Privacy Law Commons^™

The Fourth Amendment In Parallax: Why California's New Speed Cameras Should Prompt Increased Scrutiny For Surveillance Networks, Arman Sookiassian

Loyola of Los Angeles Law Review

With the passage of Assembly Bill 645 in 2023, California has authorized speed camera pilot programs in six cities throughout the state. The goal for this legislation is to reduce speeding and speed- related casualties through a network of automated traffic surveillance. By issuing civil fines for speeding violations detected by the camera, the hope is that motorists will reduce their speed on the road.

Though touted as a way to deter speeding motorists, a network of automated cameras invites privacy concerns. The Bill attempts to address these concerns, in large part, by assuring that the photographs and other metadata …

Workplace Monitoring Platforms Are Sharing Your Data: An Investigation & Roadmap To Address Data Abuses, Stephanie T. Nguyen, Levi Kaplan, David Choffnes, Alan Mislove, Seth Frotman, Erie Meyer

Center for Law and the Economy

This report investigates the data collection practices of nine widely used workplace monitoring platforms to determine the extent to which they track and analyze employee activity, behavior, or performance during work, including how these platforms transmit worker information and to which third-parties. This report finds that (1) nine out of nine workplace monitoring platforms studied directly shared identifying worker data to third parties, (2) nine out of nine workplace monitoring platforms studied shared information about workers’ online activities with third parties, and (3) three out of nine workplace monitoring platforms studied utilize features to track workers’ precise location. This report …

The Constitutional Penumbras Of Home Rights, Gerald S. Dickinson

William & Mary Bill of Rights Journal

Justice William Douglas’s famous parable in Griswold v. Connecticut argued that the Bill of Rights contains penumbras—implied zones of privacy protections— that emanate from the First, Third, Fourth, and Fifth Amendments. His penumbral conception of privacy rights has sparked extensive debate among legal scholars, reflecting both its influence and its ongoing controversy. Yet, there is more to Justice Douglas’s penumbra story to explore. In expounding on his privacy innovations in Griswold, Justice Douglas explained that the Fourth and Fifth Amendments protect against all governmental invasions of the sanctity of a man’s home and the privacies of life. Indeed, the …

Confidentiality Of Ai Conversations: Protecting Self-Represented Litigants Who Use Chatgpt For Legal Advice, Anoo D. Vyas

Duke Law & Technology Review

When a layperson uses ChatGPT to obtain feedback on a legal matter, attorney-client privilege may not apply, as ChatGPT is not a lawyer, much less a human. Further, while lawyers are entitled to protection for their opinion work-product, it is not clear whether self-represented litigants are entitled to the same protection. Additionally, the broader duty of confidentiality binds only attorneys, not AI systems like ChatGPT. The public increasingly uses AI tools such as ChatGPT. If a layperson employs ChatGPT for legal advice, particularly in a civil matter, such communications may be discoverable and potentially admissible. This presents an access to …

Rethinking Objectivity: The Problem Of Pretext In The Fourth Amendment, Monu S. Bedi

Indiana Law Journal

Pretextual encounters continue to erode the legitimacy of the Supreme Court’s Fourth Amendment jurisprudence. Simply put, a police officer can act on personal bias or animus as long as the search or seizure is deemed “objectively reasonable.” Numerous scholars (e.g., Bennett Capers, Gabriel Chin, and David Harris) have critiqued this objective standard, contending it perpetuates discriminatory practices, particularly against communities of color. The late Justice Ruth Bader Ginsburg herself suggested that the Court might need to reconsider the legal precedent she helped establish. More recently, Orin Kerr has also argued that the Court’s reliance on objective determinations is inconsistent with …

Systemically Valuable Transaction Costs, Mitchell C. Johnston

Indiana Law Journal

Ronald Coase’s famous theorem tells us that in a world without transaction costs, legal entitlements would be distributed efficiently. It is often treated as a corollary of the Coase Theorem that reductions in transaction costs generate increases in welfare as barriers to efficiency-increasing transactions fall. To be sure, not all voluntary transactions are efficiency increasing (for example, some transactions create negative externalities). In such cases, scholars have noted that transaction costs may inhibit socially inefficient transactions. But the situation is more complex. Drawing on ideas from systems theory, this Article advances a more complete theory of when transaction costs support …

