Sum Of Your Data? Appropriation Of Digital Persona As Appropriation Of Likeness, Lyrissa Barnett Lidsky

UF Law Faculty Publications

A review of Zahra Takhshid's article, Data as Likeness, 112 Geo. L. J. 1161 (2024).

The House Always Learns: Integrating Ai Into Las Vegas Casino Surveillance And The Laws Behind The Lens, Taylor Dixon

UNLV Gaming Law Journal

No abstract provided.

The “Founder’S Gaze”: How The Fourth Amendment Is A Surveillance Technology That Enables Ai To Scale Control Over The Subaltern, Diego H. Alcalá Laboy

Michigan Journal of Race and Law

Much has been written about the rise of artificial intelligence and machine learning applications and how the current Fourth Amendment law has been unable to mitigate the privacy harm that these tools produce. This article explores how the development and usage of AI and machine learning models is dependent on the originalism principles of Fourth Amendment Law. Utilizing Critical Surveillance Studies and Anticolonial Theory, I posit that the Fourth Amendment is a surveillance technology that categorizes conduct, persons, and places to impose the material conditions for the subjugation of historically minoritized communities within the United States. Furthermore, this article explores …

"The Cake Is A Lie:" Locating Loot Boxes In Indian Gaming Framework, Aman Gupta, Samriddh Sharma

Indian Journal of Law and Technology

Lootboxes have become endemic in modern video games. These microtransactions allow users to purchase virtual containers without knowing their content, which is determined by chance. There have been increasing concerns about the negative impact of loot-box purchases on mental health and whether these amount to gambling under various laws. In response, several countries have started applying existing gambling laws or legislating new measures to regulate lootboxes. This raises questions about the present state of regulations in the Indian context and whether they are adequate in meeting the risks posed by lootboxes. In the present article, the authors explain the concept …

Steering Indian Financial Services Towards Digital Operational Resilience: A Cross-Sectoral Approach, Vaibhav Vijay Nishad, Smruti Kulkarni

Indian Journal of Law and Technology

In India, among the three financial regulators, RBI’s recent focus on creating a robust ICT risk management framework has been at the forefront of the country’s digital operational resilience strategy. The continuous cyber threats and recent digital operational failures have highlighted the need for further enhancements to strategies that establish strong ICT risk management. Addressing these cybersecurity vulnerabilities requires more than prescriptive rules; it demands holistic, flexible, adaptive, and coordinated regulatory approaches to strengthen digital operational resilience. This paper analyses the key issues that need resolution to advance these efforts. We identify the misalignment of economic incentives for compliance as …

Centring Marginalisation In The Development Of Digital Courts: Reflections From Argentina, India, Kenya, And Malaysia, Siddharth Peter De Souza, Varsha Aithala, Francisco Mignaquy, Mercy Muendo, Anisha Nadkarni

Indian Journal of Law and Technology

This paper presents a multi-jurisdictional analysis of digitalisation of justice and the perceived role of courts as public institutions upholding the rule of law and ensuring access to justice to all. Using selected examples from Argentina, India, Kenya and Malaysia, it examines the impact of digitalisation efforts of these countries on their citizens, marginalised populations, the State and private sector. We propose to design an approach to digital justice that centres people on the margins of digital transformation of courts. This includes three elements – first, engagement with people centered perspectives; second, focus on disadvantage and addressing socio-technical factors; and …

From ‘Gig Work’ To Algorithmically Mediated Work: Shifting The Focus To Technological Control In Work Regulation, Jasoon Chelat

Indian Journal of Law and Technology

Platform-based work is finding a place in legislative instruments in India in recent years, under the Code on Social Security, 2020, as well as state-level legislations. In this paper, I argue that these efforts to extend protections to gig or platform work are limited in their understanding of the way work is shaped by digital technologies both within and outside of platforms. Platform-based work regulation seems to have skipped a step: the regulatory discourse has moved on to a welfare-focused model present in informal work, without examining existing jurisprudence on worker rights relevant to digitally mediated work. These legislative instruments …

Losing The Big Picture: An Argument For Preserving Irpa Rights For Emotional Damages, Stephen Luke Winbery

Chicago-Kent Law Review

No abstract provided.

