Privacy Law Commons^™

When Enough Is Enough: Location Tracking, Mosaic Theory, And Machine Learning, Steven M. Bellovin, Renée M. Hutchins, Tony Jebara, Sebastian Zimmeck

Faculty Scholarship

Since 1967, when it decided Katz v. United States, the Supreme Court has tied the right to be free of unwanted government scrutiny to the concept of reasonable xpectations of privacy.^[1] An evaluation of reasonable expectations depends, among other factors, upon an assessment of the intrusiveness of government action. When making such assessment historically the Court has considered police conduct with clear temporal, geographic, or substantive limits. However, in an era where new technologies permit the storage and compilation of vast amounts of personal data, things are becoming more complicated. A school of thought known as “mosaic theory” …

Big Data's Other Privacy Problem, James Grimmelmann

Faculty Scholarship

Big Data has not one privacy problem, but two. We are accustomed to talking about surveillance of data subjects. But Big Data also enables disconcertingly close surveillance of its users. The questions we ask of Big Data can be intensely revealing, but, paradoxically, protecting subjects' privacy can require spying on users. Big Data is an ideology of technology, used to justify the centralization of information and power in data barons, pushing both subjects and users into a kind of feudal subordination. This short and polemical essay uses the Bloomberg Terminal scandal as a window to illuminate Big Data's other privacy …

The Scored Society: Due Process For Automated Predictions, Danielle Keats Citron, Frank A. Pasquale

Faculty Scholarship

Big Data is increasingly mined to rank and rate individuals. Predictive algorithms assess whether we are good credit risks, desirable employees, reliable tenants, valuable customers—or deadbeats, shirkers, menaces, and “wastes of time.” Crucial opportunities are on the line, including the ability to obtain loans, work, housing, and insurance. Though automated scoring is pervasive and consequential, it is also opaque and lacking oversight. In one area where regulation does prevail—credit—the law focuses on credit history, not the derivation of scores from data.

Procedural regularity is essential for those stigmatized by “artificially intelligent” scoring systems. The American due process tradition should inform …

Promoting Innovation While Preventing Discrimination: Policy Goals For The Scored Society, Frank A. Pasquale, Danielle Keats Citron

Faculty Scholarship

There are several normative theories of jurisprudence supporting our critique of the scored society, which complement the social theory and political economy presented in our 2014 article on that topic in the Washington Law Review. This response to Professor Tal Zarsky clarifies our antidiscrimination argument while showing that is only one of many bases for the critique of scoring practices. The concerns raised by Big Data may exceed the capacity of extant legal doctrines. Addressing the potential injustice may require the hard work of legal reform.

Protecting Health Privacy In An Era Of Big Data Processing And Cloud Computing, Frank A. Pasquale, Tara Adams Ragone

Faculty Scholarship

This Article examines how new technologies generate privacy challenges for both healthcare providers and patients, and how American health privacy laws may be interpreted or amended to address these challenges. Given the current implementation of Meaningful Use rules for health information technology and the Omnibus HIPAA Rule in health care generally, the stage is now set for a distinctive law of “health information” to emerge. HIPAA has come of age of late, with more aggressive enforcement efforts targeting wayward healthcare providers and entities. Nevertheless, more needs to be done to assure that health privacy and all the values it is …

The Child Independence Is Born: James Otis And Writs Of Assistance, James M. Farrell

Communication

This chapter is a reexamination of the Writs of Assistance speech by James Otis. In particular, it is a reconsideration of the evidence upon which rests the historical reputation of Otis’s address. Are the claims by historians who credit Otis with sparking the Revolutionary movement in colonial America warranted or not? That reassessment begins with a detailed review of the nature and function of writs of assistance within the political, legal, and economic environment of colonial Massachusetts. It then turns to an analysis of the legal dispute over writs of assistance in the 1761 trial. From there we will reconstruct …

A Reasonable Expectation Of Privacy Online: "Do Not Track" Legislation, Alicia Shelton

University of Baltimore Law Forum

This year marked the twenty-fifth anniversary of the World Wide Web (“Web”), and more than 81% of Americans are now using the internet on a regular basis. Yet, despite the fact that key pieces of personally identifying information—name, address, phone number, email address, and birthday—and sensitive personal data—political opinions, racial or ethnic origin, religious beliefs, and health—can be learned through tracking an individual’s online activity, there continues to be a void of federal legislation protecting the privacy of internet users. In the absence of federal action, state legislatures are tasked with regulating electronic surveillance by both private companies and the …

Note, Institutionally Appropriate Approaches To Privacy: Striking A Balance Between Judicial And Administrative Enforcement Of Privacy Law, Lauren Henry Scholz

Scholarly Publications

No abstract provided.

Give Me Your Password: The Intrusive Social Media Policies In Our Schools, Talon Hurst

CommLaw Conspectus: Journal of Communications Law and Technology Policy (1993-2015)

No abstract provided.