On Predicting And Stopping Dystopia, Evan Selinger, Woodrow Hartzog

Faculty Scholarship

Is it reasonable to be dystopian about how the future will likely unfold? We think so. For some time, we have been arguing that facial recognition technology is a perfect tool of oppression, and that its pernicious affordances are leading society down a slippery slope toward the evisceration of privacy by obscurity. This is a soft form of “determinism”—the notion that while technology is not an unstoppable force and the future is not preordained, there nevertheless are identifiable factors, such as the invitingness of affordances, human nature, and incentives that drive technology in certain directions and make some social outcomes …

The Evidence Machine: Rethinking Admissibility And Privacy In India's Ai Surveillance State, Samyukta Ramaswamy

Indian Journal of Law and Technology

The proliferation of artificial intelligence (‘AI’) surveillance technologies that utilise machine learning (‘ML’) capabilities to gather and process information to derive insights about individuals has transformed the surveillance landscape by enabling governments and private entities to engage in increasingly pervasive monitoring and data-driven profiling. In India, this transformation is compounded by the presence of executive-controlled surveillance mechanisms under the legal framework of the Telecommunications Act 2023, the Telecommunications (Procedures and Safeguards for Lawful Interception of Messages) Rules 2024, and the Digital Personal Data Protection Act 2023, amongst others, which authorises wide-ranging data interception and dragnet surveillance while exempting government agencies …

Lunch Shaming And The Right To Privacy, Ira P. Robbins

Scholarly Articles in Law Reviews & Journals

Lunch shaming is the practice of penalizing students who cannot afford to pay for their meals, resulting in them being denied food, served alternative meals, or publicly identified. The origins of lunch shaming can be traced to the financial pressures faced by school districts that struggle to balance tight budgets with the mandate to provide free or reduced-price meals to eligible students. Despite legislative efforts and advocacy campaigns aimed at mitigating the problems associated with lunch shaming, the practice persists, exacerbated by rising food costs and the expiration of pandemic-era food programs.

Many law journal and other articles have correctly …

Obituary For The Birth Certificate, Malinda L. Seymore

Faculty Scholarship

Have birth certificates outlived their usefulness? Birth certificates establish an individual’s name, identity, age, race, sex and gender, parental authority, and citizenship. In addition, the information collected at the time of birth and reflected on a long-form birth certificate provides data for public health policy, population statistics, internal migration, government planning, and resource allocation. Birth certificates are also the all-access pass to American life, necessary for many functions of modern life: registering a child in school, signing a child up for soccer, getting a driver’s license and passport, enlisting in the military, and applying for government benefits. All of this, …

Information Law Pluralism, Hannah Bloch-Wehba

Faculty Scholarship

Information-intensive activities are reshaping political, social, and economic institutions. As they respond to these shifts, legislators and regulators are embracing information as a regulatory device for tech. Far from limiting themselves to public disclosure, consumer notice, and other traditional mechanisms of fostering transparency and information flows, however, legislators are using other, more nuanced tools to incentivize regulated entities to obtain, generate, and share information.

This Article maps the landscape of the emerging information-based regimes for regulating tech and assesses their conceptual and practical implications. It canvasses an extensive set of recently enacted laws regulating the information economy and shows that, …

The Stored Communications Act At 40: Re-Examining Ecs And Rcs In The Age Of Ai, Shanzay Pervaiz

Joint PIJIP/TLS Research Paper Series

Shanzay Pervaiz, Senior Legal Researcher, examines the Stored Communications Act (SCA) almost forty years after its enactment, focusing on how its core definitions of “electronic communication service” (ECS) and “remote computing service” (RCS) play a central role in regulating domestic and global government access to data. The definitions still shape key U.S. authorities such as FISA Section 702, the CLOUD Act, and international instruments governing law enforcement access to data, including the Budapest Convention and the United Nations Convention on Cybercrime. The paper also looks at the legislative history of the SCA, how U.S. courts define ECS and RCS, and …

Richmond Electronic Monitoring: The City Sees You While You're Sleeping, Fakira D. Johnson

Law Student Publications

The United States has increasingly recognized its reputation as a prison state, with widespread acknowledgment of its high incarceration rates. As of 2021, the United States imprisoned one out of every five prisoners in the world. Additionally, of its own population, the United States imprisoned one out of every one hundred people.

In response to this notoriety, worsening prison overcrowding, and the heightened risks posed by the COVID-19 pandemic, all fifty states, the District of Columbia, and the federal government increased their utilization of alternative measures to traditional incarceration. As both an addition and an alternative to traditional incarceration, criminal …

Democratizing Health Data: A Legal Framework For Privacy-Preserving, Government-Led Ai Collaboration, Nicole Nigri

Cybaris®

No abstract provided.

