Internet Law Commons^™

Bringing Section 8 Home: An Argument For Recognizing A Reasonable Expectation Of Privacy In Metadata Collected From Smart Home Devices, Ana Qarri

Canadian Journal of Law and Technology

Internet of Things devices (also known as smart home devices) are a fast-growing trend in consumer home electronics. The information collected from these devices could prove very useful to law enforcement investigations. These individual pieces of metadata — the collection of which might appear harmless on its face — can be highly revealing when combined with other metadata or information otherwise available to law enforcement. This article builds an argument in favour of recognizing a reasonable expectation of privacy in metadata collected from smart home devices under section 8 of the Canadian Charter of Rights and Freedoms. This article presents …

Let The Machines Do The Dirty Work: Social Media, Machine Learning Technology And The Iteration Of Racialized Surveillance, Subhah Wadhawan

Canadian Journal of Law and Technology

Post 9/11, where the current social and cultural temperature has constructed Islam as interchangeable with terrorism, digital intermediaries have responded with increased censorship of speech related to, emerging from, or advocating Islamic ideology. At the heart of this paper is the argument that digital intermediaries have relied on the opaqueness of machine learning technology (‘‘MLT”) to realize racialized surveillance, whereby speech concerning Islamic content has been disproportionally censored. This paper maps out how inherent biases concerning the ideology of Islam have been interwoven into the coding and machine learning used by the major tech giants. As a result of the …

Intragovernmental Speech And Sanction, Katherine A. Shaw

Articles

This Essay, prepared as part of a symposium on Professor Helen Norton’s The Government’s Speech and the Constitution, asks what role, if any, we should understand the Constitution to play in mediating disputes over speech between and among government entities. Focusing on the examples of impeachment and censure, the piece considers scenarios in which one arm of government takes action in response to the speech of another arm or entity of government, exploring what role the Constitution should play in shaping or constraining those responses.

Verification Dilemmas In Law And The Promise Of Zero-Knowledge Proofs, Kenneth A. Bamberger, Ron Canetti, Shafi Goldwasser, Evan J. Zimmerman

Faculty Scholarship

Individuals who wish to access a website or qualify for a loan are expected to expose personally identifying information, undermining their privacy and security. Firms share proprietary information in dealmaking negotiations which, if the deal fails, may be used by the negotiating partner for a competitive advantage. Regulators are expected to disclose their algorithmic tools to comply with public transparency and oversight requirements, a practice that risks rendering these tools circumventable and ineffective. Litigants might have to reveal trade secrets in court proceedings to prove a claim or defense. Such “verification dilemmas” — costly choices between opportunities that require the …

Ships Passing In The Night: The Communications Act And The Convergence On Broadband, Stuart Minor Benjamin

Faculty Scholarship

The Communications Act of 1934 and its amendments (the “Act”), and the regulations implementing them, have been enormously important to traditional telephony, broadcasting, and multichannel video. Meanwhile, the internet is barely mentioned in the Act. It thus might seem reasonable to conclude that the Act stands as a colossus and that the argument for overhauling it has grown much stronger as the Telecommunications Act of 1996 (the “1996 Act”) becomes ever more outdated. In this Article I suggest otherwise. Specifically, I make three claims—one descriptive, one a bit speculative, and one normative. The descriptive claim is that significant portions of …

Legislating Data Loyalty, Woodrow Hartzog, Neil Richards

Faculty Scholarship

Lawmakers looking to embolden privacy law have begun to consider imposing duties of loyalty on organizations trusted with people’s data and online experiences. The idea behind loyalty is simple: organizations should not process data or design technologies that conflict with the best interests of trusting parties. But the logistics and implementation of data loyalty need to be developed if the concept is going to be capable of moving privacy law beyond its “notice and consent” roots to confront people’s vulnerabilities in their relationship with powerful data collectors.

