Privacy Law Commons^™

The Structural Problem With Real-Time Crime Centers, Holly Merclich

Student Journal of Information Privacy Law

Since the terror attacks of September 11, 2001, the government has become fixated with public safety, oftentimes at the expense of individual privacy. The surveillance state expanded after this in the early 2000s, and the country’s first Real Time Crime Centers were born. Real Time Crime Centers are hubs where different technologies and information are fused and aggregated into one easy to use space. Data outputs from automated license plate readers, closed circuit television, and various law enforcement databases are aggregated into one single pane of glass view to achieve higher rates of case closures and increase the efficiency of …

The Fourth Amendment In Parallax: Why California's New Speed Cameras Should Prompt Increased Scrutiny For Surveillance Networks, Arman Sookiassian

Loyola of Los Angeles Law Review

With the passage of Assembly Bill 645 in 2023, California has authorized speed camera pilot programs in six cities throughout the state. The goal for this legislation is to reduce speeding and speed- related casualties through a network of automated traffic surveillance. By issuing civil fines for speeding violations detected by the camera, the hope is that motorists will reduce their speed on the road.

Though touted as a way to deter speeding motorists, a network of automated cameras invites privacy concerns. The Bill attempts to address these concerns, in large part, by assuring that the photographs and other metadata …

On The Right To Obscurity, Woodrow Hartzog, Evan Selinger

Faculty Scholarship

Tragically, U.S. privacy law has neglected to address a significant dimension of privacy. While lawmakers and judges have routinely recognized intrusions into our secluded spaces and breaches of our confidentiality and secrecy, they have largely failed to protect our most common yet also our most underappreciated form of privacy: the practical obscurity that allows us to live freely and with dignity. Obscurity, which is the state of protection that arises when personal information is difficult for some people to obtain or correctly interpret, serves several vital interests: (1) it safeguards our ability to express ourselves without fear that everything we …

The Evidence Machine: Rethinking Admissibility And Privacy In India's Ai Surveillance State, Samyukta Ramaswamy

Indian Journal of Law and Technology

The proliferation of artificial intelligence (‘AI’) surveillance technologies that utilise machine learning (‘ML’) capabilities to gather and process information to derive insights about individuals has transformed the surveillance landscape by enabling governments and private entities to engage in increasingly pervasive monitoring and data-driven profiling. In India, this transformation is compounded by the presence of executive-controlled surveillance mechanisms under the legal framework of the Telecommunications Act 2023, the Telecommunications (Procedures and Safeguards for Lawful Interception of Messages) Rules 2024, and the Digital Personal Data Protection Act 2023, amongst others, which authorises wide-ranging data interception and dragnet surveillance while exempting government agencies …

Richmond Electronic Monitoring: The City Sees You While You're Sleeping, Fakira D. Johnson

Law Student Publications

The United States has increasingly recognized its reputation as a prison state, with widespread acknowledgment of its high incarceration rates. As of 2021, the United States imprisoned one out of every five prisoners in the world. Additionally, of its own population, the United States imprisoned one out of every one hundred people.

In response to this notoriety, worsening prison overcrowding, and the heightened risks posed by the COVID-19 pandemic, all fifty states, the District of Columbia, and the federal government increased their utilization of alternative measures to traditional incarceration. As both an addition and an alternative to traditional incarceration, criminal …

Data Rights For Workers, Pauline Kim, Rachel Leavitt

Scholarship@WashULaw

Workers are subject to immense amounts of data collection on the job, and the algorithmic management tools built with that data can produce negative effects, including deskilling jobs, unstable work hours, reduced wages, and dangerous and degrading working conditions. Workers thus have significant interests how their data are collected and used, and yet they have been excluded from nearly all the recently enacted or proposed data protection laws. Their exclusion stems from data protection’s roots in privacy law and theory, which primarily focused on consumers as data subjects. Current data protection laws, even if expanded to cover workers, would provide …

Can Ai, As Such, Invade Your Privacy? An Experimental Study Of The Social Element Of Surveillance, Aileen Nielsen