Defamation, Privacy, And The First Amendment: Cases & Problems (3rd Ed.), George Biashvili

Books

I created this resource in anticipation of teaching my Torts II class, which will primarily explore defamation and privacy torts. Though I searched for a suitable coursebook, I found that none contained all of the opinions I consider essential for teaching the nuances and complexities of these subjects. Additionally, I wanted to spare my students the exorbitant price tags associated with traditional law school texts. Hence, I assembled a collection of relevant privacy and defamation cases that align with the objectives of my course. Each case is accompanied by a set of questions to further stimulate class discussion. Where I …

People V. Riche, Timothy Mccormick

NYLS Law Review

No abstract provided.

Data Rights For Workers, Pauline Kim, Rachel Leavitt

Scholarship@WashULaw

Workers are subject to immense amounts of data collection on the job, and the algorithmic management tools built with that data can produce negative effects, including deskilling jobs, unstable work hours, reduced wages, and dangerous and degrading working conditions. Workers thus have significant interests how their data are collected and used, and yet they have been excluded from nearly all the recently enacted or proposed data protection laws. Their exclusion stems from data protection’s roots in privacy law and theory, which primarily focused on consumers as data subjects. Current data protection laws, even if expanded to cover workers, would provide …

Against Ai Half Measures, Woodrow Hartzog, Neil Richards, Ryan Durrie, Jordan Francis

Faculty Scholarship

So far, U.S. consumer protection policy for artificial intelligence (AI) accountability has largely consisted of industry-led approaches such as encouraging transparency, mitigating bias, promoting principles of ethics, and empowering people. These approaches are vital, but they are only half measures. To bring AI within the rule of law, lawmakers must start drawing substantive lines.

In this Article, we identify four AI regulatory approaches to consumer, data, and democratic harms as half measures. First, transparency does not produce accountability on its own. Second, while mitigating bias in AI systems is critical, even unbiased systems are a threat to the vulnerable. Third, …

The Hypocrisy Of Data Governance, Zubair Shafiq, Olivia Figueira, Athina Markopoulou, Woodrow Hartzog, Michael Lavine

Faculty Scholarship

“Data governance” is an empty term, like a Rorschach inkblot just waiting to be filled with meaning. Tech companies take advantage of this ambiguity to craft narratives about their data-governance capabilities to fit their audience and purpose. On one hand, tech companies brag about their data-governance capabilities when it fits their business model (for example, to advertisers) and public image (for example, to their customers). On the other hand, tech companies claim that meaningful data governance is challenging or impossible when accountability is demanded.

In this Article, we argue that tech companies systematically misrepresent or selectively ignore their data-governance capabilities. …

Privacy’S Autonomy Thicket: Disentangling Choice, Consent And Control, Jordan Francis, Woodrow Hartzog, Neil Richards

Faculty Scholarship

When it comes to talking about autonomy, privacy law could use a little clarity. Its discourse uses terms like “choice,” “consent,” and “control” to evoke autonomy, but these terms are too rarely defined and too often used interchangeably, even though they can mean very different things. The three terms have become entangled in a way that has become confusing and counterproductive. We call this problem “privacy’s autonomy thicket,” and it matters because it encourages talking past each other in policy debates, enabling the redefinition of these terms in misleading ways that produce weak and disempowering “notice and choice” regimes.

In …

Corporate Law's Duty Of Data Loyalty, Andy Serwin, Neil Richards, Woodrow Hartzog, Ryan Durrie

Faculty Scholarship

Privacy law used to be a relatively tidy field, involving a few interesting but discrete topics like press disclosures of private facts, wiretapping, and the processing of personal data by internet companies. But as the digital revolution continues to disrupt area after area of human activity and software “is eating the world,” the core concerns of privacy law such as “when is it appropriate to process personal data?” have similarly entered field after field. Today, most fields of law, including discrimination law, antitrust, and international law, have found it necessary to reckon with the questions of informational harm and power …

School And District Leaders’ Understanding Of Technology Organizations’ Cyber Business Practices, Jayejaye Johnson

Journal of Educational Research and Practice

Educational technology (EdTech) interoperability throughout cyberspace provides the financial opportunity to collect and sell student privacy information in digital learning environments, challenging school leaders to govern schools and keep children safe. School leaders provide the resources, funding, planning, decision making, and administration for EdTech cybersecurity practices and policies, yet little is known about what public school leaders understand. A quantitative study was designed using primary data collected from an online survey. Four research questions guided this study: What are the differences in cybersecurity practices and policy response scores (1) between male and female school leaders; (2) among leaders with different …

Dignity And Deepfakes, Michael Goodyear

Articles & Chapters

Today, we face a dangerous technosocial combination: AI-generated deepfakes and the Internet. Believable and accessible, these deepfakes have already spread sex, lies, and false advertisements across the Internet and targeted everyone from Taylor Swift to middle school students. Dissemination of deepfakes inflicts multifarious dignitary harms against their victims—especially women and LGBTQ+ persons—stripping them of control over their own identities, harming their reputations, and ostracizing them from society through shame.

