Privacy Law Commons^™

Data Management Law For The 2020s: The Lost Origins And The New Needs, Przemysław Pałka

Buffalo Law Review

In the data analytics society, each individual’s disclosure of personal information imposes costs on others. This disclosure enables companies, deploying novel forms of data analytics, to infer new knowledge about other people and to use this knowledge to engage in potentially harmful activities. These harms go beyond privacy and include difficult to detect price discrimination, preference manipulation, and even social exclusion. Currently existing, individual-focused, data protection regimes leave law unable to account for these social costs or to manage them.

This Article suggests a way out, by proposing to re-conceptualize the problem of social costs of data analytics through the …

التنظیم القانوني للطائرات بدون طیار, آمنة سعید خلفان بن مران الظاھري

Private Law Theses

خلال الفترة الماضية تعددت استخدامات الطائرات بدون طيار، وقطعت دولة الإمارات العربیة المتحدة أشواطا ھائلة في عملية تطوير الطائرات بدون طيار واستخدامھا لأغراض متعددة. ومزامنة مع الاستخدام المتعاظم لھذه التكنولوجيا الحديثة والتوسع في استخدامھا في العديد من المجالات لجلب النفع وتحقیق الرفاھیة للمجتمع، تظھر أھمیة بیان التنظيم القانوني الطائرات بدون طیار، وتسليط الضوء على المسؤولية عن أفعال ھذه الطائرات وما قد تسببھ من أضرار لأفراد المجتمع على نطاق واسع سواء في أجسادھم أو في ممتلكاتھم وحریاتھم، وذلك بھدف تحقیق التوازن بین الاھتمام بالسلامة البدنية والحاجة إلى تحفيز الابتكار وتطوير ھذه التقنیات الحدیثة.

تناولت ھذه الدراسة مفھوم الطائرات بدون طيار وأنواعھا، …

Law In The Time Of Covid-19, Katharina Pistor

Faculty Books

The COVID-19 crisis has ended and upended lives around the globe. In addition to killing over 160,000 people, more than 35,000 in the United States alone, its secondary effects have been as devastating. These secondary effects pose fundamental challenges to the rules that govern our social, political, and economic lives. These rules are the domain of lawyers. Law in the Time of COVID-19 is the product of a joint effort by members of the faculty of Columbia Law School and several law professors from other schools.

This volume offers guidance for thinking about some the most pressing legal issues the …

Privacy Or The Polls: Public Voter Registration Laws As A Modern Form Of Vote Denial, Audrey Paige Sauer

William & Mary Law Review

On May 11, 2017, President Donald J. Trump signed an executive order establishing the Presidential Advisory Commission on Election Integrity (PACEI), with the mission to “study the registration and voting processes used in Federal elections.” Pursuant to this mission, Vice Chair of the Commission, Kansas Secretary of State Kris Kobach, sent out letters to state election officials soliciting all “publicly available voter roll data,” including all registrants’ full first and last names, middle names or initials, addresses, dates of birth, political party, last four digits of Social Security numbers if available, voter history from 2006 onward, information regarding any felony …

Gdpr And The Importance Of Data To Ai Startups, James Bessen, Stephen Michael Impink, Lydia Reichensperger, Robert Seamans

Faculty Scholarship

What is the impact of the European Union’s General Data Protection Regime (“GDPR”) and data regulation on AI startups? How important is data to AI product development? We study these questions using unique survey data of commercial AI startups. AI startups rely on data for their product development. Given the scale and scope of their business models, these startups are particularly susceptible to policy changes impacting data collection, storage and use. We find that training data and frequent model refreshes are particularly important for AI startups that rely on neural nets and ensemble learning algorithms. We also find that firms …

Hash It Out: Fourth Amendment Protection Of Electronically Stored Child Exploitation, Rebekah A. Branham

Akron Law Review

Few courts have addressed whether ISP’s use of hash-based evaluation violates an individual’s Fourth Amendment rights. In 2018, the Fifth Circuit was presented with this issue in United States v. Reddick. The defendant is Reddick uploaded files to the cloud-sharing server Microsoft SkyDrive. Thereafter PhotoDNA, a computer software program that uses hashing, automatically reviewed the hash values of those files and compared them against its database of known child pornography hash values. PhotoDNA detected a hash value match between the defendant’s photos and the database. It then created a “CyberTip,” sending the files and users information to the NCMEC. …

Protecting Consumers In The Age Of The Internet Of Things, Nicole Smith

St. John's Law Review

(Excerpt)

