Privacy Law Commons^™

Secrecy On Steroids: How Overzealous State Confidentiality Laws Expose Leakers And Whistleblowers To Retaliatory Prosecution, Frank D. Lomonte, Anne Marie Tamburro

University of Miami Law Review

It is well-documented that the federal government has a secrecy problem. Thousands of times a year, inconsequential documents are needlessly stamped “classified,” which can mean prison for anyone who leaks them. But the addiction to secrecy doesn’t stop with the Pentagon. State public-records statutes are riddled with their own local version of “classified information” that puts people at risk of prosecution even for well-intentioned whistleblowing.

The problem is particularly acute in Florida, where one of the state’s highest-ranking elected officials spent almost two years as the target of a criminal investigation for releasing records about an unresolved sexual harassment complaint …

Decoding Dobbs: A Typology To Better Understand The Roberts Court's Jurisprudence, Katie Yoder

Honors Projects

The U.S. Supreme Court first recognized Substantive Due Process (“SDP”) in the early twentieth century. In Lochner v. New York, the Court established that there are certain unenumerated rights that are implied by the Fourteenth Amendment.Though SDP originated in a case about worker’s rights and liberties, it quickly became relevant to many cases surrounding personal intimate decisions involving health, safety, marriage, sexual activity, and reproduction.Over the past 60 years, the Court relied upon SDP to justify expanding a fundamental right to privacy, liberty, and the right to medical decision making. Specifically, the court applied these concepts to allow for freedoms …

Train Or Restrain? Using International Perspectives To Inform The American Fair Use Analysis Of Copyright In Generative Artificial Intelligence Training, Serena Lightstone

Northwestern Journal of International Law & Business

The rise of generative artificial intelligence (“AI”) has brought questions regarding the permissibility of using copyrighted materials in training generative AI systems around the globe. This article examines whether such use constitutes infringement under the American fair use doctrine, drawing insights from the regulatory approaches of the European Union (EU) and Japan.

Ultimately, this article advocates for United States courts to recognize the permissibility of using copyrighted materials in training generative AI models, rejecting the EU’s rights-holder-centric approach, and going beyond Japan’s limited-permissibility solution. Through a detailed four-factor fair use analysis, this article demonstrates that training generative AI on copyrighted …

“Can I Have It Non-Personalised?” An Empirical Investigation Of Consumer Willingness To Share Data For Personalized Services And Ads, Monika Leszczynska, Daria Baltag

Faculty Scholarship

European regulators, courts, and scholars are currently debating the legality of data processing for personalization purposes. Should businesses require separate consent for processing user data for personalized advertising, especially when offering free services reliant on such ads for revenue? Or is general consent for the contract enough, given personalized advertising’s role in fulfilling contractual obligations? This study investigates whether these legal distinctions reflect differences in people’s willingness to share data with businesses for personalization. Are consumers less willing to share their data for personalized advertising than for personalized services that they clearly contracted for? Does that change if the service …

How Close Is Close Enough: A Step-By-Step Analysis To Resolve The Circuit Split Created By Misunderstanding The Spokeo Ruling, Cason Shipp

St. Mary's Law Journal

No abstract provided.

Covid-19: The Federal Government, Federalism, South Dakota, And American Indians, Jordan Janson

Helm's School of Government Conference - 2021-2024

This essay assesses the roles of the federal government and its relationship with Tribal Regions and states alike. Additionally, how COVID-19 affected states and localities and how different Presidential Administrations handled and responded to the pandemic while being compared with the state of South Dakota. Assessing whether or not the federal government overstepped reveals the preparedness of states. Certain states handled COVID-19-related issues better than others, and this essay addresses how Tribal Regions in states provided Governors with extreme complexities. Finally, this essay delves into the rights and responsibilities of the federal government and the state pertaining to American Indian …

The Post-Dobbs Reality: Privacy Expectations For Period-Tracking Apps In Criminal Abortion Prosecutions, Sophie L. Nelson

Pepperdine Law Review

The Supreme Court’s decision to overturn Roe v. Wade and Planned Parenthood v. Casey in June 2022 was met with waves of both support and criticism throughout the United States. Several states immediately implemented or began drafting trigger laws that criminalize seeking and providing an abortion. These laws prompted several period-tracking app companies to encrypt their users’ data to make it more difficult for the government to access period- and pregnancy-related information for criminal investigations. This Comment explores whether the Fourth Amendment and U.S. privacy statutes protect users of period-tracking apps from government surveillance. More specifically, this Comment argues that …

Barcoding Bodies: Rfid Technology And The Perils Of E-Carceration, Jackson Samples

Duke Law & Technology Review

Electronic surveillance now plays a central role in the criminal legal system. Every year, hundreds of thousands of people are tracked by ankle monitors and smartphone technology. And frighteningly, commentators and policymakers have now proposed implanting radio frequency identification (“RFID”) chips into people’s bodies for surveillance purposes. This Note examines the unique risks of these proposals—particularly with respect to people on probation and parole—and argues that RFID implants would constitute a systematic violation of individual privacy and bodily integrity. As a result, they would also violate the Fourth Amendment.