Indiana Law Journal

The increasing use of AI rather than human surveillance puts pressure on two long-used cultural and (sometimes) legal distinctions: as between human and machine observers and as between content and metadata. Machines do more and more watching through advancing technology, rendering AI a plausible replacement for humans in surveillance tasks. Further, machines can commit to surveil only certain forms of information in a way that humans cannot, rendering the distinction between content and metadata increasingly relevant too for crafting privacy law and policy. Yet despite the increasing importance of these distinctions, their legal importance remains in four key domains of …

Facial Recognition Technology: The Case For Comprehensive Federal Oversight, Christopher Hart

Journal of the National Association of Administrative Law Judiciary

This article will argue that regulations for government agency use of FRT should be stringent and limit the exploitation of personal biodata in the private sector. Instead of creating a new agency, Congress could expand an existing agency’s responsibility by granting it regulatory power over facial recognition technology. First, this article will seek to delineate the contours of facial recognition technology and its contemporary application within the United States. Then, this article will analyze the intricacies of FRT in both the public and private sectors. Within the public domain, specific attention will be devoted to discussing the use of FRT …

The Warrant Exception That Isn't: Fisa Section 702, "Defensive" Searches, And The Fourth Amendment, Noah C. Chauvin

Faculty Articles

Section 702 of the Foreign Intelligence Surveillance Act allows the government to conduct warrantless electronic surveillance of non-Americans who are located overseas. Although the surveillance targets foreigners, Americans' communications are "incidentally" collected, too. Once the government has acquired Americans' communications, court-approved rules allow it to conduct warrantless searches for and through them in its Section 702 databases. Intelligence agencies have used these rules to turn this foreign intelligence program into a domestic spying tool, conducting tens of thousands of warrantless "backdoor" searches for Americans' private communications obtained under Section 702 every year.

Section 702 periodically sunsets; Congress most recently reauthorized …

The Evolution Of Surveillance And The Decline Of Privacy, Alan J. Geyer

Honors Undergraduate Theses

This study directly examines how surveillance law and technology have evolved in the United States and how privacy rights have declined correspondingly. The study specifically focuses on how advancements in surveillance technology have overstepped the boundaries of Fourth Amendment protections and analyzes whether these provisions are adequate for protecting citizens in the modern technological era. The study explores newly employed methods of technological surveillance, such as facial recognition, data collection, and automated license plate readers. It focuses on how government surveillance programs have reshaped legal and ethical understandings of privacy. The changes in surveillance and technology have been analyzed by …

“Digital Integrity”: Defending The Judicial Integrity In The Digital Age, Guy Alon, Doron Menashe, Guy Itzhak Sender

Touro Law Review

Recent revelations have shown that the protection of the Fourth Amendment in the digital age is inadequate. Despite well-known exclusionary rules regarding evidence obtained by illegal search and seizure, current trends in the digital age and the law of evidence resulted in courts that tend to include such evidence, and by doing so, create significant risk of both substantive and procedural errors and hence increase the potential for wrongful convictions. To address the matter and try to empower and modernize the protection given by the Fourth Amendment, this article suggests performing a revolution in the law of evidence in the …

Increasing Congressional Oversight Of Fisa Section 702 After Risaa, Noah C. Chauvin

Faculty Articles

In April of 2024, Congress passed the Reforming Intelligence and Securing America Act ("RISAA"). This bill reauthorized Section 702 of the Foreign Intelligence Surveillance Act ("FISA'), an important counterterrorism authority that was intended to make it easier for the government to spy on foreign terrorists but which has been repeatedly abused to spy on Americans. While RISAA enacted modest surveillance reforms, it also included substantial expansions of the government's spying powers. Moreover, it largely left intact the existing oversight regime for Section 702, which is deficient as a matter of law, policy, and fact.

