Privacy Law Commons^™

Agentizing Privacy Preferences Without Privatizing Data Protection Policy, Frank Pasquale, Vanna Carter

Cornell Law Faculty Publications

This essay explores how consumers might exercise newly restored agency in a digital environment increasingly shaped by generative AI. Rather than expecting consumers to read privacy-related terms of service, policymakers should encourage the emergence of Automated Consumer Agents (“ACAs”) capable of interpreting privacy provisions and acting on behalf of users according to their stated preferences. These systems could automatically reject objectionable forms of data extraction, translating consumer values into actionable decisions in online transactions.

Despite this promise, the rise of ACAs would also present new problems. Without supportive policy and legal frameworks, agentization of privacy preferences could itself reproduce or …

Is Your Data Good, Bad, Or Neutral?: Redefining Concreteness For Data Breach Harms, Jeeyoon Lim

Fordham Law Review

In recent years, the Supreme Court has tightened federal court standing requirements for intangible harms, including statutory harms. In TransUnion LLC v. Ramirez, the Court held that a mere statutory violation, absent a common-law analogue, is not sufficiently concrete to grant standing. The Court did not provide clear guidance as to how stringent the common-law analogue analysis must be, other than that it does not require an “exact duplicate.” Because of the ever-evolving nature of digital data, data breach victims attempting to enforce their statutory right to privacy in federal court have struggled to rely on tradition and history …

Fairer Public Benefit In Copyright Law, Amanda Levendowski Tepski

Cardozo Law Review

In 1966, a court considered expressly whether a secondary use of copyrighted works served a public benefit. While public benefit has become a subfactor of the fair use doctrine, it remains undefined, uncodified, and undertheorized. Courts often invoked public benefit in pivotal cases involving novel technologies, from home video recorders to digital libraries to algorithms—but they did not need to. After the recent Supreme Court decision in Google v. Oracle, however, public benefit is unavoidable: The Court stated that “we must take into account the public benefits the copying will likely produce.” A qualitative analysis of key public benefit cases …

When The Screen Lies: Navigating Privacy And Publicity In An Ai World, Nancy M. Menagh

Fordham Law Review

A key issue of the 2023 SAG-AFTRA strike was the use of generative AI in the entertainment industry and, more specifically, the creation of uncanny digital replicas of performers being used without their knowledge or consent. Since then, concerns have only intensified around the unauthorized creation and use of digital replicas and the ease with which they can be made and disseminated online. Currently, there is a patchwork of state laws that attempt to target these issues, but they have proven ineffective against the challenges presented by digital replicas.

This Note analyzes the problems digital replicas have raised in the …

Are Your Secrets Safe?: Imposing A Fiduciary Duty On Healthcare Ai Developers Dealing With Sensitive Health Information, Lauren Quinn

Fordham Law Review

In 1996, Congress passed the Health Insurance Portability and Accountability Act (HIPAA) to establish standards for transmitting health information. For decades, the HIPAA Privacy Rule has operated as the primary regulation protecting health information in the United States. However, in the decades since HIPAA was enacted, new technologies have demonstrated the shortcomings of the Privacy Rule. In particular, the development of healthcare artificial intelligence (AI) has created new privacy concerns and exacerbated existing ones. This Note examines the current healthcare privacy framework in the United States and considers how healthcare AI complicates it. This Note also explores how AI developers …

Civil Liability For Invasions Of Privacy: Whither Singapore?, Yu Han Lam

Research Collection Yong Pung How School Of Law

Intrusions upon privacy are becoming increasingly common in Singapore. Singapore has yet to establish a tort addressing this issue, although the SAL Law Reform Committee has proposed a tort of misuse of private information. Australia has also recently introduced a statutory tort of serious invasion of privacy. This article will argue for the need for a Singapore tort of intrusion upon seclusion, on top of the already proposed tort of misuse of private information, to cover more appropriately instances of intrusions upon privacy.

Dignity And Deepfakes, Michael Goodyear

Articles & Chapters

Today, we face a dangerous technosocial combination: AI-generated deepfakes and the Internet. Believable and accessible, these deepfakes have already spread sex, lies, and false advertisements across the Internet and targeted everyone from Taylor Swift to middle school students. Dissemination of deepfakes inflicts multifarious dignitary harms against their victims—especially women and LGBTQ+ persons—stripping them of control over their own identities, harming their reputations, and ostracizing them from society through shame.

Yet this is not the first time a new technology for capturing one’s likeness and a method for disseminating images threatened individuals’ dignity. In the late nineteenth century, the right of …

Law Enforcement, Reproductive Health Information, And The Hipaa Privacy Rule, Stacey A. Tovino

Faculty Articles

On April 26, 2024, the federal Department of Health and Human Services (HHS) promulgated a final rule (Final Rule) amending the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. The Final Rule prohibits HIPAA covered entities and business associates from using and disclosing protected health information (PHI) to conduct criminal, civil, or administrative investigations into an individual for the mere act of seeking, obtaining, providing, or facilitating lawful reproductive health care. The Final Rule also prohibits HIPAA covered entities and business associates from using and disclosing PHI to impose criminal, civil, and administrative liability on any individual, or to …

Full Issue

Indian Journal of Law and Technology

No abstract provided.

Editorial Board

Indian Journal of Law and Technology

No abstract provided.

Are You The Sum Of Your Data? Appropriation Of Digital Persona As Appropriation Of Likeness, Lyrissa Barnett Lidsky

UF Law Faculty Publications

A review of Zahra Takhshid's article, Data as Likeness, 112 Geo. L. J. 1161 (2024).