Yet this is not the first time a new technology for capturing one’s likeness and a method for disseminating images threatened individuals’ dignity. In the late nineteenth century, the right of …

Law Enforcement, Reproductive Health Information, And The Hipaa Privacy Rule, Stacey A. Tovino

Faculty Articles

On April 26, 2024, the federal Department of Health and Human Services (HHS) promulgated a final rule (Final Rule) amending the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. The Final Rule prohibits HIPAA covered entities and business associates from using and disclosing protected health information (PHI) to conduct criminal, civil, or administrative investigations into an individual for the mere act of seeking, obtaining, providing, or facilitating lawful reproductive health care. The Final Rule also prohibits HIPAA covered entities and business associates from using and disclosing PHI to impose criminal, civil, and administrative liability on any individual, or to …

Are You The Sum Of Your Data? Appropriation Of Digital Persona As Appropriation Of Likeness, Lyrissa Barnett Lidsky

UF Law Faculty Publications

A review of Zahra Takhshid's article, Data as Likeness, 112 Geo. L. J. 1161 (2024).

Ninth Amendment Neurorights, Joseph A. Tomain

Indiana Law Journal

Neurotechnology developments threaten two fundamental human rights: freedom of thought and mental privacy. For example, neuroscientists use brain scans to decode unspoken thoughts and to predict political ideology and sexual orientation. Additionally, they have successfully implanted false memories in the minds of mice. There are undoubtedly beneficial uses of this dual-use technology, such as identifying and treating a variety of medical conditions. But left unchecked, neurotechnology will be exploited by public and private actors alike. There is a growing and contested literature about how the law should respond to the increasing risks of neurotechnology. This Essay contributes to that literature …

Facial Recognition Ai, Margaret Hu

Faculty Publications

The integration of algorithmic decisionmaking and artificial intelligence (“AI”) into facial recognition technology poses new, unprecedented risks to privacy and individual autonomy rights, particularly in urban settings. The murder of Brian Thompson, CEO of UnitedHealthcare, in New York City on December 4, 2024, provides a timely case study to examine the deployment of facial recognition systems by the New York Police Department and other law enforcement agencies to identify the suspect. New York City deploys some of the most sophisticated surveillance architecture in the nation, put into place following the terrorist attacks of September 11, 2001. This Article explores the …

Facial Recognition Technology: The Case For Comprehensive Federal Oversight, Christopher Hart

Journal of the National Association of Administrative Law Judiciary

This article will argue that regulations for government agency use of FRT should be stringent and limit the exploitation of personal biodata in the private sector. Instead of creating a new agency, Congress could expand an existing agency’s responsibility by granting it regulatory power over facial recognition technology. First, this article will seek to delineate the contours of facial recognition technology and its contemporary application within the United States. Then, this article will analyze the intricacies of FRT in both the public and private sectors. Within the public domain, specific attention will be devoted to discussing the use of FRT …

The Increasing Prevalence Of Cyber Operations And The Inadequacy Of International Law To Address Them, Gabriel Smedes

Global Tides

This paper is a synthesis research article analyzing the legality of cyber operations within the international legal sphere. It works to define cyber operations and differentiate them from similar identifiers. The study looks to existing contributions to international law and explores how some existing some existing regulation is challenging to apply and it is difficult to implement new legislation. Highlighting the importance of legislation and regulations on cyber operations due to their increasing prevalence and danger.

Standardizing Space Technologies As Admissible Evidence: Legal And Ethical Frameworks For U.S. Courts And The International Criminal Court, Tuana Yazici

University of Miami International and Comparative Law Review

This paper explores the increasing role of satellite and other space technologies — such as optical satellite imagery, radar, and artificial intelligence (AI) — in legal proceedings both in the U.S. and internationally. It examines relevant Supreme Court and appellate cases, as well as key international rulings, to assess how courts are addressing the legal challenges posed by surveillance technologies. These cases reveal the tension between advancing technology and existing privacy protections, highlighting the need for updated legal frameworks. The analysis also covers federal laws, including the Electronic Communications Privacy Act, alongside proposed legislation like the American Privacy Rights Act …