Immigrant Surveillance In San Diego During A Fascist Era, Jennifer L. Torres Leon

McNair Summer Research Program

The following qualitative study examines a new increase of technological surveillance used on immigrants by San Diego’s local law enforcement. Drawing from in-depth interviews of the San Diego Privacy Advisory Board and Trust SD, insights of technological related violations are sanctioned by the San Diego Police Department. This is done through ambiguous language regarding “criminal investigations” and lack of definitive use policy, despite several memorandums and recommendations by the SD Privacy Advisory Board. Present findings reveal a duality of immigrant surveillance instigating hyper-visible tracking and broadcasting an image of their criminality. This study contributes to scholarship or crimmigration and urban …

Recommended For You Streaming Platform Recommendation Algorithms And Consumer Rights, Margaret Wilson

Canadian Journal of Law and Technology

Streaming platforms are becoming increasingly popular with consumers. In Canada, recent studies have suggested that 55% of Canadians use video streaming services, like Netflix, on a daily basis. Similarly, up to 30% stream audio content daily on platforms like Spotify.6 The federal government has recognized that the broadening use of these technologies creates new challenges for consumer privacy and has proposed updates to consumer privacy laws in Bill C-27. With the dissolution of the 44th Parliament on March 23, 2025, Bill C-27 died on the roll and will not be adopted. As proposed legislation, Bill C-27 signalled the direction of …

Navigating The Shadows: Evaluating Privacy Protections Against Dark Patterns, Matt Gaulton, Dominique Kelly, Dr. Jacquelyn Burkell

Canadian Journal of Law and Technology

Privacy dark patterns are user interface design strategies that manipulate individuals into disclosing personal information or consenting to data practices they may not fully understand or intend. This paper critically evaluates the effectiveness of Canadian, American, and European privacy frameworks — specifically, the Personal Information Protection and Electronic Documents Act (PIPEDA), the California Consumer Privacy Act (CCPA), and the European Union’s General Data Protection Regulation (GDPR) — in addressing the regulatory challenges posed by privacy dark patterns. We argue that PIPEDA is significantly less equipped to counteract such manipulative practices, particularly in comparison to the GDPR and CCPA, due to …

Balancing The Use Of Ai With Canadian Privacy Rights: An Analysis Of Personal Information Collection Through Emerging Ai Tools, Tamie Dolny, Methura Sinnadurai

Canadian Journal of Law and Technology

Biometric information collection through artificial intelligence (AI) is a new, dynamic and exciting technology that also raises significant privacy law considerations for in house and governmental lawyers in Canada. While organizations may be quick to collect personal information using forms of AI technology, these entities should be aware of the legal risk posed by technologies which may violate the Freedom of Information and Protection of Privacy Act (FIPPA)1 and/or the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA),2 especially if users are unaware of, or have not consented to the use of their personal information by the AI …

Considering The Concept Of Law In The Legal Singularity, Matthew Tse

Canadian Journal of Law and Technology

This review article engages with the idea of a ‘‘legal singularity”, which has been developed by Abdi Aidid and Benjamin Alarie in their book, The Legal Singularity: How Artificial Intelligence Can Make Law Radically Better.

The legal singularity describes a legal system in the future that harnesses algorithmic computation to facilitate a ‘‘stable and complete legal order, capable of addressing and resolving practically all types of legal uncertainty in real time and on demand”. Aidid and Alarie believe algorithmic computation will achieve this promise in an interdependent dual process. On one hand, algorithms will structure the law with conceptual standardization. …

From Code To Compliance: Regulating Daos In Canada: Legal Frameworks And Challenges, Gulnoza Abdurakhmonova

Canadian Journal of Law and Technology

This paper examines the regulatory challenges surrounding Decentralised Autonomous Organizations (DAOs) in Canada and argues that existing legal frameworks— primarily designed for traditional corporate entities— are inadequate for addressing the unique characteristics of DAOs. While securities regulators have taken steps to oversee aspects of DAO activity, a broader regulatory framework is needed to provide legal clarity, address governance and liability concerns, and foster responsible innovation. This study recommends a dual approach: (1) extending corporate law reforms to define the legal status and obligations of DAOs, and (2) developing a regulatory framework that balances investor protection with the flexibility needed for …

Rethinking The Applicability Of Section 8 Of The Canadian Charter For The Information Age And Beyond, François Tanguay-Renaud

All Papers

The Supreme Court of Canada’s interpretation of the right to be secure against unreasonable search and seizure guaranteed by section 8 of the Canadian Charter of Rights and Freedoms has remained fairly stable since the adoption of the Charter. Or at least, that is how the Court’s section 8 jurisprudence to date makes it seem. Yet, in some recent decisions dealing with digital communications and the internet—culminating in the 2024 case of R. v. Bykovets—the Court has, implicitly, brought into question the foundational principle based on which the right has historically been circumscribed. Or so I argue in …

Volume 48 Masthead

Seattle University Law Review

Volume 48 Masthead