In this short Essay, we propose a model for legislating data loyalty. Our …

Legal Introspection Towards The Development Of Right To Privacy As Fundamental Right In India, Payal Thaorey

Indonesia Law Review

Privacy of the individual is an essential aspect of dignity. The ability of the individual to protect a zone of privacy enables the realization of the full value of life and liberty. Liberty has a broader meaning of which privacy is a subset. All liberties may not be exercised in privacy. Yet others can be fulfilled only within a private space. Privacy enables the individual to retain the autonomy of the body and mind. The autonomy of the individual is the ability to make decisions on vital matters of concern to life. The journey of right to privacy has been …

Regulating Data Exclusivity Of Ride-Hailing Service In Indonesian Competition Law, Annisa Rahma Diasti

Indonesia Law Review

The digital ride-hailing service platforms have advanced significantly due to technological development. It resulted in lower consumer costs and better-quality service. Thus, consumers opted for such platforms more than the conventional transportation, resulting in their exponential growth over the years such as Gojek and Grab in Indonesia. Their strong market position was achieved quickly, facilitated by innovation advantages such as indirect network effects and algorithm-based analysis of users’ past data. Ultimately, data has become a barrier for potential competitors to entering the market. Simultaneously, the incumbents or the dominant market holders likely to use a technology-based strategy by keeping access …

Establishing A Legitimate Indonesia’S Government Electronic Surveillance Regulation: A Comparison With The U.S. Legal Practices, Citra Yuda Nur Fatihah

Indonesia Law Review

Cybersecurity and privacy have now become a matter of increasing concern for citizens, the private sector, and the Indonesian government. The government is currently struggling to combat cyberattacks and data breaches. Indonesia is, in fact, in the early stages of developing a national cybersecurity strategy. The legal framework for cybersecurity in Indonesia is still weak. The one and only legal basis for regulating cybersecurity, privacy, and security, in Indonesia so far is the Electronic Information and Transactions Law No. 11/2008 and its revised version Law No.19/2016. Furthermore, the government through the Indonesian Ministry of Communication and Information has just issued …

Defend Forward & Sovereignty: How America’S Cyberwar Strategy Upholds International Law, Elya Taichman

University of Miami Inter-American Law Review

To thwart a seemingly neve rending bombardment of cyberattacks, the U.S. Department of Defense recently implemented a new strategy – defending forward. This approach demands persistently engaging the enemy on a daily basis to disrupt cyber activity. Rather than waiting to be attacked, the United States is bringing the fight to the enemy. However, this strategy poses fascinating and complex questions of international law. In particular, because most defend forward operations fall within the gray zone of warfare, it remains unclear whether these operations violate the sovereignty of American adversaries or even third party nation states in whose cyberspace U.S. …

Analysis Of Section 230 Under A Theory Of Premises Liability: A Focus On Herrick V.Grindr And Daniel V. Armslist, Kassandra C. Cabrera

University of Miami Business Law Review

Section 230 of the Communications Decency Act (“CDA”) has been held to give online service providers acting as interactive computer services sweeping immunity for content posted on their platforms. The intention behind the creation of Section 230 was not to immunize online service providers from all liability. Rather, Section 230 was enacted to protect online intermediaries acting as “Good Samaritans” – those who made “good faith” efforts to restrict unlawful or harmful content, but due to the breadth of the internet and advancements in technology over or under-filtered content on their platforms. This note outlines an approach for courts to …

Indiana Law’S Lubin, Sun Help Advise Kosovo Government On Country’S Cybersecurity Act, James Owsley Boyd

Keep Up With the Latest News from the Law School (blog)

No abstract provided.

Uncertain Terms, Leah R. Fowler, Jim Hawkins, Jessica L. Roberts

Notre Dame Law Review

Health apps collect massive amounts of sensitive consumer data, including information about users’ reproductive lives, mental health, and genetics. As a result, consumers in this industry may shop for privacy terms when they select a product. Yet our research reveals that many digital health tech companies reserve the right to unilaterally amend their terms of service and their privacy policies. This ability to make one-sided changes undermines the market for privacy, leaving users vulnerable. Unfortunately, the current law generally tolerates unilateral amendments, despite fairness and efficiency concerns. We therefore propose legislative, regulatory, and judicial solutions to better protect consumers of …

