Privacy Law Commons^™

Regulating Algorithmic Harms, Sylvia Lu

Law & Economics Working Papers

In recent years, the rapid expansion of artificial intelligence (AI) innovations has led to a rise in algorithmic harms—harms emerging from AI operations that pose significant threats to civil rights and democratic values in today’s technological landscape. A facial recognition system for improving criminal detection wrongly collected sensitive personal data and flagged racial minorities as shoplifters. A risk-prediction algorithm adopted to identify patients denied medical treatment to Black individuals with poor health conditions. A social media algorithm intended to boost social engagement exacerbated addictive behavior and mental illness in teenagers. These harms are becoming increasingly ubiquitous yet often manifest in …

Aligned With The Blueprint For An Ai Bill Of Rights? An Ai Transparency Evaluation Of Company Privacy Notices And Explanations, Jonathan A. Obar, Giuseppina D'Agostino, Motunrayo Akinyemi

Conference Papers

In its Blueprint for an AI Bill of Rights, the White House lists “notice and explanation” as one of five principles fundamental to protecting the American public as artificial intelligence (AI) is deployed. The Blueprint states “[y]ou should know that an automated system is being used and understand how and why it contributes to outcomes that impact you.” In its description of the notice/explanation principle, The White House emphasizes the importance of plain language explanations about AI use. Furthermore, a company should describe how it plans to use AI systems, how the systems work, and explain any risks to consumers. …

An Analysis Of United States V. Morta: Refining The Application Of The Other-Indicia Approach To Criminal-Alias Mail, Nicholas Manning

Pepperdine Law Review

Americans who use their legal names to send and receive mail through traditional postal services have long maintained a reasonable expectation of privacy in that mail under the Fourth Amendment. Courts have also recognized that even those who use aliases with traditional postal services have a reasonable expectation of privacy in their mail. But circuit courts have split over whether Americans who use aliases in mail purely for criminal purposes—such as sending or receiving drugs—should have that same expectation of privacy. More specifically, courts disagree over the correct approach to analyze a defendant’s criminal-alias mail for purposes of Fourth Amendment …

Drug Clinical Trials Legislation In The European Union, Paola Sangiovanni, Flavio Monfrini, Marco Bertucci

Indian Journal of Law and Technology

The purpose of this article is to illustrate the basic tenets of European Union law on clinical trials. Such body of law has been progressively harmonized in the European Union over the years with the aim of subjecting interventional clinical trials conducted in any of the 27 European Union Member States to identical rules.

The article initially describes the reasons why clinical trials are important to measure the safety, efficacy and cost-effectiveness of innovative medical treatment. It then continues by illustrating the scope and basic principles of the current EU Regulation, as well as its main changes over the previous …

Protecting Privacy In India: The Roles Of Consent And Fairness In Data Protection, Mark J. Taylor, Jeannie Marie Paterson

Indian Journal of Law and Technology

The Indian Personal Data Protection Bill 2019 provides a unique approach to balancing the elements of individual consent and fairness-based limitations that are used in data protection regimes in other parts of the world. Drawing on the fundamental values and interests recognised in KS Puttaswamy v. Union of India (2017) and the report of the Committee of Experts, the Bill requires consent of the data subject to data processing, and puts in place standards that consent must meet to be more than a forced formality. Its novelty lies in also proposing substantive obligations of fair and reasonable data processing, and …

Facing Up To The Risks Of Automated Facial-Recognition Technologies In Indian Law Enforcement, Ameen Jauhar

Indian Journal of Law and Technology

Within the larger discourse of risk mitigation of emerging technologies, the ever-expanding deployment of automated facial recognition technology (‘AFRT’) has garnered much skepticism. In India too, there has been a reported rise of states and law enforcement officials enthusiastically resorting to the use of AFRT.

The author will first delve into some of the controversial risks associated with AFRT, analysing them through the lens of Article 21 and the principle of due process under the Indian Constitution. The paper will then identify some of the regulatory solutions that are currently part of the discourse on minimising risks of AFRT and …

Taxation Of Information And The Data Revolution, Yariv Brauner

UF Law Faculty Publications

Existing and universal income tax rules are inherently incompatible with an economy in which information-based transactions play a significant role. This Article contends that income taxation is incapable of taxing information effectively. It goes on to argue that this incapability currently necessitates reform, and it offers three viable paths to such reform: consumption taxation, data taxes, and formulary taxation. The Article concludes that formulary taxation is currently the most desirable and plausible path to effective reform, owing to its promise to best stabilize and maintain the legitimacy of the international tax regime.