Content Moderation And The Least Cost Avoider, Paul Rosenzweig

Joint PIJIP/TLS Research Paper Series

No abstract provided.

Fitting A Block Into A Sphere Mold: The Inadequacy Of Current Data Privacy Regulations In Protecting Data Privacy Within The Blockchain Space, Jenny Yang

Washington and Lee Journal of Civil Rights and Social Justice

Despite global imposition of data privacy laws and regulations, data privacy is a nonexistent luxury amongst the data-charged world we live in. Data privacy has long been established as a fundamental right. Entities have successfully established robust methodologies around existing data privacy laws and regulations to utilize past consumer behavior to predict, impact and manipulate current and future consumer behaviors. This phenomenon has been commonly coined as “corporate surveillance.” Emerging spaces arising through technological developments have greater access into consumer data to impact economic choices. Specifically, the blockchain space, through its unique open-source and permanent traits, has been able to …

Skirting The Fourth Amendment: How Law Enforcement Agencies Abuse Technology And Constitutional Exceptions To Surveille The Public, Matthew Lloyd

Washington and Lee Journal of Civil Rights and Social Justice

Existing Fourth Amendment law does not protect against law enforcement use of data gathered through the internet either by private companies who actively search their customer’s data and submit evidence of misconduct to law enforcement or from private companies who acquire the data on behalf of law enforcement. In an effort to pursue criminals, courts have permitted Fourth Amendment jurisprudence to develop in a manner that permits sweeping invasions of privacy without any probable cause through the private search doctrine or without any procedural protections through the third-party doctrine. It will require substantial judicial or legislative action to return the …

Children Seen But Not Heard, Stacey B. Steinberg

UF Law Faculty Publications

Children are expected to abide by the will of their parents. In the last 200 years, American jurisprudence has given parents the ability to control their children’s upbringing with few exceptions. The principle governing this norm is that parents know best and will use their better knowledge to protect their children’s welfare.

The COVID-19 pandemic, public school rules, and children’s privacy laws offer modern examples of regulations in which the interests of parents and children may not align. Minors may want access to vaccines, despite a parent’s refusal to sign a consent form. Minors may want to talk to their …

The Myth Of Children’S Online Privacy Protection, Stacey Steinberg

UF Law Faculty Publications

Digital technology has changed the landscape young people face as they come of age. It has changed how children interact with their parents, schools, community organizations, and the state. Despite many benefits, digital technologies that employ data collection, algorithms, and artificial intelligence pose significant risks for the next generation. Private businesses can collect, use, and sell a child’s data in ways never imagined by their families. Information collected by third parties with good intentions can be stolen through data breaches. Through faulty algorithms, websites can make inaccurate assumptions about young people’s interests, teachers can make inaccurate assumptions about a student’s …

On The Human Right To Healthy Menstruation, Bridget J. Crawford

Elisabeth Haub School of Law Faculty Publications

This short essay introduces the Bellagio Declaration on the Human Right to Healthy Menstruation, a statement signed by an interdisciplinary group of academics, artists, policymakers, clinicians, and practitioners in 2024. The Declaration frames the human right to healthy menstruation as including (1) non-discrimination on the basis of menstruation; (2) dignity in all matters related to menstruation; (3) access to facilities, resources, and supplies that facilitate the management of menstruation in a manner that is affordable and safe and that fosters a clean, healthy, and sustainable environment; (4) lifelong access to timely and medically accurate information about all aspects of menstruation; …

National Security And Federalizing Data Privacy Infrastructure For Ai Governance, Margaret Hu, Eliott Behar, Davi Ottenheimer

Fordham Law Review

This Essay contends that data infrastructure, when implemented on a national scale, can transform the way we conceptualize artificial intelligence (AI) governance. AI governance is often viewed as necessary for a wide range of strategic goals, including national security. It is widely understood that allowing AI and generative AI to remain self-regulated by the U.S. AI industry poses significant national security risks. Data infrastructure and AI oversight can assist in multiple goals, including: maintaining data privacy and data integrity; increasing cybersecurity; and guarding against information warfare threats. This Essay concludes that conceptualizing data infrastructure as a form of critical infrastructure …

On The Genealogy Of Intimate Digital Harm, Aziz Z. Huq

Michigan Law Review

A review of The Fight for Privacy: Protecting Dignity, Identity, and Love in the Digital Age. By Danielle Keats Citron.