The “Founder’S Gaze”: How The Fourth Amendment Is A Surveillance Technology That Enables Ai To Scale Control Over The Subaltern, Diego H. Alcalá Laboy

Michigan Journal of Race and Law

Much has been written about the rise of artificial intelligence and machine learning applications and how the current Fourth Amendment law has been unable to mitigate the privacy harm that these tools produce. This article explores how the development and usage of AI and machine learning models is dependent on the originalism principles of Fourth Amendment Law. Utilizing Critical Surveillance Studies and Anticolonial Theory, I posit that the Fourth Amendment is a surveillance technology that categorizes conduct, persons, and places to impose the material conditions for the subjugation of historically minoritized communities within the United States. Furthermore, this article explores …

The House Always Learns: Integrating Ai Into Las Vegas Casino Surveillance And The Laws Behind The Lens, Taylor Dixon

UNLV Gaming Law Journal

No abstract provided.

"The Cake Is A Lie:" Locating Loot Boxes In Indian Gaming Framework, Aman Gupta, Samriddh Sharma

Indian Journal of Law and Technology

Lootboxes have become endemic in modern video games. These microtransactions allow users to purchase virtual containers without knowing their content, which is determined by chance. There have been increasing concerns about the negative impact of loot-box purchases on mental health and whether these amount to gambling under various laws. In response, several countries have started applying existing gambling laws or legislating new measures to regulate lootboxes. This raises questions about the present state of regulations in the Indian context and whether they are adequate in meeting the risks posed by lootboxes. In the present article, the authors explain the concept …

Steering Indian Financial Services Towards Digital Operational Resilience: A Cross-Sectoral Approach, Vaibhav Vijay Nishad, Smruti Kulkarni

Indian Journal of Law and Technology

In India, among the three financial regulators, RBI’s recent focus on creating a robust ICT risk management framework has been at the forefront of the country’s digital operational resilience strategy. The continuous cyber threats and recent digital operational failures have highlighted the need for further enhancements to strategies that establish strong ICT risk management. Addressing these cybersecurity vulnerabilities requires more than prescriptive rules; it demands holistic, flexible, adaptive, and coordinated regulatory approaches to strengthen digital operational resilience. This paper analyses the key issues that need resolution to advance these efforts. We identify the misalignment of economic incentives for compliance as …

Centring Marginalisation In The Development Of Digital Courts: Reflections From Argentina, India, Kenya, And Malaysia, Siddharth Peter De Souza, Varsha Aithala, Francisco Mignaquy, Mercy Muendo, Anisha Nadkarni

Indian Journal of Law and Technology

This paper presents a multi-jurisdictional analysis of digitalisation of justice and the perceived role of courts as public institutions upholding the rule of law and ensuring access to justice to all. Using selected examples from Argentina, India, Kenya and Malaysia, it examines the impact of digitalisation efforts of these countries on their citizens, marginalised populations, the State and private sector. We propose to design an approach to digital justice that centres people on the margins of digital transformation of courts. This includes three elements – first, engagement with people centered perspectives; second, focus on disadvantage and addressing socio-technical factors; and …

From ‘Gig Work’ To Algorithmically Mediated Work: Shifting The Focus To Technological Control In Work Regulation, Jasoon Chelat

Indian Journal of Law and Technology

Platform-based work is finding a place in legislative instruments in India in recent years, under the Code on Social Security, 2020, as well as state-level legislations. In this paper, I argue that these efforts to extend protections to gig or platform work are limited in their understanding of the way work is shaped by digital technologies both within and outside of platforms. Platform-based work regulation seems to have skipped a step: the regulatory discourse has moved on to a welfare-focused model present in informal work, without examining existing jurisprudence on worker rights relevant to digitally mediated work. These legislative instruments …

Losing The Big Picture: An Argument For Preserving Irpa Rights For Emotional Damages, Stephen Luke Winbery

Chicago-Kent Law Review

No abstract provided.

Immigrant Surveillance In San Diego During A Fascist Era, Jennifer L. Torres Leon

McNair Summer Research Program

The following qualitative study examines a new increase of technological surveillance used on immigrants by San Diego’s local law enforcement. Drawing from in-depth interviews of the San Diego Privacy Advisory Board and Trust SD, insights of technological related violations are sanctioned by the San Diego Police Department. This is done through ambiguous language regarding “criminal investigations” and lack of definitive use policy, despite several memorandums and recommendations by the SD Privacy Advisory Board. Present findings reveal a duality of immigrant surveillance instigating hyper-visible tracking and broadcasting an image of their criminality. This study contributes to scholarship or crimmigration and urban …

From Code To Compliance: Regulating Daos In Canada: Legal Frameworks And Challenges, Gulnoza Abdurakhmonova

Canadian Journal of Law and Technology

This paper examines the regulatory challenges surrounding Decentralised Autonomous Organizations (DAOs) in Canada and argues that existing legal frameworks— primarily designed for traditional corporate entities— are inadequate for addressing the unique characteristics of DAOs. While securities regulators have taken steps to oversee aspects of DAO activity, a broader regulatory framework is needed to provide legal clarity, address governance and liability concerns, and foster responsible innovation. This study recommends a dual approach: (1) extending corporate law reforms to define the legal status and obligations of DAOs, and (2) developing a regulatory framework that balances investor protection with the flexibility needed for …