Dude, Where’S My Data? A Legislative Band-Aid For Data Brokers’ Bullet Hole In Consumer Privacy Protection, Emily Bushman

Catholic University Law Review

The development and proliferation of the Internet, GPS, cell phones, social media, and the associated data that support these now ubiquitous technologies have created a new ecosystem of information making up a person’s digital identity. Our digital footprints have traditionally been subject to different levels of privacy protection depending upon the kind of data at issue. Over time, court decisions have revealed tensions and a lack of consistency on the question of how the protections guaranteed by the Fourth Amendment apply to an individual’s digital footprint and their reasonable expectations of privacy over it. This Comment will examine the gaps …

The Broader Lessons Of Privacy Law, Salome Viljoen

Articles

This Article explores the trend of privacy—and what kind of techno-social or legal effect ought to count as a “privacy harm”—expanding to encompass a growing set of social factors. This big-tent approach to privacy has several virtues. However, it also comes with a few costs. While others have explored the conceptual and doctrinal tradeoffs that an expansive approach to privacy may entail, this Article focuses on a secondary effect the trend toward expansiveness has had on the relationship between privacy scholarship and legal scholarship more broadly. This Article suggests that the internal expansiveness of privacy means that insights developed within …

Privacy’S Commodification And The Limits Of Antitrust, Jeffrey L. Vagle

Arkansas Law Review

This Article argues that the buying and selling of personal data forms what Debra Satz calls a “noxious market,” and, thus, any regulation of information privacy should not accept or depend upon its commodification but should stand on its own. This Article proceeds in three parts. Part I first lays out the history and effects of data commodification, arguing that the market created by this commodification is noxious and undesirable. Part II examines the renewal of antitrust’s purpose as a regulatory tool, especially in the context of its use in the regulation of large technology firms. Finally, Part III argues …

Implementing Information Fiduciaries, Samuel E. Marticke

Georgia State University Law Review

This Note discusses the information fiduciary model, proposed by Jack Balkin, where fiduciary duties would be imposed on data collectors and analyzes how such a model could come to pass in the United States.

“Can I Have It Non-Personalised?” An Empirical Investigation Of Consumer Willingness To Share Data For Personalized Services And Ads, Monika Leszczynska, Daria Baltag

Faculty Scholarship

European regulators, courts, and scholars are currently debating the legality of data processing for personalization purposes. Should businesses require separate consent for processing user data for personalized advertising, especially when offering free services reliant on such ads for revenue? Or is general consent for the contract enough, given personalized advertising’s role in fulfilling contractual obligations? This study investigates whether these legal distinctions reflect differences in people’s willingness to share data with businesses for personalization. Are consumers less willing to share their data for personalized advertising than for personalized services that they clearly contracted for? Does that change if the service …

The Post-Dobbs Reality: Privacy Expectations For Period-Tracking Apps In Criminal Abortion Prosecutions, Sophie L. Nelson

Pepperdine Law Review

The Supreme Court’s decision to overturn Roe v. Wade and Planned Parenthood v. Casey in June 2022 was met with waves of both support and criticism throughout the United States. Several states immediately implemented or began drafting trigger laws that criminalize seeking and providing an abortion. These laws prompted several period-tracking app companies to encrypt their users’ data to make it more difficult for the government to access period- and pregnancy-related information for criminal investigations. This Comment explores whether the Fourth Amendment and U.S. privacy statutes protect users of period-tracking apps from government surveillance. More specifically, this Comment argues that …

Content Moderation And The Least Cost Avoider, Paul Rosenzweig

Joint PIJIP/TLS Research Paper Series

No abstract provided.

Children Seen But Not Heard, Stacey B. Steinberg

UF Law Faculty Publications

Children are expected to abide by the will of their parents. In the last 200 years, American jurisprudence has given parents the ability to control their children’s upbringing with few exceptions. The principle governing this norm is that parents know best and will use their better knowledge to protect their children’s welfare.

The COVID-19 pandemic, public school rules, and children’s privacy laws offer modern examples of regulations in which the interests of parents and children may not align. Minors may want access to vaccines, despite a parent’s refusal to sign a consent form. Minors may want to talk to their …

On The Human Right To Healthy Menstruation, Bridget J. Crawford

Elisabeth Haub School of Law Faculty Publications

This short essay introduces the Bellagio Declaration on the Human Right to Healthy Menstruation, a statement signed by an interdisciplinary group of academics, artists, policymakers, clinicians, and practitioners in 2024. The Declaration frames the human right to healthy menstruation as including (1) non-discrimination on the basis of menstruation; (2) dignity in all matters related to menstruation; (3) access to facilities, resources, and supplies that facilitate the management of menstruation in a manner that is affordable and safe and that fosters a clean, healthy, and sustainable environment; (4) lifelong access to timely and medically accurate information about all aspects of menstruation; …

Personal Data And Vaccination Hesitancy: Covid-19’S Lessons For Public Health Federalism, Charles D. Curran

Catholic University Law Review

During the COVID-19 vaccination campaign, the federal government adopted a more centralized approach to the collection of public health data. Although the states previously had controlled the storage of vaccination information, the federal government’s Operation Warp Speed plan required the reporting of recipients’ personal information on the grounds that it was needed to monitor the safety of novel vaccines and ensure correct administration of their multi-dose regimens.