Chapter 58: Disclosure Of Medical Information In Pretrial Settlements With Marriage And Family Therapists, Brian Geremia

McGeorge Law Review

No abstract provided.

Setting Parental Controls: Do Parents Have A Duty To Supervise Their Children’S Use Of The Internet?, 31 J. Marshall J. Info. Tech. & Privacy L. 309 (2014), Alberto Bernabe

UIC John Marshall Journal of Information Technology & Privacy Law

No abstract provided.

“Bring Your Own Glass”: The Privacy Implications Of Google Glass In The Workplace, 30 J. Marshall J. Info. Tech. & Privacy L. 607 (2014), Anisha Mehta

UIC John Marshall Journal of Information Technology & Privacy Law

No abstract provided.

Near-Field Communication Technology: Regulatory And Legal Recommendations For Embracing The Nfc Revolution, Allan Richarz

Canadian Journal of Law and Technology

Despite its ease and convenience, NFC technology raises a number of privacy issues. Chief among these concerns are the collection, retention, and usage of personally-identifying information contained within NFC-enabled devices by both private and public entities. Within that category, the most pressing privacy issues inherent in the collection and usage of such information relate to real-time tracking or after-the-fact habit profiling and identity theft. As well, privacy issues persist around the means used, if any, to secure and protect that information from unauthorized third parties both at the end-user and systemic database levels.

In light of these concerns, it is …

When The Need To Know Outweighs Privacy: Granting Access To Child Welfare Records In The Fifty States, Courtney Barclay

Children's Legal Rights Journal

No abstract provided.

Policing The Social Media Water Cooler: Recent Nlrb Decisions Should Make Employers Think Twice Before Terminating An Employee For Comments Posted On Social Media Sites, Eric Raphan, Sean Kirby

Journal of Business & Technology Law

No abstract provided.

E-Discovery: Reasonable Search, Proportionality, Cooperation, And Advancing Technology, 30 J. Marshall J. Info. Tech. & Privacy L. 433 (2014), Steven Bennett

UIC John Marshall Journal of Information Technology & Privacy Law

Rule 26(g)(1)(A) of the Federal Rules of Civil Procedure (the “Federal Rules”) requires that an attorney responding to a discovery request verify by signature, after “reasonable inquiry,” that the disclosure is, to the best of the attorney’s knowledge, “complete and correct.” In a digital environment, with masses of data in multiple formats and locations, the determination of whether a “reasonable” effort to meet the completeness requirement has occurred may turn on an assessment of the practices used to conduct a search of electronic materials. Those practices, in turn, must be judged on a standard of “proportionality” (i.e., that the effort …

From Morris To Nosal: The History Of Exceeding Authorization And The Need For A Change, 30 J. Marshall J. Info. Tech. & Privacy L. 465 (2014), Vasileios Karagiannopoulos

UIC John Marshall Journal of Information Technology & Privacy Law

This Article discusses and examines the various cases that pertain to the issue of exceeding authorized access throughout the years from United States v. Morris to the recent United States v. Nosal. Further, this Article thoroughly examines the Ninth Circuit’s approach regarding the issue of exceeding authorization; specifically, the need for the Ninth Circuit’s narrower interpretation in United States v. Brekka and Nosal. Finally, this Article proposes an alternative phrasing for the term “exceeding authorization,” and a revised interpretation of the phrase and the relevant offenses under the Computer Fraud and Abuse Act. This recommended interpretation suggests establishing different degrees …

Cloud Computing, Regulatory Compliance, And Student Privacy: A Guide For School Administrators And Legal Counsel, 30 J. Marshall J. Info. Tech. & Privacy L. 511 (2014), Steve Mutkoski

UIC John Marshall Journal of Information Technology & Privacy Law

Rapid change in the technology landscape has resulted in the introduction of a range of new technologies into the classroom. But unlike the past use of technology in schools, many of these new products and services introduce two new dynamics that school counsel (and the teachers and administrators they support) need to understand fully. First, many of these new products and services are run “in the cloud” by a third party service provider as opposed to on servers operated by the school’s information technology (IT) staff. This third party operation and control can raise important new regulatory compliance issues, including …

Bitcoins: Technological Innovation Or Emerging Threat?, 30 J. Marshall J. Info. Tech. & Privacy L. 535 (2014), R. Joseph Cook

UIC John Marshall Journal of Information Technology & Privacy Law

No abstract provided.

The Problems With Prism: How A Modern Definition Of Privacy Necessarily Protects Privacy Interests In Digital Communications, 30 J. Marshall J. Info. Tech. & Privacy L. 571 (2014), Adam Florek

UIC John Marshall Journal of Information Technology & Privacy Law

No abstract provided.

The Right To Travel And Privacy: Intersecting Fundamental Freedoms, 30 J. Marshall J. Info. Tech. & Privacy L. 639 (2014), Richard Sobel

UIC John Marshall Journal of Information Technology & Privacy Law

As a fundamental right inherent in American citizenship and the nature of the federal union, the right to travel in the United States is basic to American liberty. The right precedes the creation of the United States and appears in the Articles of Confederation. The U.S. Constitution and Supreme Court recognize and protect the right to interstate travel. The travel right entails privacy and free domestic movement without governmental abridgement.

