Privacy Law Commons^™

Friend Or Tether: How Regulation Can Cut The Strings Of Manipulative Chatbots, Steve Hammerton

Student Journal of Information Privacy Law

In the time since AI chatbots and other LLMs became widely available to the public, there has been a pattern of deaths linked to interactions with this technology. While it was settled in early 2026, Garcia v. Character Technologies serves as a case study of how AI chatbots can negatively prey on vulnerable groups in the absence of interventions to mitigate harmful AI behaviors and tragic human outcomes. There is not a singular approach to regulating the harmful effects of predatory chatbots; however, this paper advocates for a harms-based regime influenced by protections in human-subject research. In a sense, AI …

Civil Rights And The Edtech Revolution, Kirsten Mettler

Student Journal of Information Privacy Law

Education technology (EdTech) products, like grading software and plagiarism detectors, have increasingly led to concerns over discrimination issues in schools. While, in some instances, schools can be held liable under the federal education civil rights statutes for these harms, that solution is insufficient. EdTech companies should themselves be held responsible. EdTech companies have not historically been understood to fall under these federal statutes, but this Article argues these companies can appropriately be governed by these laws as “recipients” of federal financial assistance. Most EdTech companies should qualify as “recipients” of federal financial assistance under one of three theories: they are …

Foreword, Caroline Aiello

Student Journal of Information Privacy Law

Foreword

Editorial Board Vol. 4 No. 1 (2026)., Caroline Aiello Editor-In-Chief

Student Journal of Information Privacy Law

Masthead Editorial Board Vol. 2 No. 1

Disciplining Mechanisms: Governing Data Markets With Competition And Regulation, Peter Ormerod

Faculty Publications

The past decade has witnessed conceptual renewals in both competition law and information privacy law. These regulatory movements—Neo-Brandeis antitrust and structural data governance—share the objective of recalibrating the balance of power between individuals and the massive data-processing firms that now dominate modern life.

Despite their common ends, policy interventions drawn from these schools of thought can work at cross purposes: competitive pressure can induce data exploitation, and privacy rules tend to benefit the largest firms.

This Essay exposes the friction in their relationship and offers guidance on how to mediate their tension. Competition policy alone will prove ineffective at indirectly …

Online Age Gating: An Interdisciplinary Evaluation, Noah Apthorpe, Brett Frischmann, Yan Shvartzshnaider

Faculty Publications

The recent surge in regulation seeking to establish age-based governance online is part of a decades-long attempt to establish online zoning. It is driven by active development of technologies to estimate or verify user age based on various characteristics of users, their credentials, or their activities. However, these developments have heightened prevailing concerns that online age gating technology will inevitably be abused and misused to cause a variety of privacy harms and rights infringements. This paper examines this ongoing debate by bridging technical and legal scholarship to explore the current state of online age-based governance. We discuss the current legal …

From Phone Booths To Digital Booths: Rethinking Fourth Amendment Privacy In The Age Of Open Source Intelligence, Major Theodore H. Massey Iii

Mercer Law Review

The use of Open Source Intelligence (“OSINT”) by the U.S. intelligence community marks a paradigm shift in national security practices, leveraging vast troves of publicly available and commercially acquired data. Yet this shift raises urgent constitutional questions regarding the applicability of the Fourth Amendment’s protections in the digital age. As OSINT practices increasingly rely on sophisticated aggregation techniques and artificial intelligence tools, the line between publicly available information and constitutionally protected privacy interests begins to blur. This Article critically examines whether certain forms of OSINT collection and analysis, particularly those that aggregate digital data at scale or use predictive algorithms, …

Can The Uk, Australia, And India Master The Defence Against Dark Patterns? A Comparative Study Of Jurisdictional Approaches, Swetha Meenal Ananthapadmanaban, Jeannie Marie Paterson

Indian Journal of Law and Technology

This paper examines how the United Kingdom (the ‘UK’), Australia, and India approach the regulation of one of the most pressing issues in contemporary digital markets – Dark Patterns. Taking the Digital Markets, Competition and Consumers Act 2024 (‘DMCC’) in the UK as a potential benchmark, it evaluates the structural strengths and shortcomings of Guidelines for Prevention and Regulation of Dark Patterns, 2023, in India and the proposed grey list of unfair trading practices in Australia. Through case studies of Amazon Audible’s subscription cancellation flow and Epic Games’ in-app purchase design, the paper illustrates how identical practices receive uneven legal …

