Privacy Law Commons^™

Beyond Digital Pessimism: How A Focus On Trust Can Enhance Eu Digital Law, Neil Richards, Woodrow Hartzog, Claire Boine, Lea Despotis

Faculty Scholarship

Lawmakers looking to foster technological innovation on the European market are adopting laws they hope will promote consumer trust in digital products. Their strategy can be broken down into three components. First, they aim to empower consumers to choose how much data they want to share with companies through an express consent framework. Second, they seek to avoid harms from digital products through product safety law such as adapting the Product Safety Regulation to digital products or adopting the AI Act. Third, they endeavor to prevent manipulation of consumers through digital means.

In this essay, we argue that while laudable, …

San Mateo County’S Digital Jail Mail Sparks Reckoning Over Private Data, Juan A. Lasso

Capstones

This capstone examines privacy and data risks embedded in digital communication systems used in U.S. correctional facilities. As private vendors introduce tablets, kiosks, and mail digitization services, these technologies enable widespread surveillance and data collection of incarcerated people and their loved ones. The project explores how these systems track and analyze digital footprints in ways that challenge established legal and ethical expectations around privacy. It documents the personal impact on loved ones of people currently or formerly incarcerated in San Mateo County. The reporting centers on the California county jail where a civil rights lawsuit is pending over the mail …

The Law Of Unintended Consequences: Examining West Virginia's Data Privacy Legislation And What Could Have Been, Jena Martin, Erin Kelley

West Virginia Law Review Online

No abstract provided.

Misaligned: An Update On Trends In Data Privacy Laws And Their Effect On Individuals, Jena Martin, Erin Kelley

Faculty Articles

In 2021, a data privacy white paper was published with the support of the Center of Consumer Law and Education-a joint initiative with West Virginia University and Marshall University. That paper provided a comprehensive overview of data privacy around the country (and indeed, a look around the world) and discussed various ways that consumers engage with data and data privacy issues-while focusing on West Virginia and the issues that the state's residents face. Specifically, the paper provided the results of a survey of West Virginians and a set of focus groups held to discern what consumers in the state consider …

Internet Search Engines’ Privacy Violations And The Lack Of Federal Regulation To Protect Consumers Rights, Elsa M. G. Rodriguez Ogando

Dickinson Law Review (2017-Present)

The United States’ current legal framework regarding internet search engines is disadvantageous to consumers. Federal privacy laws (although not encompassing search engines) grant businesses a strong legal basis in privacy claims and alibies for arbitrary behavior; these laws favor businesses over consumers. Moreover, state privacy laws empower nonspecific agencies to oversee privacy matters and enforce consumers’ rights. Thus, the U.S. privacy legal framework is in need of a new federal law that establishes consumers’ rights, as well as a federal agency dedicated solely to privacy matters. This Article proposes a federal law recommendation based on the standards of the California …

Centering The Vulnerable Through Data Protection, Scott Skinner-Thompson

Publications

No abstract provided.

The False Choice Between Digital Regulation And Innovation, Anu Bradford

Northwestern University Law Review

This Article challenges the common view that more stringent regulation of the digital economy inevitably compromises innovation and undermines technological progress. This view, vigorously advocated by the tech industry, has shaped the public discourse in the United States, where the country’s thriving tech economy is often associated with a staunch commitment to free markets. U.S. lawmakers have also traditionally embraced this perspective, which explains their hesitancy to regulate the tech industry to date. The European Union has chosen another path, regulating the digital economy with stringent data privacy, antitrust, content moderation, and other digital regulations designed to shape the evolution …

Information Accountability Foundation Names Two Maurer Faculty To Leadership Positions, James Owsley Boyd

Keep Up With the Latest News from the Law School (blog)

he Information Accountability Foundation (IAF) has appointed two Indiana University Maurer School of Law faculty to lead the organization.

Fred H. Cate, a distinguished professor and C. Ben Dutton Professor of Law, was named the nonprofit think tank’s new executive director, while Stan Crosley, an adjunct faculty member and 1994 graduate of the Law School, was appointed chief policy strategist.