Over the course of the pandemic response, this more centralized federal approach to data collection added a new dimension to pre-existing vaccination hesitancy. Requirements that recipients furnish individual information deterred vaccination among undocumented …

Speaking Back To Sexual Privacy Invasions, Brenda Dvoskin

Washington Law Review

Many big players in the internet ecosystem do not like hosting sexual expression. They often justify these bans as a protection of sexual privacy. For example, Meta states that it removes sexual imagery to prevent the nonconsensual distribution of sexual images. In response, this Article argues that banning digital sexual expression is counterproductive if the aim is to alleviate the harms inflicted by sexual privacy losses.

Contemporary sexual privacy theory, however, lacks analytical tools to explain why nudity bans harm the interests they intend to protect. This Article aims at building those tools. The main contribution is an invitation to …

Filtered Dragnets And The Anti-Authoritarian Fourth Amendment, Jane R. Bambauer

UF Law Faculty Publications

Filtered dragnets are digital searches that identify a suspect based on the details of a crime. They can be designed to withhold information from law enforcement unless and until there is a very high probability that the individual has committed the offense. Examples today include DNA matching, facial recognition from photographs or video of a crime, automated child sexual abuse material detection, and reverse geolocation (geofence) searches. More are sure to come, and their wide-scale use will be irresistible to improve the low rates of criminal detection that currently afflict many communities.

However, filtered dragnets imperil society precisely because they …

Distinguishing Privacy Law: A Critique Of Privacy As Social Taxonomy, María P. Angel, Ryan Calo

Articles

What distinguishes privacy violations from other harms? This has proven a surprisingly difficult question to answer. For over a century, privacy law scholars labored to define the elusive concept of privacy. Then they gave up. Efforts to distinguish privacy were superseded at the turn of the millennium by a new approach: a taxonomy of privacy problems grounded in social recognition. Privacy law became the field that simply studies whatever courts or scholars talk about as related to privacy.

Decades into privacy as social taxonomy, the field has expanded to encompass a broad range of information-based harms—from consumer manipulation to algorithmic …

Redefining The Injury-In-Fact: Treating Personally Identifying Information As Bailed Property, Austin Headrick

Georgia Law Review

There is a long-existing circuit split among federal courts of appeals as to whether an individual has standing under Article III of the United States Constitution when their personally identifying information (PII) is stolen from an entity to which they entrusted it such as a hospital or bank. Federal courts disagree as to whether an individual whose PII has been stolen—without more—has suffered an injury-in-fact, a necessary element of standing. The disagreement between the courts centers on whether the injury-in-fact has already occurred at the time the PII is stolen or whether the injury occurs once the PII has been …

Wearable Ai, Bystander Notice, And The Question Of Privacy Frictions, Zahra Takhshid

Sturm College of Law: Faculty Scholarship

With the rapid advancement of Artificial Intelligence (“AI”) technology and the widespread availability of large language models (“LLMs”), wearable AI devices and designs for new hardware have surged like never before. While wearable AI was traditionally marketed for health and fitness purposes, many of the emerging products are multifunctional. These features can jeopardize the privacy of bystanders in addition to the consumers. Product designers are thus facing a dilemma: ensuring third-party privacy or guaranteeing convenience and a user-friendly design. This Article argues for mandating “privacy frictions” to function as both bystander notice and consent for wearable AI devices with audiovisual …

The Automated Fourth Amendment, Maneka Sinha

Faculty Scholarship

Courts routinely defer to police officer judgments in reasonable suspicion and probable cause determinations. Increasingly, though, police officers outsource these threshold judgments to new forms of technology that purport to predict and detect crime and identify those responsible. These policing technologies automate core police determinations about whether crime is occurring and who is responsible. Criminal procedure doctrine has failed to insist on some level of scrutiny of—or skepticism about—the reliability of this technology. Through an original study analyzing numerous state and federal court opinions, this Article exposes the implications of law enforcement’s reliance on these practices given the weighty interests …