Personal Data And Vaccination Hesitancy: Covid-19’S Lessons For Public Health Federalism, Charles D. Curran

Catholic University Law Review

During the COVID-19 vaccination campaign, the federal government adopted a more centralized approach to the collection of public health data. Although the states previously had controlled the storage of vaccination information, the federal government’s Operation Warp Speed plan required the reporting of recipients’ personal information on the grounds that it was needed to monitor the safety of novel vaccines and ensure correct administration of their multi-dose regimens.

Over the course of the pandemic response, this more centralized federal approach to data collection added a new dimension to pre-existing vaccination hesitancy. Requirements that recipients furnish individual information deterred vaccination among undocumented …

Big Data Searches And The Future Of Criminal Procedure, Mary Fan

Articles

This Article proceeds in three parts. Part I illuminates the nostalgic Luddism that influences Fourth Amendment jurisprudence and the challenges posed by evolving technologies to this dominant lens. This Part explains the operation of geofence and keyword warrants and how their power to crack cold cases by unidentified perpetrators both tempt and terrify. The confusion in the courts over the constitutionality of geofence and keyword warrants is emblematic of the larger challenges of the Romantic Luddism in Fourth Amendment originalism that has grown in influence over the decades.

Part II frames and theorizes the concepts of collateral impact and collateral …

The Lack Of Responsibility Of Higher Education Institutions In Addressing Phishing Emails And Data Breaches, Muxuan (Muriel) Wang

Duke Law & Technology Review

Higher education institutions (HEIs) are highly susceptible to cyberattacks, particularly those facilitated through phishing, due to the substantial volume of confidential student and staff data and valuable research information they hold. Despite federal legislations focusing on bolstering cybersecurity for critical institutions handling medical and financial data, HEIs have not received similar attention. This Note examines the minimal obligations imposed on HEIs by existing federal and state statutes concerning data breaches, the absence of requirements for HEIs to educate employees and students about phishing attacks, and potential strategies to improve student protection against data breaches.

Techno-Legal Solutionism: Regulating Children's Online Safety In The United States, Maria P. Angel, Danah Boyd

Scholarly Works

Convinced that social media is directly harming children, policymakers have started to introduce legislation that requires technology companies to be safe by design through “duty of care” provisions. Unlike regulations that focus on product safety, these bills incorporate technosolutionist logics into regulation by presuming that technology companies can remedy complex harms like mental health duress and bullying if their products were only designed better. In this paper, we unpack the theory of change at the center of the “duty of care” included in the “Kids Online Safety Act” (KOSA). We argue that techno-legal solutionism is both ineffective as a framework …

My Body, Whose Choice? A Case For A Fundamental Right To Bodily Autonomy, Miri Trauner

Brooklyn Law Review

In 2022, the US Supreme Court decided Dobbs v. Jackson Women’s Health Organization, which overturned Roe v. Wade and the fundamental right to abortion it had established nearly fifty years prior. The Court’s decision threw into uncertainty the future of not only reproductive rights in this country, but also many other individual rights. At the same time as the decision, the world was still reeling from a global pandemic, and the development of COVID-19 vaccines had spurred widespread controversy over the constitutionality of vaccine mandates. Both advocates for abortion access and opponents to vaccine mandates shared a common cry: “my …

Speaking Back To Sexual Privacy Invasions, Brenda Dvoskin

Washington Law Review

Many big players in the internet ecosystem do not like hosting sexual expression. They often justify these bans as a protection of sexual privacy. For example, Meta states that it removes sexual imagery to prevent the nonconsensual distribution of sexual images. In response, this Article argues that banning digital sexual expression is counterproductive if the aim is to alleviate the harms inflicted by sexual privacy losses.