Outbound Investment Restrictions And International Law’S Challenge, Harlan Grant Cohen

Seattle University Law Review

The Outbound Investment Rule, restricting U.S. investment in certain Chinese advanced technology sectors, has largely been portrayed as an incremental measure, a modest extension to fill loopholes in the existing investment screening regime. But while perhaps the logical next step in the securitization of the economy, the Outbound Investment Rule actually reflects a momentous shift in the relationship between governments and business, one playing out in the United States and around the world and worth attention. Unlike traditional investment screening, the Outbound Investment Rule operates like a sanctions regime, designed not to protect the U.S. economy, but to hamper the …

Resilient Dispute Resolution Systems For International Energy Conflicts, Guillermo J. Garcia Sanchez

Seattle University Law Review

Energy-related conflicts are on the rise, spanning diverse issues such as the impacts of rare mineral mining on local communities, the impacts of sanctions on energy investments due to the Russia-Ukraine war, and the impacts of expanded subsidies on the electric vehicle and solar panel industries. Increasingly, companies, communities, and governments are clashing over the challenges of pursuing disparate and sometimes competing energy policies. This Article argues that dispute resolution mechanisms in the energy investment sector must be fundamentally rethought. Traditional semi-adjudicatory models, which focus on winners and losers, fail to accommodate the complex and multifaceted nature of contemporary energy …

Restricting Data Flows Is A Sign Of Weakness, Nikolas Guggenberger

Seattle University Law Review

There has been a seismic shift in American attitudes toward the free flow of data across borders.  In less than a decade, the United States has transitioned from condemning barriers to digital trade to constructing a digital fortress of its own. It passed legislation requiring TikTok’s parent company to divest its U.S. operations or face a nationwide ban affecting 170 million U.S. users, citing national security concerns about its ties to China and the potential for data surveillance and content manipulation. Upon legal challenge by TikTok on First Amendment grounds, the Supreme Court affirmed the ban’s constitutionality. Recent federal legislation …

Product Nationality And Corporate Identity, Trang (Mae) Nguyen

Seattle University Law Review

Global supply chains have long depended on a deceptively technical device: the attribution of a “nationality” to goods. A trade law principle, rules of origin assign products an “economic passport” that governs how they are treated at the border, including what markets they may enter and which tariff rates apply. In recent years, however, product nationality has taken on a new and far more ambitious role. As U.S. trade policy increasingly intersects with national security and human rights policy, policymakers rely on nationality-based measures to police supply chain linkages, curb geopolitical issues, and discipline firms for their links to forced …

Global Supply Chain Resilience In Emerging Technologies: A Case Study Of Bitcoin Mining, Kishanthi Parella, Carla L. Reyes

Seattle University Law Review

The United States has put into motion bold plans in critical and emerging technologies to bolster its national and economic security.  For example, the federal government created a national bitcoin strategic reserve and a stockpile of other cryptocurrency; while several states have committed to or are considering similar goals.  However, the security of these reserves is dependent on two types of supply chains within the Bitcoin mining industry: analogue supply chains, relating to the physical components needed for Bitcoin mining, and data supply chains, relating to the complex and layered logistical network of actors that create input into the software …

Volume 49 Masthead

Seattle University Law Review

Volume 49 Masthead

A Comparative Study Of Chinese And American Approaches To Shaping International Outer Space Law And Norms, Ariel G. Silverman

Seattle University Law Review

This article explores convergences and divergencies in the United States and PRC’s responses to the stalemate in the United Nations over the future of outer space resource governance. I do so by systematically analyzing these leading space-faring nations’ policy-positions and tactics deployed to shape norms around three substantive areas of outer space resource governance: rights of ownership and scope of utilization of space resources, mechanization of the “benefits sharing” principle, and the rights and responsibilities of the private sector. I theorize that these leading space-faring nations have adopted divergent approaches due to their differing historical relationships with international law and …

Table Of Contents

Seattle University Law Review

Table of Contents

Third-Party Funding: Balancing Transparency, National Security, And Access To Justice, Victoria Shannon Sahani

