Privacy Law Commons^™

In Celebration Of Dissents (And Lengthy Textbooks): How Digital Became Different For The Fourth Amendment And Why It Is Time For A Real Warrant Default, Stephen E. Henderson

Faculty Articles

The last decade has brought tremendous change to the Fourth Amendment, finally resulting in a ‘digital is different’ norm. We stand at an inflection point between a monolithic, analog past and a murky future of yet-unarticulated constitutional digital policing rules. It is a good time, then, to reflect upon how we came to be here and where we ought to go. This Essay first looks back to a monumental, majestic dissent: that of Justice Louis Brandeis in the 1928 decision of Olmstead v. United States. Every American, and especially every law student, ought to know that opinion, and judges …

A World Without Roe: The Constitutional Future Of Unwanted Pregnancy, Julie C. Suk

Faculty Scholarship

With the demise of Roe v. Wade, the survival of abortion access in America will depend on new legal paths. In the same moment that Dobbs v. Jackson Women’s Health Organization has constrained access to abortion in the United States, other constitutional democracies have moved in the opposite direction, expanding access to safe, legal, and free abortions. They have done so without reasoning from Roe’s vision of the private zone of unwanted pregnancy. The development of abortion law outside the United States provides critical insights that can inform future efforts to vindicate the constitutional rights of women facing unwanted pregnancies. …

Accidental Wiretaps: The Implications Of False Positives By Always-Listening Devices For Privacy Law & Policy, Lindsey Barrett, Ilaria Liccardi

Oklahoma Law Review

No abstract provided.

Requiring What’S Not Required: Circuit Courts Are Disregarding Supreme Court Precedent And Revisiting Officer Inadvertence In Cyberlaw Cases, Michelle Zakarin

Scholarly Works

As the age of technology has taken this country by surprise and left us with an inability to formally prepare our legal system to incorporate these advances, many courts are forced to adapt by applying pre-technology rules to new technological scenarios. One illustration is the plain view exception to the Fourth Amendment. Recently, the issue of officer inadvertence at the time of the search, a rule that the United States Supreme Court has specifically stated is not required in plain view inquiries, has been revisited in cyber law cases. It could be said that the courts interested in the existence …

Bringing Down Big Data: A Call For Federal Data Privacy Legislation, Madeline M. Cook

Oklahoma Law Review

No abstract provided.

Leveling Up To A Reasonable Woman's Expectation Of Privacy, Victoria Schwartz

University of Colorado Law Review

Various privacy law doctrines involve a reasonable expectation of privacy or similar analyses that take into account social privacy norms. For the most part, however, neither courts nor scholars have explicitly grappled with whether courts descriptively do or normatively should consider gender in deciding what constitutes a reasonable expectation of privacy. This is despite the fact that, in various scenarios, a reasonable woman’s expectation of privacy might vary from a man’s in light of different lived experiences, biological differences, and existing societal gendered privacy norms.

This Article addresses how courts do and should take into account a reasonable woman’s expectation …

Legislating Data Loyalty, Woodrow Hartzog, Neil Richards

Faculty Scholarship

Lawmakers looking to embolden privacy law have begun to consider imposing duties of loyalty on organizations trusted with people’s data and online experiences. The idea behind loyalty is simple: organizations should not process data or design technologies that conflict with the best interests of trusting parties. But the logistics and implementation of data loyalty need to be developed if the concept is going to be capable of moving privacy law beyond its “notice and consent” roots to confront people’s vulnerabilities in their relationship with powerful data collectors.