Contemporary sexual privacy theory, however, lacks analytical tools to explain why nudity bans harm the interests they intend to protect. This Article aims at building those tools. The main contribution is an invitation to …

The Consumer Bundle, Shelly Kreiczer-Levy

Washington Law Review

Can property law have a consumer protection purpose? One of the most important consumer law concerns today is the limited control consumers have over the digital assets and software-embedded products they purchase. Current proposals for reform focus on classifying the transaction as either license or sale and rely mostly on contract law and consumer protection regulation with a few calls for restoring ownership rights. This Article argues that property law can protect consumers by establishing a minimum bundle of rights for consumers: the “consumer’s bundle.” Working with property theory and an analysis of property values, this Article explains the importance …

The Kids Are Not Alright: Negative Consequences Of Student Device And Account Surveillance, Ashley Peterson

Washington Law Review

In recent years, student surveillance has rapidly grown. As schools have experimented with new technologies, transitioned to remote and hybrid instruction, and faced pressure to protect student safety, they have increased surveillance of school accounts and school-issued devices. School surveillance extends beyond school premises to monitor student activities that occur off-campus. It reaches students’ most intimate data and spaces, including things students likely believe are private: internet searches, emails, and messages. This Comment focuses on the problems associated with off-campus surveillance of school accounts and school-issued devices, including chilling effects that fundamentally alter student behavior, reinforcement of the school-to-prison pipeline, …

Filtered Dragnets And The Anti-Authoritarian Fourth Amendment, Jane R. Bambauer

UF Law Faculty Publications

Filtered dragnets are digital searches that identify a suspect based on the details of a crime. They can be designed to withhold information from law enforcement unless and until there is a very high probability that the individual has committed the offense. Examples today include DNA matching, facial recognition from photographs or video of a crime, automated child sexual abuse material detection, and reverse geolocation (geofence) searches. More are sure to come, and their wide-scale use will be irresistible to improve the low rates of criminal detection that currently afflict many communities.

However, filtered dragnets imperil society precisely because they …

Legal And Ethical Challenges Raised By Advances In Brain-Computer Interface Technology, Colin Conrad, Carla Heggie

Canadian Journal of Law and Technology

Brain-computer interfaces (BCI) consist of hardware and software that allow humans to control computers with their brain signals alone. Though these technologies are not new, existing approaches to BCI are either very limited in their capabilities or require highly invasive surgery. However, BCI has recently received increased attention due to advances that enable enhanced usability with less invasive approaches. Such advances could radically change the acceptance of the technology and BCI might become commonplace in the coming decades. In this article, we provide a technology scholar’s perspective on how these recent advances in BCI present new legal and ethical considerations. …

More Than ‘‘Responsible Ai” Bridging Artificial Intelligence Systems (Ais) And Aisystems Ethics Into Practice, Ruth Bankey

Canadian Journal of Law and Technology

This article reflects on the question ‘‘how should we approach the ethics of AI and technology?” through the example of how the Canada Revenue Agency (CRA) is working within this space to develop its Artificial Intelligence Systems (AIS) Ethics Lifelong Learning and Professional Development Strategy. This strategy is connected, but also acts as a critical counterpoint, to approaches to AI governance and accountability that are reliant on a notion of ‘‘Responsible AI”. In these contexts, responsible AI is understood as the regulatory adoption of ‘‘rules” diffused through a normative structure of hierarchical authority within the organization or business. Rather, this …

Legal Framework For The Use Of Artificial Intelligence (Ai) Technology In The Canadian Criminal Justice System, Gideon Christian

Canadian Journal of Law and Technology

This article seeks to identify and examine critical issues arising from the deployment and use of AI recidivism risk assessment tools in the Canadian criminal justice system. It commences with the historical evolution of these tools in the criminal justice system, tracing their development from the first generation to the emergence of AI-driven risk assessments. By examining the progression of risk assessment tools from their origins to the current AI-powered systems this research aims to provide a comprehensive understanding of the challenges and opportunities that these tools present. The article then delves into crucial issues such as algorithmic bias, highlighting …

Critical Data Theory, Margaret Hu

William & Mary Law Review

Critical Data Theory examines the role of AI and algorithmic decisionmaking at its intersection with the law. This theory aims to deconstruct the impact of AI in law and policy contexts. The tools of AI and automated systems allow for legal, scientific, socioeconomic, and political hierarchies of power that can profitably be interrogated with critical theory. While the broader umbrella of critical theory features prominently in the work of surveillance scholars, legal scholars can also deploy criticality analyses to examine surveillance and privacy law challenges, particularly in an examination of how AI and other emerging technologies have been expanded in …

Distinguishing Privacy Law: A Critique Of Privacy As Social Taxonomy, María P. Angel, Ryan Calo

Articles

What distinguishes privacy violations from other harms? This has proven a surprisingly difficult question to answer. For over a century, privacy law scholars labored to define the elusive concept of privacy. Then they gave up. Efforts to distinguish privacy were superseded at the turn of the millennium by a new approach: a taxonomy of privacy problems grounded in social recognition. Privacy law became the field that simply studies whatever courts or scholars talk about as related to privacy.

Decades into privacy as social taxonomy, the field has expanded to encompass a broad range of information-based harms—from consumer manipulation to algorithmic …