IoT devices are an ever-increasing force of nature in our daily lives. They provide a multitude of essential benefits that we as a society have come to rely on. Thus, IoT devices are likely to continue to become irreplaceable tools. With the many benefits that these devices bring, they also bring a vast array of privacy and security issues that our society has not had to face until recently. Because of the new and prevalent risks associated with the IoT and because of the increasing harms to consumers, it is time for Congress to enact an IoT-specific data privacy …

Dna Is Different: An Exploration Of The Current Inadequacies Of Genetic Privacy Protection In Recreational Dna Databases, Jamie M. Zeevi

St. John's Law Review

(Excerpt)

Part I of this Note discusses the fundamental science behind DNA and defines and explains the process of familial DNA searching. Part I also discusses how Carpenter v. United States provides a framework to begin thinking about the unique nature of DNA and privacy implications for its use, and why the revealing nature of this type of data warrants protection. Part II of this Note delves into the lack of constitutional and statutory protections for DNA in recreational DNA databases. First, Part II explains that traditional Fourth Amendment concepts, like search warrants, probable cause, reasonable expectation of privacy, third-party …

Terms Of Service: The Use And Protection Of Genomic Information By Companies, Databases, And Law Enforcement, Sophia Kallas

Honors Program: Senior Projects (Public)

Private genomic companies have become a popular trend in the last two decades by providing customers with information regarding their ancestry and health risks. However, the profiles received from these companies can also be uploaded to public databases for various purposes, including locating other family members. Both testing companies and public databases have private interests, and both are at risk of law enforcement intervention for the purpose of forensic familial searching. There is little federal legislation protecting the privacy of an individual’s genetic profile. Consequently, it has been up to federal agencies, state laws, and judicial precedents to prevent the …

Fisa Section 702: Does Querying Incidentally Collected Information Constitute A Search Under The Fourth Amendment?, Rachel G. Miller

Notre Dame Law Review Reflection

An inherent source of conflict in the United States exists between protecting national security and safeguarding individual civil liberties. Throughout history, Americans have consistently been skeptical and fearful of the government abusing its power by spying on Americans. In an effort to curtail government abuses through surveillance, President Carter and Congress enacted the Foreign Intelligence Surveillance Act of 1978 (FISA). The purpose of FISA was to establish a “statutory procedure authorizing the use of electronic surveillance in the United States for foreign intelligence purposes.” FISA provides the government with the authority to engage in electronic surveillance, targeted at foreign powers …

Candidate Privacy, Rebecca Green

Washington Law Review

In the United States, we have long accepted that candidates for public office who have voluntarily stepped into the public eye sacrifice claims to privacy. This refrain is rooted deep within the American enterprise, emanating from the Framers’ concept of the informed citizen as a bedrock of democracy. Voters must have full information about candidates to make their choices at the ballot box. Even as privacy rights for ordinary citizens have expanded, privacy theorists and courts continue to exempt candidates from privacy protections. This Article suggests that two disruptions warrant revisiting the privacy interests of candidates. The first is a …

Tinker-Ing With Machine Learning: The Legality And Consequences Of Online Surveillance Of Students, Amy B. Cyphert

Nevada Law Journal

No abstract provided.

Privacy As Safety, A. Michael Froomkin, Zak Colangelo

Washington Law Review

The idea that privacy makes you safer is unjustly neglected: public officials emphasize the dangers of privacy while contemporary privacy theorists acknowledge that privacy may have safety implications but hardly dwell on the point. We argue that this lack of emphasis is a substantive and strategic error and seek to rectify it. This refocusing is particularly timely given the proliferation of new and invasive technologies for the home and for consumer use more generally, not to mention surveillance technologies such as so-called smart cities.

Indeed, we argue—perhaps for the first time in modern conversations about privacy—that in many cases privacy …

An Uneasy Love Triangle Between Alexa, Your Personal Life, And Data Security: Exploring Privacy In The Digital New Age, Marissa Merrill

Mercer Law Review

Would you willingly welcome a stranger into your home to listen and record your private conversations? You might have already done so if you own a voice-controlled, personal assistant device like Amazon’s Alexa products. These devices listen to your conversations and record your interactions awaiting a command, sending personal data through the cloud to Amazon employees to translate the information into an action. So how private is your personal data if it’s being shared through these devices?