Seattle University Law Review

Many lawmakers who have recently become aware of the multi-billion-dollar global third-party funding industry are raising new national security concerns that further complicate preexisting, longstanding debates about transparency, disclosure, access to justice, and the best way to regulate third-party funding. In response, this Article briefly asserts three main points relating to the question of how best to regulate third-party funding. First, this Article explains the third-party funding industry, including its global regulatory landscape and how it serves three distinct populations: consumers, businesses, and law firms. Second, this Article explains that third-party funding is one tool that can help expand access …

The Field Of International Business Transactions Law, Kathleen Claussen

Seattle University Law Review

This Article studies the evolution of the scholarly subfield referred to as the law of “international business transactions” (IBT). It reviews data on academic articles, courses, textbooks and other signifiers of the growth of this research area. Beginning around 1960, scholars began to use the term “international business transactions” and by the 1980s, several law schools were offering a course by that title. A handful of dedicated textbooks soon followed. These data reflect a gradual increase in research on the topic of IBT, particularly in the United States, but also considerable diversity of subject matters covered by those works. The …

Kim Gyeong-Seok And The Origins Of Northeast Asia’S Corporate Accountability Movement For War And Colonialism, Timothy Webster

Seattle University Law Review

For the past three decades, a transnational reparations movement has unfolded across Northeast Asia. Hundreds of victims—assisted by attorneys, academics, and activists—seek remedies from Japan for various atrocities committed during World War II, colonialism, and other historical injustices.  They press their claims in street protests, legislative hearings, dramatic performances, and other fora.  The “comfort women” are the best known of these claimants; their global redress campaign ex-tends from noisy protests outside of Japan’s embassy in Seoul, to mute statues in raucous boroughs of Berlin.  More obscure, though larger in number, were the roughly one million Koreans who performed forced labor …

Navigating Compliance In A Geopolitical Era: The Case Of Chinese Multinationals In The United States, Ji Li

Seattle University Law Review

This Article examines how Chinese multinational companies (MNCs) approach compliance in the United States amid deepening geo-political rivalry and intensified regulatory scrutiny. Drawing on original survey data, this Article maps variations in compliance structures, staffing, and governance mechanisms across Chinese firms and identifies key determinants such as industry-specific regulatory intensity, listing status, and organizational imprinting from headquarters. The analysis employs a dual institutional framework to explain how compliance systems emerge from the interplay between host-state regulatory demands and home-state institutional legacies, producing hybrid structures that blend local adaptation with headquarters-driven replication. Findings reveal that while certain compliance features—such as committee …

Social Media’S Death Toll: Who Should Be Held Liable?, Sara Fradi

Seattle Journal of Technology, Environmental, & Innovation Law

No abstract provided.

The Mind Has A Firewall: An Attempt To Preserve Human Mind Integrity., Sayed G. Batran

Theses and Dissertations

This thesis argues for the recognition of mind integrity as a distinct human right. It contends that existing protections, such as bodily integrity, privacy, and freedom of thought, are no longer sufficient to shield an individual’s mental domain from new forms of external interference enabled by neurotechnology, artificial intelligence, and pervasive data-driven systems. Mind integrity is defined as the right to govern one’s own mental life—to form, revise, and hold thoughts, beliefs, and desires based on reasons one endorses—free from significant, non-consensual interference or manipulation, regardless of the method used. The thesis first identifies concrete risks and regulatory vacuums by …

Project Risk Management In Ai-Enabled Systems: Managing Ethical, Privacy, And Governance Risks, Onome Cynthia Anakanire

Harrisburg University Dissertations and Theses

This research examined how Artificial intelligence (AI) has been embedded in project-based work, particularly in finance and software industries, where it enables efficiency and assists in complex decision-making. However, these innovations introduce significant ethical, privacy, and governance risks that traditional project risk management frameworks fail to adequately address. This study investigated how project managers can systematically integrate the management of these emerging risks into AI-enabled projects. Using a qualitative research design, the study drew on semi-structured interviews with project managers, compliance officers, and AI developers in finance, software and related sectors. Supplementary data included internal project documentation and risk registers. …