This article assesses the extent to …

Normalizing Facial Recognition Technology And The End Of Obscurity, Woodrow Hartzog, Evan Selinger, Judy Hyojoo Rhee

Faculty Scholarship

This article argues that facial recognition technology is the most dangerous surveillance tool ever invented. Given the unique threats this morally suspect tool poses to privacy, civil liberties, human flourishing, and democracy, the only appropriate response is a ban. To justify our position, we explain why facial recognition is distinctive among biometrics, clarify how even seemingly benign and positive uses of the technology can trigger dangerous normalization dynamics, and pinpoint why current United States laws (with reverberations in the EU’s AI Act) are designed to accelerate a slippery slope that makes mass surveillance nearly inevitable. Our most fundamental contribution lies …

Unfenced: The Fourth Circuit Gives Geofencing Its First Appellate Go-Ahead In United States V. Chatrie, Jordan Wallace-Wolf

Washington and Lee Law Review Online

In United States v. Chatrie, the Fourth Circuit issued the first federal appellate opinion on the Fourth Amendment status of geofencing queries. The opinion is significant because geofences present a conceptual challenge to the framework of Carpenter v. United States, the reigning Supreme Court precedent on the Fourth Amendment status of digital searches. That opinion held that long-term tracking of a target individual was a search. However, geofencing reveals information about an indeterminate number of individuals for only a short time, in virtue of their being at a target location during a target span of time. Does the …

Fitting A Block Into A Sphere Mold: The Inadequacy Of Current Data Privacy Regulations In Protecting Data Privacy Within The Blockchain Space, Jenny Yang

Washington and Lee Journal of Civil Rights and Social Justice

Despite global imposition of data privacy laws and regulations, data privacy is a nonexistent luxury amongst the data-charged world we live in. Data privacy has long been established as a fundamental right. Entities have successfully established robust methodologies around existing data privacy laws and regulations to utilize past consumer behavior to predict, impact and manipulate current and future consumer behaviors. This phenomenon has been commonly coined as “corporate surveillance.” Emerging spaces arising through technological developments have greater access into consumer data to impact economic choices. Specifically, the blockchain space, through its unique open-source and permanent traits, has been able to …

Skirting The Fourth Amendment: How Law Enforcement Agencies Abuse Technology And Constitutional Exceptions To Surveille The Public, Matthew Lloyd

Washington and Lee Journal of Civil Rights and Social Justice

Existing Fourth Amendment law does not protect against law enforcement use of data gathered through the internet either by private companies who actively search their customer’s data and submit evidence of misconduct to law enforcement or from private companies who acquire the data on behalf of law enforcement. In an effort to pursue criminals, courts have permitted Fourth Amendment jurisprudence to develop in a manner that permits sweeping invasions of privacy without any probable cause through the private search doctrine or without any procedural protections through the third-party doctrine. It will require substantial judicial or legislative action to return the …

Filtered Dragnets And The Anti-Authoritarian Fourth Amendment, Jane R. Bambauer

UF Law Faculty Publications

Filtered dragnets are digital searches that identify a suspect based on the details of a crime. They can be designed to withhold information from law enforcement unless and until there is a very high probability that the individual has committed the offense. Examples today include DNA matching, facial recognition from photographs or video of a crime, automated child sexual abuse material detection, and reverse geolocation (geofence) searches. More are sure to come, and their wide-scale use will be irresistible to improve the low rates of criminal detection that currently afflict many communities.

However, filtered dragnets imperil society precisely because they …

Wearable Ai, Bystander Notice, And The Question Of Privacy Frictions, Zahra Takhshid

Sturm College of Law: Faculty Scholarship

With the rapid advancement of Artificial Intelligence (“AI”) technology and the widespread availability of large language models (“LLMs”), wearable AI devices and designs for new hardware have surged like never before. While wearable AI was traditionally marketed for health and fitness purposes, many of the emerging products are multifunctional. These features can jeopardize the privacy of bystanders in addition to the consumers. Product designers are thus facing a dilemma: ensuring third-party privacy or guaranteeing convenience and a user-friendly design. This Article argues for mandating “privacy frictions” to function as both bystander notice and consent for wearable AI devices with audiovisual …