Founded in 2013, the IAF works with global regulators and industry executives to promote organizational accountability, data stewardship, and data ethics. Its mission is to help regulators and responsible companies better understand the challenges around Artificial Intelligence and data governance …

Fitting A Block Into A Sphere Mold: The Inadequacy Of Current Data Privacy Regulations In Protecting Data Privacy Within The Blockchain Space, Jenny Yang

Washington and Lee Journal of Civil Rights and Social Justice

Despite global imposition of data privacy laws and regulations, data privacy is a nonexistent luxury amongst the data-charged world we live in. Data privacy has long been established as a fundamental right. Entities have successfully established robust methodologies around existing data privacy laws and regulations to utilize past consumer behavior to predict, impact and manipulate current and future consumer behaviors. This phenomenon has been commonly coined as “corporate surveillance.” Emerging spaces arising through technological developments have greater access into consumer data to impact economic choices. Specifically, the blockchain space, through its unique open-source and permanent traits, has been able to …

The Kids Are Not Alright: Negative Consequences Of Student Device And Account Surveillance, Ashley Peterson

Washington Law Review

In recent years, student surveillance has rapidly grown. As schools have experimented with new technologies, transitioned to remote and hybrid instruction, and faced pressure to protect student safety, they have increased surveillance of school accounts and school-issued devices. School surveillance extends beyond school premises to monitor student activities that occur off-campus. It reaches students’ most intimate data and spaces, including things students likely believe are private: internet searches, emails, and messages. This Comment focuses on the problems associated with off-campus surveillance of school accounts and school-issued devices, including chilling effects that fundamentally alter student behavior, reinforcement of the school-to-prison pipeline, …

The Data Heist: Protecting Consumers And Their Information Through Opt-In Consent, John A. Hudson

Arkansas Law Review

This Comment will: (1) compare and contrast the data privacy laws in the United States and the European Union; (2) demonstrate the significant risk American consumers are subject to under the United States’ current laws and regulations; and (3) address the protections provided by the European Union’s explicit opt-in consent requirement that would ensure safer conditions for American consumers.

Wearable Ai, Bystander Notice, And The Question Of Privacy Frictions, Zahra Takhshid

Sturm College of Law: Faculty Scholarship

With the rapid advancement of Artificial Intelligence (“AI”) technology and the widespread availability of large language models (“LLMs”), wearable AI devices and designs for new hardware have surged like never before. While wearable AI was traditionally marketed for health and fitness purposes, many of the emerging products are multifunctional. These features can jeopardize the privacy of bystanders in addition to the consumers. Product designers are thus facing a dilemma: ensuring third-party privacy or guaranteeing convenience and a user-friendly design. This Article argues for mandating “privacy frictions” to function as both bystander notice and consent for wearable AI devices with audiovisual …

The Trade Origins Of Privacy Law, Anupam Chander

Indiana Law Journal

The desire for trade propelled the growth of data privacy law across the world. Countries with strong privacy laws sought to ensure that their citizens’ privacy would not be compromised when their data traveled to other countries. Even before this vaunted Brussels Effect pushed privacy law across the world through the enticement of trade with the European Union, Brussels had to erect privacy law within the Union itself. And as the Union itself expanded, privacy law was a critical condition for accession.

But this coupling of privacy and trade leaves a puzzle: how did the U.S. avoid a comprehensive privacy …

My Body, My Choice, My Data: Information Privacy After Dobbs, My Kim Ong

University of San Francisco Law Review

No abstract provided.

Data In Business & Society, Tabrez Y. Ebrahim

Lewis & Clark Law Review

Data, it is sometimes said, is the world’s new oil. Unlike the days when information was transmitted in print form, data is transmitted at the touch of a fingertip through the click of a mouse or a push of an icon on a phone app. Algorithms and computing systems have drastically expanded the scope, speed, and volume of access and use of data for consumers. Additionally, businesses, in variety of forms, including business-to-business, business-to-consumer, online, and even brick-and-mortar, have employed data to interact with other businesses and with consumers. Data has drastically expanded in use throughout business and society, and …

Growing Tensions: Consumer Privacy And Corporate Disclosures, Megan Wischmeier Shaner

Faculty Articles

Data privacy and data security have become key issues for legislators, regulators, and individual citizens. Roughly two-thirds of Americans believe their data is being regularly tracked, monitored, and collected by companies and the government. A majority of U.S. adults also believe their data is less secure today than five years ago, expressing concerns that they have little control over how their personal information is being used and that the entities who control their data are not responsible stewards. In the absence of comprehensive federal regulation, a continuous stream of privacy statutes have been proposed at the state level. Beginning with …

Continuous Reproductive Surveillance, Michael Ulrich, Leah R. Fowler

Faculty Scholarship

The Dobbs opinion emphasizes that the state’s interest in the fetus extends to “all stages of development.” This essay briefly explores whether state legislators, agencies, and courts could use the “all stages of development” language to expand reproductive surveillance by using novel developments in consumer health technologies to augment those efforts.