Crowdsourcing Surveillance, Chaz Arnett

Faculty Scholarship

In Unreasonable: Black Lives, Police Power, and the Fourth Amendment, Devon W. Carbado illuminates how both the spectacular and quotidian forms of racialized terror, brutality, and surveillance—characteristic of enslavement—have shaped the construction of our constitutional order. He argues that the combined social normalization and legal naturalization of racial hierarchy paved the way for the development of slave patrols and other early iterations of policing where incredible acts of violence against Black bodies were made ordinary and essential. He explains how this legacy continues today with Fourth Amendment jurisprudence not simply failing to protect rights but rather licensing police violence …

Eavesdropping: The Forgotten Public Nuisance In The Age Of Alexa, Julia Keller

Vanderbilt Law Review

Always-listening devices have sparked new concerns about privacy while evading regulation, but a potential solution has existed for hundreds of years: public nuisance.

Public nuisance has been stretched to serve as a basis of liability for some of the most prominent cases of modern mass-tort litigation, such as suits against opioid and tobacco manufacturers for creating products that endanger public health. While targeting conduct that arguably interferes with a right common to the public, this use of public nuisance extends far beyond the original understanding of the doctrine. Public nuisance has not been applied, however, to another prominent contemporary issue: …

Don't Call It 'Privacy': Data Protection, From Ideas To Constitutional Law, Raphaël Beauregard-Lacroix

SJD Dissertations

Data protection law has been subject to various criticisms, among which is one of a fundamental kind: devoted to procedures, it lost sight of its privacy-bound origins. This dissertation aims to provide a novel historical and comparative account of the transatlantic development of data protection law, from the origins to this day, identifying how it may yet succeed in reaching the policy goals its original proponents imagined, and untangling key legal concepts along the way.

The regulatory concept of data protection was founded on three basic principles: purpose limitation, universality, and institutional supervision and enforcement. These three principles trace their …

Valuing Social Data, Amanda Parsons, Salome Viljoen

Publications

Social data production—accumulating, processing, and using large volumes of data about people—is a unique form of value creation that characterizes the digital economy. Social data production also presents critical challenges for the legal regimes that encounter it. This Article provides scholars and policymakers with the tools to comprehend this new form of value creation through two descriptive contributions. First, it presents a theoretical account of social data, a mode of production that is cultivated and exploited for two distinct (albeit related) forms of value: prediction value and exchange value. Second, it creates and defends a taxonomy of three “scripts” that …

A How-To Guide For When Your Favorite Meme Account Is Defamed: Involuntary Public Figures In Defamation, Privacy, And Intentional Infliction Of Emotional Distress Law, Elizabeth Mcmullen

Catholic University Journal of Law and Technology

The world we live in today has changed infinitely since the inception of our Constitution and early legal doctrine. Our Founding Fathers could never have predicted that we would one day live in a world where anyone living in any corner of the globe could garner millions of followers. Whether someone finds him or herself to be particularly proficient in writing Harry Potter fan fiction or to be the best creator of memes with an American Girl Doll focus, ordinary citizens could find themselves suddenly jolted out of quiet anonymity by one unexpectedly viral post. Despite years of Instagram micro-fame, …

Everybody Wants To Rule The World: Central Bank Digital Currencies In The Era Of Decoupling The World’S Two Largest Economies, James M. Cooper

Faculty Scholarship

Some 130 central banks around the world are experimenting with various levels of a central bank digital currency (“CBDC”), a digitized form of a sovereign-backed, national currency that is a liability of that country’s central bank. Unlike fiat currency, CBDCs are trackable and potentially subject to interference and even freezing by government authorities. CBDCs will affect citizens’ control over commerce, payments, and savings, and impact their privacy rights. The Chinese government has piloted, refined, and rolled out its own CBDC called the Digital Currency/Electronic Payment initiative (“DC/EP”), also known as the digital yuan or e-CNY. The Chinese government is far …

Beyond Neural Data: Cognitive Biometrics And Mental Privacy, Patrick Magee, Marcello Ienca, Nita Farahany

Faculty Scholarship

Innovations in wearable technology and artificial intelligence have enabled consumer devices to process and transmit data about human mental states (cognitive, affective, and conative) through what this paper refers to as ‘‘cognitive biometrics.’’ Devices such as brain-computer interfaces, extended reality headsets, and fitness wearables offer significant benefits in health, wellness, and entertainment through the collection and processing and cognitive biometric data. However, they also pose unique risks to mental privacy due to their ability to infer sensitive information about individuals. This paper challenges the current approach to protecting individuals through legal protections for ‘‘neural data’’ and advocates for a more …