Against Engagement, Neil M. Richards, Woodrow Hartzog

Scholarship@WashULaw

In this Article, we focus on a key dimension of commercial surveillance by data-intensive digital platforms that is too often treated as a supporting cast member instead of a star of the show: the concept of engagement. Engagement is, simply put, a measure of time, attention, and other interactions with a service. The economic logic of engagement is simple: more engagement equals more ads watched equals more revenue. Engagement is a lucrative digital business model, but it is problematic in several ways that lurk beneath the happy sloganeering of a “free” internet.

Our goal in this Article is to isolate …

Privacy Nicks: How The Law Normalizes Surveillance, Woodrow N. Hartzog, Evan Selinger, Johanna Gunawan

Faculty Scholarship

Privacy law is failing to protect individuals from being watched and exposed, despite stronger surveillance and data protection rules. The problem is that our rules look to social norms to set thresholds for privacy violations, but people can get used to being observed. In this article, we argue that by ignoring de minimis privacy encroachments, the law is complicit in normalizing surveillance. Privacy law helps acclimate people to being watched by ignoring smaller, more frequent, and more mundane privacy diminutions. We call these reductions “privacy nicks,” like the proverbial “thousand cuts” that lead to death.
/="/">
/="/">Privacy nicks come …

Against Engagement, Neil Richards, Woodrow Hartzog

Faculty Scholarship

In this Article, we focus on a key dimension of commercial surveillance by data-intensive digital platforms that is too often treated as a supporting cast member instead of a star of the show: the concept of engagement. Engagement is, simply put, a measure of time, attention, and other interactions with a service. The economic logic of engagement is simple: more engagement equals more ads watched equals more revenue. Engagement is a lucrative digital business model, but it is problematic in several ways that lurk beneath the happy sloganeering of a “free” internet

Our goal in this Article is to isolate …

Expecting Medication Surveillance, Jennifer D. Oliva

Articles by Maurer Faculty

In response to federal financial incentives and mandates, all fifty states, the District of Columbia, and three U.S. territories administer electronic prescription drug monitoring programs (PDMPs). Federal and state policymakers justified the implementation and enhancement of ubiquitous prescription drug monitoring by contending that expansive state drug surveillance was a necessary weapon in the war against the American drug overdose crisis. As is often the case with tools designed for law enforcement surveillance, however, PDMPs have proven susceptible to mission creep. Although pioneer PDMPs were paper-based systems that limited their surveillance to a narrow class of heavily regulated controlled substances, modern …

A Miscarriage Of Justice: How Femtech Apps And Fog Data Evade Fourth Amendment Privacy Protections, Rachel Silver

Washington and Lee Journal of Civil Rights and Social Justice

After the fall of Roe v. Wade, states across the country have enacted extreme abortion bans. Anti-abortion states, emboldened by their new, unrestricted power to regulate women’s bodies, are only broadening the scope of abortion prosecutions. And modern technology provides law enforcement with unprecedented access to women’s most intimate information, including, for example, their menstrual cycle, weight, body temperature, sexual activity, mood, medications, and pregnancy details. Fourth Amendment law fails to protect this sensitive information stored on femtech apps from government searches. In a largely unregulated private market, femtech apps sell health and location data to third parties like Fog …

Administrative Regulation Of Programmatic Policing: Why "Leaders Of A Beautiful Struggle" Is Both Right And Wrong, Christopher Slobogin

Vanderbilt Law School Faculty Publications

In Leaders of a Beautiful Struggle v. Baltimore Police Department, the Fourth Circuit Court of Appeals held that Aerial Investigation Research (AIR), Baltimore's aerial surveillance program, violated the Fourth Amendment because it was not authorized by a warrant. AIR was constitutionaly problematic, but not for the reason given by the Fourth Circuit. AIR, like many other technologically-enhanced policing programs that rely on closed-circuit television (CCTV), automated license plate readers and the like, involves the collection and retention of information about huge numbers ofpeople. Because individualized suspicion does not exist with respect to any of these people's information, an individual-specific warrant …