For years people have dreamed about the technology of the future. But these technological advances open the door to new, different problems. Voice-controlled, …

Data And The Social Obligation Norm Of Property: An Essay In Honor Of Professor Gregory S. Alexander, Christopher K. Odinet

Faculty Scholarship

In the age of the Cambridge Analytica/Facebook scandal and sundry other data breaches at Under Armour, Target, and Best Buy, the issue of security and privacy in consumer data has become increasingly important. For much of the modern era, the development of technology has gone relatively unchecked, with the United States having ceded much of the policymaking terrain to Silicon Valley. This has resulted in the unbridled creation of vast amounts of consumer data. Users who engage with tech platforms generate bits and bytes about themselves based on their activities, preferences, and habits. This information — “data” — is then …

Automation In Moderation, Hannah Bloch-Wehba

Faculty Scholarship

This Article assesses recent efforts to encourage online platforms to use automated means to prevent the dissemination of unlawful online content before it is ever seen or distributed. As lawmakers in Europe and around the world closely scrutinize platforms’ “content moderation” practices, automation and artificial intelligence appear increasingly attractive options for ridding the Internet of many kinds of harmful online content, including defamation, copyright infringement, and terrorist speech. Proponents of these initiatives suggest that requiring platforms to screen user content using automation will promote healthier online discourse and will aid efforts to limit Big Tech’s power.

In fact, however, the …

Candidate Privacy, Rebecca Green

Faculty Publications

In the United States, we have long accepted that candidates for public office who have voluntarily stepped into the public eye sacrifice claims to privacy. This refrain is rooted deep within the American enterprise, emanating from the Framers' concept of the informed citizen as a bedrock of democracy. Voters must have full information about candidates to make their choices at the ballot box. Even as privacy rights for ordinary citizens have expanded, privacy theorists and courts continue to exempt candidates from privacy protections. This Article suggests that two disruptions warrant revisiting the privacy interests of candidates. The first is a …

The Relationship Between Privacy Notice Formats And Consumer Disclosure Decisions: A Quantitative Study, Alexys Mercedes Carlton, David Cross

Publications

In the Data Era, the future success of many businesses will heavily depend on the business’ ability to collect and process consumer personal information. Business leaders must understand and implement practices that increase consumer trust to influence their willingness to disclose their information. The problem addressed by this study is many consumers do not trust online service providers with their personal information, and as a result, have refrained from engaging in online activities. The purpose of this quantitative correlational study was to understand how consumers use privacy notices when deciding to share their personal information with online businesses. A sample …

Privacy Protection(Ism): The Latest Wave Of Trade Constraints On Regulatory Autonomy, Svetlana Yakovleva

University of Miami Law Review

Countries spend billions of dollars each year to strengthen their discursive power to shape international policy debates. They do so because in public policy conversations labels and narratives matter enormously. The “digital protectionism” label has been used in the last decade as a tool to gain the policy upper hand in digital trade policy debates about cross-border flows of personal and other data. Using the Foucauldian framework of discourse analysis, this Article brings a unique perspective on this topic. The Article makes two central arguments. First, the Article argues that the term “protectionism” is not endowed with an inherent meaning …

Republican Attorneys General Association V. Las Vegas Metropolitan Police Department, 136 Nev. Adv. Op. 3 (Feb. 20, 2020), Nicholas Hagenkord

Nevada Supreme Court Summaries

The Court determined that (1) the district court did not err in denying appellant Republican Attorneys General Association’s (RAGA) petition for a writ of mandamus under the Nevada Public Records Act (NPRA) seeking bodycam footage regarding juveniles and former State Senator Aaron Ford’s interactions with police; and (2) the district court abused its discretion in denying RAGA’s request for other requested records by not assessing whether these records contain any nonconfidential material.

The (Possibly) Injured Consumer: Standing In Data Breach Litigation, Lauren M. Lozada

St. John's Law Review

(Excerpt)

This Note will address the question of what factors a prospective plaintiff must display to “push [a] threatened injury of future identity theft beyond the speculative to the sufficiently imminent.” Part I will delve into relevant statistics to identify the characteristics of a data breach that most often lead to eventual identity theft. Part II will explore recent data breach standing cases and analyze the factual differences and legal perspectives that have led to disparate results among the federal circuits. Lastly, Part III will recommend a method for evaluating future data breach standing issues.

Stingray Cell-Site Simulator Surveillance And The Fourth Amendment In The Twenty-First Century: A Review Of The Fourth Amendment In An Age Of Surveillance, And Unwarranted, Harvey Gee

St. John's Law Review

(Excerpt)

This Review discusses two timely and insightful books examining the changing relationship between privacy and the Fourth Amendment in the digital era. Part I discusses the tensions between the need to protect privacy rights and the slowly evolving legal landscape during a time of rapidly changing technology, to introduce David Gray’s The Fourth Amendment in an Age of Surveillance. His book explains how the Fourth Amendment, though embattled, can have a prominent role in twenty-first century discussions of privacy, technology, and surveillance. Gray’s analysis is engaged to broaden the conversation about Stingray technology. This section analyzes a sampling of …