Divorce Of International Mixed Marriage And Marriage Held Abroad And Indonesian Private International Law, Tiurma M. Pitta Allagan

Indonesian Journal of International Law

The unstoppable tide of globalism not only brings an increasing commercial interconnectivity between nations, but also bonds of matrimony, and in turn, the chance of divorce. Indonesian courts entertaining international divorce cases is certainly not a rarity, neither divorce of the international mixed marriage nor the marriage that was held abroad. With two recent divorce cases having a foreign element, Indonesian courts declared having no jurisdiction under grounds of “litis pendentie” and forum non-convenience, including one by the Indonesian Supreme Court. In three other cases, the courts, after addressing the preliminary question of marriage, applied the “lex fori”, or Indonesian …

The Privacy Law Jigsaw: Piecing Together Legal Compliance When Pieces Don’T Fit, Roy Wyman, Wesley Mcculloch

Vanderbilt Journal of Entertainment & Technology Law

Over the past six years the United States has shifted from a relatively stable and laissez-faire privacy regime, anchored by a few, sector-specific federal statutes such as the Health Insurance Portability and Accountability Act, to an increasingly fragmented landscape dominated by numerous state-level consumer privacy laws. While these laws share commonalities, they also vary in important ways. This Article analyzes that patchwork legal regime and its impact on businesses through four points of friction: (i) statutory applicability and thresholds; (ii) notice-and-choice requirements; (iii) individual data-management rights; and (iv) controller–processor contracting obligations. This Article further explores how modern service-delivery models, especially …

Policing Agency Data Trusts, Barry Friedman

Northwestern University Law Review

Policing agencies are indiscriminately collecting, retaining, and using vast quantities of personal data from people who are suspected of no unlawful conduct whatsoever. This has caused expressions of concern or caution from many quarters, including—notably—the Director of National Intelligence (DNI). In a declassified report, the Office of the DNI stated that massive amounts of data are being collected “on nearly everyone that is of a type and level of sensitivity . . . that could be used to cause harm to an individual’s reputation, emotional well-being, or physical safety.”

This practice of universal data collection presents a conundrum. As many …

“I Like My Eighteenth Century Fresh”: Geofence Warrants, General Warrants, And The Evolving Fourth Amendment, Alexa M. Mascaró

University of Miami Law Review

Almost 250 years ago, our Founding Fathers fought to create a nation free from the confines of British imperial rule. Outrage over governmental intrusions enabled by suspicionless general warrants and writs of assistance galvanized an American polity determined to prevent the abuses that had come to define colonial life. The Fourth Amendment was enacted as a response to executive overreach, and it was deeply informed by the fraught history that led to its adoption—a history that is still used by courts today to define constitutional protections.

In the digital age, the rapid speed of technological innovation has created a precarious …

Editorial

Indian Journal of Law and Technology

No abstract provided.

The Evidence Machine: Rethinking Admissibility And Privacy In India's Ai Surveillance State, Samyukta Ramaswamy

Indian Journal of Law and Technology

The proliferation of artificial intelligence (‘AI’) surveillance technologies that utilise machine learning (‘ML’) capabilities to gather and process information to derive insights about individuals has transformed the surveillance landscape by enabling governments and private entities to engage in increasingly pervasive monitoring and data-driven profiling. In India, this transformation is compounded by the presence of executive-controlled surveillance mechanisms under the legal framework of the Telecommunications Act 2023, the Telecommunications (Procedures and Safeguards for Lawful Interception of Messages) Rules 2024, and the Digital Personal Data Protection Act 2023, amongst others, which authorises wide-ranging data interception and dragnet surveillance while exempting government agencies …

Allocating Data Protection Duties The Chinese Way

Washington International Law Journal

Abstract: China has been enacting data protection laws with distinctive features at an unprecedented pace, which makes it necessary to update existing studies on the Chinese approach to data protection. Unlike its predecessors, this Article focuses on developing a structured approach to dissecting the Chinese regime, especially the Personal Information Protection Law and latest case law. It analyzes how the laws allocate responsibilities among the three major parties involved in data protection—individual data subjects, data controllers, and regulators—and draws comparisons with European Union (EU) laws that inspired the Chinese laws. It argues that the way Chinese laws allocate data …