Privacy Law Commons^™

Why Corporate Boards Should Include Lgbtq+ People, Jeremy Mcclane, Darren Rosenblum

Seattle University Law Review

Corporate boardrooms sit at the heart of most of society’s most consequential decisions but fall far short of the diversity of our society. The current movement toward board diversification aims to remedy the underrepresentation of marginalized groups on corporate boards. More recently, some efforts have included LGBTQ+ people, even though the basis for their inclusion on corporate boards remains largely unstated. This Article examines both the normative and instrumental bases for LGBTQ+ inclusion in board diversity initiatives, articulating unspoken assumptions and linking LGBTQ+ people to the broader inclusion effort. In so doing, it begins to surface the unique issues LGBTQ+ …

Fourth Amendment Notice In The Cloud, Neil M. Richards, Jesse Lieberfeld

Scholarship@WashULaw

The widespread storage of documents through the range of Internet technologies known as “the cloud” offers tremendous convenience but also creates significant risks of exposure to third parties. In particular, law enforcement investigators seeking access to potentially relevant evidence have aggressively and extensively used the Electronic Communications Act of 1986 (“ECPA”) to execute digital searches. But a relatively obscure provision of ECPA, § 2703, allows law enforcement to search a person’s Fourth Amendment “papers” without them ever learning that a warrant has allowed the exposure of their private, sensitive, and possibly incriminating documents. What is more, federal and state law …

Incomplete Contracts And Future Data Usage, Jens Frankenreiter, Talia B. Gillis, Dan Svirsky

Scholarship@WashULaw

Most major jurisdictions require websites to provide customers with privacy policies. For consumers, a privacy policy's most important function is to provide them with a description of the online service provider's current privacy practices. We argue that these policies also serve a second, often-overlooked function: they allocate residual data usage rights to online services or consumers, including the power to decide whether a service can modify its privacy practices and use consumer data in novel ways. We further argue that a central feature of the E.U.'s General Data Protection Regulation (GDPR), one of the most comprehensive and far-reaching privacy regulatory …

The Carpenter Test As A Transformation Of Fourth Amendment Law, Matthew Tokson

Utah Law Faculty Scholarship

For over fifty years, the Fourth Amendment’s scope has been largely dictated by the Katz test, which applies the Amendment’s protections only when the government has violated a person’s “reasonable expectation of privacy.” This vague standard is one of the most criticized doctrines in all of American law, and its lack of coherence has made Fourth Amendment search law notoriously confusing. Things have become even more complex following the Supreme Court’s landmark decision in Carpenter v. United States, which has spawned its own alternative test for determining the Fourth Amendment’s scope. The emerging Carpenter test looks to the revealing nature …

Regulating The Risks Of Ai, Margot E. Kaminski

Publications

Companies and governments now use Artificial Intelligence (“AI”) in a wide range of settings. But using AI leads to well-known risks that arguably present challenges for a traditional liability model. It is thus unsurprising that lawmakers in both the United States and the European Union (“EU”) have turned to the tools of risk regulation in governing AI systems.

This Article describes the growing convergence around risk regulation in AI governance. It then addresses the question: what does it mean to use risk regulation to govern AI systems? The primary contribution of this Article is to offer an analytic framework for …

On Facial Recognition, Regulation, And "Data Necropolitics", Antonio Pele, Caitlin Mulholland

Indiana Journal of Global Legal Studies

This paper argues for actual and legal regulation of artificial intelligence (AI) and facial recognition. These new technologies represent great opportunities to improve the welfare of societies. However, some of their uses can also enhance discrimination and, eventually, lead to violence. From a comparative approach (examining the European Union and Brazil), we address the current and future aspects of facial regulation, AI, and personal data. This paper shows that regulation is relevant to protect the rule of law, free markets, and individual freedoms. It also examines the looming risks unfolding from the unregulated uses of new technologies. Our concept of …

Interpleader As A Vehicle For Challenging The Constitutionality Of Private Citizen Action Statutes, Delia Parker

Fordham Law Review

The rise of vigilante-esque statutes creates obstacles for litigants seeking to challenge a statute’s constitutionality. State legislatures in Texas and California enacted laws regulating constitutionally protected activity (abortion and firearm possession, respectively) through statutes enforced solely by private actors. The state legislatures cleverly crafted Texas S.B. 8, as well as other copycat statutes, as bounty hunter statutes to block litigants’ usual path to pre-enforcement adjudication—filing a claim against the state to enjoin its actors from enforcing the improper provisions.

The Texas and California state legislatures attempted to forbid constitutionally protected conduct by granting enforcement power to an infinite number of …

Privacy Discussion Forum: Introduction, Russell L. Weaver

FIU Law Review

No abstract provided.

The Need For Curtains Of The Soul: Privacy Versus Transparency In The Instrumented World Of Algorithmic Artificial Intelligence, Michael Martin Losavio

FIU Law Review

We approach a privacy singularity in pervasive data collection and inference that may reveal all about our lives. While privacy might not yet be dead, we struggle to maintain its shield for personal autonomy. Part of this contemporary challenge comes from the massive data sets generated every day everywhere. And then the powerful analytics that reveal all. This is further challenged by efforts at data transparency that may reveal too much of one’s life. Preservation of privacy, if we deem it important enough to preserve, must have a robust set of technical and legislative implementations on collection, storage, transmission and …

America’S Fraught Relationship With Privacy, Russell L. Weaver

FIU Law Review

No abstract provided.