In the era of surveillance, the imposition of official photo identification for travel, watchlist prescreening programs, and invasive airport scans and searches unreasonably burden the right to travel. They undermine …

Uncle Sam Knows What’S In Your Medicine Cabinet: The Security And Privacy Protection Of Health Records Under The Hitech Act, 30 J. Marshall J. Info. Tech. & Privacy L. 667 (2014), Ranjit Janardhanan

UIC John Marshall Journal of Information Technology & Privacy Law

No abstract provided.

Control Over Personal Data, Privacy And Administrative Discretion In Europe And The Usa: The Paradox Of Italian “Data Protection Authority”, 30 J. Marshall J. Info. Tech. & Privacy L. 721 (2014), Marco Quiroz Vitale

UIC John Marshall Journal of Information Technology & Privacy Law

No abstract provided.

The Online Gun Marketplace And The Dangerous Loophole In The National Instant Background Check System, 30 J. Marshall J. Info. Tech. & Privacy L. 757 (2014), Ann Daniels

UIC John Marshall Journal of Information Technology & Privacy Law

No abstract provided.

Where Has Privacy Gone? How Surveillance Programs Threaten Expectations Of Privacy, 30 J. Marshall J. Info. Tech. & Privacy L. 795 (2014), Michael Greene

UIC John Marshall Journal of Information Technology & Privacy Law

No abstract provided.

Now You See It, Now You Don’T . . . Or Do You?: Snapchat’S Deceptive Promotion Of Vanishing Messages Violates Federal Trade Commission Regulations, 30 J. Marshall J. Info. Tech. & Privacy L. 827 (2014), Danielle Young

UIC John Marshall Journal of Information Technology & Privacy Law

This Comment will explore the recently popular application Snapchat, and discuss the ways in which the app's privacy policy has violated FTC regulations, responding to a recent complaint filed by The Electronic Privacy Center. Particularly, this Comment will focus on Snapchat's deceptive promotion of "disappearing" photographs and videos. Section II will illustrate the basic structure of Snapchat, detailing various illustrations of its use. Section II will also examine the regulations set forth by the FTC that Snapchat is required to follow. Section III will discuss possible methods that the average user can do in order to bypass the very thing …

Canada’S Anti-Spam Legislation: A Constitutional Analysis, 31 J. Marshall J. Info. Tech. & Privacy L. 1 (2014), Emir Crowne, Stephanie Provato

UIC John Marshall Journal of Information Technology & Privacy Law

On December 15th, 2010, the Government of Canada agreed to Bill C-28, the Fighting Internet and Wireless Spam Act, with the intent to “deter the most damaging and deceptive forms of spam… from occurring in Canada and to help to drive out spammers.” Canada‟s Anti- Spam Legislation (“CASL”) was born. Although CASL has only been in force since July 1st, 2014, we argue that the Act may not survive constitutional scrutiny as it unduly restricts freedom of speech.

The Policing Of Religious Marriage Prohibitions In Israel: Religion, State, And Information Technology, 31 J. Marshall J. Info. Tech. & Privacy L. 23 (2014), Akiva Miller

UIC John Marshall Journal of Information Technology & Privacy Law

The State of Israel applies religious law in all matters of marriage and divorce. For the Jewish population of Israel, the law of marriage includes religious prohibitions on certain kinds of marriages, most notably the prohibition against intermarriage and the prohibition against marrying a mamzer. Over the years, Israel‘s state-religious authorities have adopted a variety of methods and practices for policing these prohibitions. These include stringent procedures for premarital registration inquiries; use of databases for collecting information on prohibited persons; recording the possibility of mamzer status of newborn children; special Beit Din proceedings for handling cases of possible marriage prohibitions; …

California’S Eavesdropping Law Endangers Victims Of Domestic Violence, 31 J. Marshall J. Info. Tech. & Privacy L. 57 (2014), John E.B. Myers

UIC John Marshall Journal of Information Technology & Privacy Law

No abstract provided.

The Ethical Implications Of Cloud Computing For Lawyers, 31 J. Marshall J. Info. Tech. & Privacy L. 71 (2014), Stuart Pardau, Blake Edwards

UIC John Marshall Journal of Information Technology & Privacy Law

This paper aims to isolate the pertinent ethical issues of cloud computing and chart a sensible path forward for lawyers. Part II briefly introduces the concept of cloud computing. Part III discusses the lawyer‟s duties of confidentiality, of competence, to protect client property, and to oversee non-lawyers who are providing assistance. Part III also examines the application of these duties by the various state bar associations to the problem of cloud computing. Part IV looks at sample terms of use of some of the more popular vendors. Part V suggests that securing informed consent, employing specialty cloud providers, and purchasing …