Aadhaar: India’S National Identification System And Consent-Based Privacy Rights, Anvitha S. Yalavarthy

Vanderbilt Journal of Transnational Law

India’s national identification program, Aadhaar, created the largest national biometric database in the world. While the program is touted as voluntary, the increasing dependence on it, and the laws surrounding it, make it de facto mandatory. This Note examines the social and legal landscapes surrounding the Aadhaar program along with the principles of data privacy and biometric data collection in the European Union and the United States to show how those principles can and should apply to the Aadhaar system.

This Note suggests that the way to strengthen the Aadhaar system’s privacy regime is by balancing the principles of necessity …

What A Data Privacy Law Should Look Like In West Virginia: Balancing Competing Interests Of Consumers And Businesses, Harrison Enright

West Virginia Law Review

Today’s businesses invariably leverage consumer data to create business insights, such as marketing strategies and consumer behavior analyses. As a result, consumers have placed an emphasis on data privacy and security. In response, many states have proposed comprehensive legislation aspiring to regulate the collection and usage of consumer data by businesses, grant individual rights to consumers, and provide for a method of enforcement. House Bill 3159 represents West Virginia’s most recent attempt at doing so, serving as an indication that the state is working diligently to enhance the data privacy of its residents.

Although enacting a comprehensive data privacy law …

Children's Digital Privacy And The Case Against Parental Consent, Zahra Takhshid

Sturm College of Law: Faculty Scholarship

Children’s engagement with the internet has exploded. From education to social media, companies have offered products and services that --far from being mere distractions for children -- have increasingly become necessities. This necessity is most keenly felt in the EdTech world. As companies rely on the verifiable parental consent required by the Children’s Online Privacy Protection Act (“COPPA”) to collect and use minors’ data, reviewing boilerplate waivers of liability and consent forms for children’s online activities have thus become part of parenting. This article argues that under the common law tradition of protecting the best interest of the child, when …

Life, Liberty, And Data Privacy: The Global Cloud, The Criminally Accused, And Executive Versus Judicial Compulsory Process Powers, Rebecca Wexler

Faculty Scholarship

U.S. policymakers’ responses to a wave of global data privacy laws are creating a deep structural unfairness in the criminal legal system. In an era of cloud computing, when data about communications and activities occurring anywhere in the world can be stored on servers located anywhere else, access to such data can make the difference between convictions and acquittals. At the same time, new global data privacy laws risk cutting off cross-border access to digital evidence in criminal investigations. Recognizing the threat to law enforcement interests, U.S. policymakers enacted the CLOUD Act of 2018 to create special procedures for law …

Privacy In The Wild: Why Animals' Informational Privacy Matters, Christopher Wlach

Animal Law Review

As data privacy and security come increasingly into focus among lawmakers, regulators, companies, and consumers, concerns about animals’ privacy have gone largely unmentioned. This Article examines how both wild and domestic animals have informational privacy interests—that is, interests in protecting information about themselves. The Article discusses three examples of how informational privacy for animals is not merely a theoretical concept but directly relates to animals’ broader welfare interests. Finally, this Article discusses why privacy provides a helpful theoretical framework and vocabulary for addressing these animals’ interests.

Dobbs In A Technologized World: Implications For Us Data Privacy, Jheel Gosain, Jason D. Keune, Michael S. Sinha

All Faculty Scholarship

In June of 2022, the U.S. Supreme Court issued its opinion in Dobbs v. Jackson Women’s Health Organization, overturning 50 years of precedent by eliminating the federal constitutional right to abortion care established by the Court’s 1973 decision in Roe v. Wade. The Dobbs decision leaves the decision about abortion services in the hands of the states, which created an immediately variegated checkerboard of access to women’s healthcare across the country. This in turn laid bare a profusion of privacy issues that emanate from our technologized world. We review these privacy issues, including healthcare data, financial data, website tracking and …

The Need For Curtains Of The Soul: Privacy Versus Transparency In The Instrumented World Of Algorithmic Artificial Intelligence, Michael Martin Losavio