Autonomous Corporate Personhood, Carla L. Reyes

Washington Law Review

Several states have recently changed their business organization law to accommodate autonomous businesses—businesses operated entirely through computer code. A variety of international civil society groups are also actively developing new frameworks— and a model law—for enabling decentralized, autonomous businesses to achieve a corporate or corporate-like status that bestows legal personhood. Meanwhile, various jurisdictions, including the European Union, have considered whether and to what extent artificial intelligence (AI) more broadly should be endowed with personhood to respond to AI’s increasing presence in society. Despite the fairly obvious overlap between the two sets of inquiries, the legal and policy discussions between the …

Content Moderation Remedies, Eric Goldman

Michigan Technology Law Review

This Article addresses a critical but underexplored aspect of content moderation: if a user’s online content or actions violate an Internet service’s rules, what should happen next? The longstanding expectation is that Internet services should remove violative content or accounts from their services as quickly as possible, and many laws mandate that result. However, Internet services have a wide range of other options—what I call “remedies”—they can use to redress content or accounts that violate the applicable rules. This Article describes dozens of remedies that Internet services have actually imposed. It then provides a normative framework to help Internet services …

Individuals As Gatekeepers Against Data Misuse, Ying Hu

Michigan Technology Law Review

This article makes a case for treating individual data subjects as gatekeepers against misuse of personal data. Imposing gatekeeper responsibility on individuals is most useful where (a) the primary wrongdoers engage in data misuse intentionally or recklessly; (b) misuse of personal data is likely to lead to serious harm; and (c) one or more individuals are able to detect and prevent data misuse at a reasonable cost.

As gatekeepers, individuals should have a legal duty to take reasonable measures to prevent data misuse where they are aware of facts indicating that the person seeking personal data from them is highly …

Copyright’S Deprivations, Anne-Marie Carstens

Washington Law Review

This Article challenges the constitutionality of a copyright infringement remedy provided in federal copyright law: courts can order the destruction or other permanent deprivation of personal property based on its mere capacity to serve as a vehicle for infringement. This deprivation remedy requires no showing of actual nexus to the litigated infringement, no finding of willfulness, and no showing that the property’s infringing uses comprise the significant or predominant uses. These striking deficits stem from a historical fiction that viewed a tool of infringement, such as a printing plate, as the functional equivalent of an infringing copy itself. Today, though, …

Copyright’S Techno-Pessimist Creep, Xiyin Tang

Fordham Law Review

Government investigations and public scrutiny of Big Tech are at an all-time high. While current legal scholarship and government focus have centered overwhelmingly on whether and how antitrust law and § 230 of the Communications Decency Act can be revised to address platform dominance, scant attention has been paid to another, almost unseen attempt to regulate Big Tech: copyright law. The recent adoption in Europe of Article 17 of the Copyright Directive, which holds internet platforms liable for user-generated creative content unless they obtain costly content licenses, is the most direct example of such regulation—and may serve as precedent for …

Seeking A Safe Harbor In A Widening Sea: Unpacking The Schrems Saga And What It Means For Transatlantic Relations And Global Cybersecurity, Scott J. Shackelford

William & Mary Bill of Rights Journal

The Article is structured as follows. Part I examines Schrems I (Schrems v. Data Protection Commissioner) and the fall of the Safe Harbor regime. Part II analyzes Schrems II (Data Protection Commissioner v. Facebook & Max Schrems) along with the rise and fall of Privacy Shield. Part III focuses on opportunities to bridge the data governance divide and present a united front to help ensure a free, open, interoperable, secure, and resilient vision for cyberspace.

This abstract has been adapted from the author's introduction.

You Are Not A Commodity: A More Efficient Approach To Commercial Privacy Rights, Benjamin T. Pardue

Washington Law Review

United States common law provides four torts for privacy invasion: (1) disclosure of private facts, (2) intrusion upon seclusion, (3) placement of a person in a false light, and (4) appropriation of name or likeness. Appropriation of name or likeness occurs when a defendant commandeers the plaintiff’s recognizability, typically for a commercial benefit. Most states allow plaintiffs who establish liability to recover defendants’ profits as damages from the misappropriation under an “unjust enrichment” theory. By contrast, this Comment argues that such an award provides a windfall to plaintiffs and contributes to suboptimal social outcomes. These include overcompensating plaintiffs and incentivizing …