Unlimited Data Search Plan: Warrantless Border Search Of Mobile Device Data Likely Unconstitutional For Violating The Fundamental Right To Informational Privacy, Atanu Das

St. John's Law Review

(Excerpt)

Part I of this Article discusses a case in which a United States citizen was subject to an unconstitutional warrantless border search of his mobile device data. Part II explains the history and current state of Supreme Court jurisprudence of the border search exception doctrine. Part III explains the way in which Supreme Court jurisprudence finds the right to informational privacy for mobile device data to be a fundamental right. Part IV discusses the reluctance of some legal commentators to find that a governmental intrusion on the right to informational privacy is subject to strict scrutiny. Part V finds …

Appendix B: Ohio Attorney General Facial Recognition Task Force Proposal On Monitoring, Auditing, Enforcement And Transparency, Brian E. Ray, Dennis Hirsch

Law Faculty Reports and Comments

Policy controls that govern agency activity generally contain at least two components: (1) a substantive policy; and (2) a governance structure for ensuring implementation of and compliance with that policy. Effective controls require both. This proposal focuses on the second component, the governance structure. Specifically, it addresses routine monitoring, annual audits, enforcement of the AG’s policies that govern the facial recognition system, and public transparency. Established facial recognition policies, including those that the Task Force has looked to as models, recognize the importance of establishing such a governance structure.

We have reviewed existing federal and state policy templates documents in …

News As Surveillance, Erin C. Carroll

Georgetown Law Faculty Publications and Other Works

As inhabitants of the Information Age, we are increasingly aware of the amount and kind of data that technology platforms collect on us. Far less publicized, however, is how much data news organizations collect on us as we read the news online and how they allow third parties to collect that personal data as well. A handful of studies by computer scientists reveal that, as a group, news websites are among the Internet’s worst offenders when it comes to tracking their visitors.

On the one hand, this surveillance is unsurprising. It is capitalism at work. The press’s business model has …

Race, Surveillance, Resistance, Chaz Arnett

Faculty Scholarship

The increasing capability of surveillance technology in the hands of law enforcement is radically changing the power, size, and depth of the surveillance state. More daily activities are being captured and scrutinized, larger quantities of personal and biometric data are being extracted and analyzed, in what is becoming a deeply intensified and pervasive surveillance society. This reality is particularly troubling for Black communities, as they shoulder a disproportionate share of the burden and harm associated with these powerful surveillance measures, at a time when traditional mechanisms for accountability have grown weaker. These harms include the maintenance of legacies of state …

Bad Actors: Authenticity, Inauthenticity, Speech, And Capitalism, Sarah C. Haan

Scholarly Articles

“Authenticity” has evolved into an important value that guides social media companies’ regulation of online speech. It is enforced through rules and practices that include real-name policies, Terms of Service requiring users to present only accurate information about themselves, community guidelines that prohibit “coordinated inauthentic behavior,” verification practices, product features, and more.

This Article critically examines authenticity regulation by the social media industry, including companies’ claims that authenticity is a moral virtue, an expressive value, and a pragmatic necessity for online communication. It explains how authenticity regulation provides economic value to companies engaged in “information capitalism,” “data capitalism,” and “surveillance …

Open Record Laws: Balancing The "Right To Know" With The Safety Of Reproductive Health Care Service Providers, Rebecca Bentley

Buffalo Human Rights Law Review

No abstract provided.

Competition, Privacy, And Big Data, Stanley M. Besen

Catholic University Journal of Law and Technology

This article analyzes the competition policy and privacy issues that are raised by large disparities in the amounts of consumer data that are held by different firms. First, it explains how competition authorities could take data acquisition into account in evaluating the effects of mergers and examines conditions under which those authorities might mandate data sharing among competitors. Next, it considers how privacy issues might be treated in analyzing whether data sharing should be permitted or mandated. Finally, it examines possible conflicts between policies that address competition and those that deal with privacy.

Privacy, Eavesdropping, And Wiretapping Across The United States: Reasonable Expectation Of Privacy And Judicial Discretion, Carol M. Bast

Catholic University Journal of Law and Technology

One-party consent and all-party consent eavesdropping and wiretapping statutes are two broad pathways for legislation to deal with the problem of secret taping and some states protect conversation under state constitutions. Whether a conversation is protected against being taped as a private conversation is often gauged by the reasonable expectation of privacy standard. Judges in both all-party consent and one-party consent jurisdictions have had to use their leeway under the reasonable expectation of privacy standard to arrive at what at the time seemed to be the most appropriate solution, perhaps in doing so creating a case law exception.