Unmasking The Power Dynamic Between Local School Boards And The State Executive Branch: Implications For Future Local School Safety Protocols, Karla Michelle Cejas

FIU Law Review

The COVID-19 pandemic has brought attention to the government’s power in controlling the operation of public schools. The legal and political differences among local school boards and the State’s COVID policies are exemplified in media headline battles pertaining to school reopening and the Governor’s so called “anti-mask mandate.” The State capitalized on its emergency powers at the expense of providing local school boards with the autonomy to enact district-wide protective measures. Local school boards have faced several challenges in arguing against State Emergency Orders including a difficulty with proving state compulsion to comply with its directives, overly broad statutory language …

Dobbs In A Technologized World: Implications For Us Data Privacy, Jheel Gosain, Jason D. Keune, Michael S. Sinha

All Faculty Scholarship

In June of 2022, the U.S. Supreme Court issued its opinion in Dobbs v. Jackson Women’s Health Organization, overturning 50 years of precedent by eliminating the federal constitutional right to abortion care established by the Court’s 1973 decision in Roe v. Wade. The Dobbs decision leaves the decision about abortion services in the hands of the states, which created an immediately variegated checkerboard of access to women’s healthcare across the country. This in turn laid bare a profusion of privacy issues that emanate from our technologized world. We review these privacy issues, including healthcare data, financial data, website tracking and …

Police Secrecy Exceptionalism, Christina Koningisor

Utah Law Faculty Scholarship

Every state has a set of transparency statutes that bind state and local governments. In theory, these statutes apply with equal force to every agency. Yet, in practice, law enforcement agencies enjoy a wide variety of unique secrecy protections denied to other government entities. Legislators write police-specific exemptions into public records laws. Judges develop procedural approaches that they apply exclusively to police and prosecutorial records. Police departments claim special secrecy protections from the bottom up.

This Article maps the legal infrastructure of police-records secrecy. It draws upon the text of the public records statutes in all fifty states, along with …

A Concrete Proposal For Data Loyalty, Neil Richards, Woodrow Hartzog, Jordan Francis

Faculty Scholarship

Congress and state legislators are finally experimenting with new privacy frameworks, rights, and duties to move past the thoroughly critiqued “notice and choice” model for data privacy. While many new privacy proposals seek a more fortified version of the fair information practices, some legislators have placed a duty of data loyalty at the heart of their proposed privacy bills. This is important because a duty of data loyalty has the potential to anchor American privacy law in a way analogous to how the European Union approach is grounded in fundamental rights of privacy and data protection.

Unfortunately, there remains some …

A Scientific Approach To Tech Accountability, David Choffnes, Woodrow Hartzog, Scott Jordan, Athina Markopoulou, Zubair Shafiq

Faculty Scholarship

The Federal Trade Commission can only do so much to hold tech companies accountable. Enforcement agencies and the people they protect need help. One problem is that the inner workings of large organizations and complex algorithmically driven systems remain obscure and opaque while their privacy representations are voluminous and vague. In this Essay, we propose a scientific approach to tech accountability, where academic researchers can play a larger role in privacy policy. This approach involves surfacing a company’s privacy representations and statements, as well as measuring the actual behavior of their systems with respect to algorithms, user interfaces, and data …

Confidentiality Over Privacy, Stacey A. Tovino

Faculty Articles

No abstract provided.

Genealogy Sites And Adoptions–Connecting Families Or Ruining Them?, Taylor Bialek

Touro Law Review

No abstract provided.

Is There A Fundamental Right To Privacy When An Educational Institution Requires A Student To Disclose Proof Of His Or Her Vaccination Status?, Mary D. Fatscher

Touro Law Review

In 2020, the coronavirus disease (“COVID-19”) dominated the world. Although the public has progressively become more informed about the disease and how to safeguard itself, challenges persist as there is still much unknown. Aside from wearing masks, social distancing, and despite its undetermined consequences, the COVID-19 vaccination has emerged as a primary solution to substantially reducing the incidence and severity of the virus in our country. Many COVID-19 vaccine mandates were initiated once three pharmaceutical and biotechnology companies including Pfizer-BioNTech, Moderna, and Johnson & Johnson received Emergency Use Authorization from the Food and Drug Administration (“FDA”).

The Gdpr And Uk Gdpr And Its Impact On Us Academic Institutions, Leila Halawi, Alpesh Makwana

Publications

This research paper delves into the implications of the General Data Protection Regulation (GDPR) and the United Kingdom (UK) GDPR on academic institutions, shedding light on their significance for organizations and educational establishments handling data from individuals in the European Union (EU) and the UK. Non-compliance with these regulations can lead to substantial penalties. The study focuses specifically on US Higher Education and presents actionable measures that institutions can adopt to enhance compliance, fortify data protection, and safeguard the privacy of individuals.

Influencing “Kidfluencing”: Protecting Children By Limiting The Right To Profit From “Sharenting”, Charlotte Yates

Vanderbilt Journal of Entertainment & Technology Law

Statistics on children’s digital presences are staggering, with an overwhelming majority of children having unique digital identities by age two. The phenomenon of “sharenting” (parents sharing content of their children on social media) can start as early as a sonogram photo or a birth video and evolve into parent-run Instagram and TikTok accounts soon after. Content is often intimate, sometimes embarrassing, and frequently shared without children’s consent. Sharenting poses a myriad of risks to children including identity theft, digital kidnapping, exposure to child predators, emotional trauma, and social isolation. In the face of such significant risks to children’s well-being, one …