FIU Law Review

We approach a privacy singularity in pervasive data collection and inference that may reveal all about our lives. While privacy might not yet be dead, we struggle to maintain its shield for personal autonomy. Part of this contemporary challenge comes from the massive data sets generated every day everywhere. And then the powerful analytics that reveal all. This is further challenged by efforts at data transparency that may reveal too much of one’s life. Preservation of privacy, if we deem it important enough to preserve, must have a robust set of technical and legislative implementations on collection, storage, transmission and …

A Concrete Proposal For Data Loyalty, Neil Richards, Woodrow Hartzog, Jordan Francis

Faculty Scholarship

Congress and state legislators are finally experimenting with new privacy frameworks, rights, and duties to move past the thoroughly critiqued “notice and choice” model for data privacy. While many new privacy proposals seek a more fortified version of the fair information practices, some legislators have placed a duty of data loyalty at the heart of their proposed privacy bills. This is important because a duty of data loyalty has the potential to anchor American privacy law in a way analogous to how the European Union approach is grounded in fundamental rights of privacy and data protection.

Unfortunately, there remains some …

Data Privacy In The Time Of Plague, Cason Schmit, Brian N. Larson, Hye-Chung Kum

Faculty Scholarship

Data privacy is a life-or-death matter for public health. Beginning in late fall 2019, two series of events unfolded, one everyone talked about and one hardly anyone noticed: The greatest world-health crisis in at least 100 years, the COVID-19 pandemic; and the development of the Personal Data Protection Act Committee by the Uniform Law Commissioners (ULC) in the United States. By July 2021, each of these stories had reached a turning point. In the developed, Western world, most people who wanted to receive the vaccine against COVID- 19 could do so. Meanwhile, the ULC adopted the Uniform Personal Data Protection …

Gauging The Acceptance Of Contact Tracing Technology: An Empirical Study Of Singapore Residents’ Concerns With Sharing Their Information And Willingness To Trust, Ee-Ing Ong, Wee Ling Loo

Research Collection Yong Pung How School Of Law

In response to the COVID-19 pandemic, governments began implementing various forms of contact tracing technology. Singapore’s implementation of its contact tracing technology, TraceTogether, however, was met with significant concern by its population, with regard to privacy and data security. This concern did not fit with the general perception that Singaporeans have a high level of trust in its government. We explore this disconnect, using responses to our survey (conducted pre-COVID-19) in which we asked participants about their level of concern with the government and business collecting certain categories of personal data. The results show that respondents had less concern with …

Investing In Human Futures: How Big Tech And Social Media Giants Abuse Privacy And Manipulate Consumerism, Brett Dembrow

University of Miami Business Law Review

Social media companies such as Facebook, Twitter, and Instagram originated with one seemingly innocent goal: “to bring the world closer together.”1 Now, these Big Tech giants own and operate some of the most powerful platforms in the world simply because of their unethical yet effective strategies to maintain their users’ attention. Social media companies have monetized the amount of time their users spend on their platforms by honing in on the individual preferences of each user and selling that access to advertisers. This heightened access to potential consumers and their preferences has become the most valuable marketing tool for digital …

Big Data, Both Friend And Foe: The Intersection Of Privacy And Trade On The Transatlantic Stage, Gabrielle C. Craft

University of Miami International and Comparative Law Review

This Note analyzes the data privacy protection initiatives implemented by the European Union and the United States and their effects on international trade. As technology develops, the feasibility of data collection increases, allowing for the collecting of inconceivable amounts of data information. Consequently, this data includes personal information, thus implicating privacy concerns and the need for data privacy protection regulations. Data privacy focuses on the use and governance of personal data and how the data is gathered, collected, and stored. In 2018, the European Union enacted the General Data Protection Regulation (GDPR), which sets out highly stringent standards for how …

Me, Myself And My Digital Double: Extending Sara Greene’S Stealing (Identity) From The Poor To The Challenges Of Identity Verification, Michele E. Gilman

All Faculty Scholarship

Identity is an essential part of the human condition. When one’s identity is stolen or when a state rejects a citizen’s identity, the consequences can be devastating to one’s notion of selfhood as well as undermine their economic security. In Stealing (Identity) from the Poor, Sara Greene explores the serious harms suffered by low-income people who are victimized by identity theft. She explains that our plutocratic regime of identity theft laws serves the interests of wealthier Americans at the expense of those experiencing poverty.

This Essay extends Greene’s analysis and framing to the harms of identity verification systems, particularly in …