Femtechnodystopia, Leah R. Fowler, Michael Ulrich

Faculty Scholarship

Reproductive rights, as we have long understood them, are dead. But at the same time history seems to be moving backward, technology moves relentlessly forward. Femtech products, a category of consumer technology addressing an array of “female” health needs, seem poised to fill gaps created by states and stakeholders eager to limit birth control and abortion access and increase pregnancy surveillance and fetal rights. Period and fertility tracking applications could supplement or replace other contraception. Early digital alerts to missed periods can improve the chances of obtaining a legal abortion in states with ever-shrinking windows of availability or prompt behavioral …

Do Not Touch My Data: Exploring A Disclosure-Based Framework To Address Data Access, Francis Morency

Washington and Lee Journal of Civil Rights and Social Justice

Companies have too much control over people’s information. In the data marketplace, companies package and sell individuals’ data, and these individuals have little to no bargaining power over the process. Companies may freely buy and sell people’s data in the private sector for targeted marketing and behavior manipulation. In the justice system, an unchecked data marketplace leaves black and brown communities vulnerable to serious data access issues caused by predictive sentencing, for example. Risk assessment algorithms in predictive sentencing rely on data on individuals and run all relevant data points to provide the likelihood that a defendant will recidivate low …

Content Moderation As Surveillance, Hannah Bloch-Wehba

Faculty Scholarship

Technology platforms are the new governments, and content moderation is the new law, or so goes a common refrain. As platforms increasingly turn toward new, automated mechanisms of enforcing their rules, the apparent power of the private sector seems only to grow. Yet beneath the surface lies a web of complex relationships between public and private authorities that call into question whether platforms truly possess such unilateral power. Law enforcement and police are exerting influence over platform content rules, giving governments a louder voice in supposedly “private” decisions. At the same time, law enforcement avails itself of the affordances of …

Gauging The Acceptance Of Contact Tracing Technology: An Empirical Study Of Singapore Residents’ Concerns With Sharing Their Information And Willingness To Trust, Ee-Ing Ong, Wee Ling Loo

Research Collection Yong Pung How School Of Law

In response to the COVID-19 pandemic, governments began implementing various forms of contact tracing technology. Singapore’s implementation of its contact tracing technology, TraceTogether, however, was met with significant concern by its population, with regard to privacy and data security. This concern did not fit with the general perception that Singaporeans have a high level of trust in its government. We explore this disconnect, using responses to our survey (conducted pre-COVID-19) in which we asked participants about their level of concern with the government and business collecting certain categories of personal data. The results show that respondents had less concern with …

Persistent Surveillance, Andrew Guthrie Ferguson

Scholarly Articles in Law Reviews & Journals

Persistent surveillance technologies grant police vast new investigative capabilities. The technologies both monitor targeted areas and generate databases of searchable information about people, places, and patterns that can be connected and accessed for criminal prosecutions.

In the face of this growing police surveillance, courts have struggled to make sense of a fragmented Fourth Amendment doctrine. The Supreme Court has offered some clues that “digital may be different” when it comes to surveillance, but lower courts have been left struggling to apply old law to new technologies. Warrantless use of persistent surveillance technologies raises hard questions about when a “search” occurs …

Telephone Pole Cameras Under Fourth Amendment Law, Matthew Tokson

Utah Law Faculty Scholarship

In a series of recent cases, police officers have mounted sophisticated surveillance cameras on telephone poles and pointed them at the homes of people suspected of a crime. These cameras often operate for months or even years without judicial oversight, collecting vast quantities of video footage on suspects and their activities near the home. Pole camera surveillance raises important Fourth Amendment questions that have divided courts and puzzled scholars.

These questions are complicated because Fourth Amendment law is complicated. This is especially the case today as Fourth Amendment law is in a transitional phase, caught between older and newer paradigms …