In this short Essay, we propose a model for legislating data loyalty. Our …

Privacy Pretexts, Rory Van Loo

Faculty Scholarship

Data privacy’s ethos lies in protecting the individual from institutions. Increasingly, however, institutions are deploying privacy arguments in ways that harm individuals. Platforms like Amazon, Facebook, and Google wall off information from competitors in the name of privacy. Financial institutions under investigation justify withholding files from the Consumer Financial Protection Bureau by saying they must protect sensitive customer data. In these and other ways, the private sector is exploiting privacy to avoid competition and accountability. This Article highlights the breadth of privacy pretexts and uncovers their moral structure. Like most pretexts, there is an element of truth to the claims. …

The Surprising Virtues Of Data Loyalty, Woodrow Hartzog, Neil M. Richards

Faculty Scholarship

Lawmakers in the United States and Europe are seriously considering imposing duties of data loyalty that implement ideas from privacy law scholarship, but critics claim such duties are unnecessary, unworkable, overly individualistic, and indeterminately vague. This paper takes those criticisms seriously, and its analysis of them reveals that duties of data loyalty have surprising virtues. Loyalty, it turns out, can support collective well-being by embracing privacy’s relational turn; it can be a powerful state of mind for reenergizing privacy reform; it prioritizes human values rather than potentially empty formalism; and it offers solutions that are flexible and clear rather than …

Returning To The Start? Federal Bipa Claims After Transunion V. Ramirez, Michael Goodyear

Articles & Chapters

The Illinois Biometric Information Privacy Act, more commonly known as “BIPA,” was the first statute to protect biometric privacy in the United States when it was passed in 2008. Although Texas and Washington have since passed their own biometric privacy laws, and other states have protected biometric information as part of more general data privacy legislation, BIPA remains the most powerful such law in the country due to being the only biometric privacy law to contain a private right of action. BIPA has also proven to be an important precedent for other states, such as New York, that are currently …

Putting Cano On Ice – A Path Forward For Border Searches Of Electronic Devices, Davis Price Shugrue

Vanderbilt Journal of Entertainment & Technology Law

Across the country, circuit courts disagree over what level of suspicion, if any, is required for border officials to search electronic devices. This leaves law enforcement agencies in the lurch because they must craft nationwide policies that cover jurisdictions with differing rules. The Supreme Court should bring this quandary to an end by holding that no reasonable suspicion or warrant is required for border searches of electronic devices. Many scholars and litigants have called for a reasonable suspicion or warrant requirement in light of Supreme Court decisions like Riley and Carpenter that recognize the privacy concerns raised by searches of …

Big Brother Is Scanning: The Widespread Implementation Of Alpr Technology In America’S Police Forces, Yash Dattani

Vanderbilt Journal of Entertainment & Technology Law

Automatic License Plate Readers (ALPRs) are an increasingly popular tool in police departments across the United States. At its core, ALPR technology functions in a relatively simple manner. The technology has two major components: the actual scanners, which record license plates, and the databases which collect, compile, and analyze this information for officers to access at the click of a button. Although this technology first came to the United States in 1998 as a form of rudimentary border security, its purpose and capabilities have rapidly grown. Now, in 2022, ALPR has evolved into a frighteningly powerful piece of technology, potentially …

Contracts Formed By Software: An Approach From The Law Of Mistake, Vincent Ooi

Research Collection Yong Pung How School Of Law

A ‘Contracting Problem’ arises when software is used to autonomously enter into contracts without human input. Questions arise as to how and whether there can be an expression of an objective intention to be legally bound. This article considers three leading solutions to the Contracting Problem. The ‘Mere Tools Theory’, which views software as ‘mere tools’ of communication, is too harsh as it binds users to any software malfunction. The Agency Approach, which treats software as Electronic Agents, capable of contracting on behalf of their users, is untenable as it ascribes unrealistic characteristics to software. The article submits that the …

The New Bailments, Danielle D'Onfro

Scholarship@WashULaw

The rise of cloud computing has dramatically changed how consumers and firms store their belongings. Property that owners once managed directly now exists primarily on infrastructure maintained by intermediaries. Consumers entrust their photos to Apple instead of scrapbooks; businesses put their documents on Amazon’s servers instead of in file cabinets; seemingly everything runs in the cloud. Were these belongings tangible, the relationship between owner and intermediary would be governed by the common-law doctrine of bailment. Bailments are mandatory relationships formed when one party entrusts their property to another. Within this relationship, the bailees owe the bailors a duty of care …

Understanding American Privacy, Neil M. Richards, Andrew B. Serwin, Tyler Blake

Scholarship@WashULaw

This Article is an explanation of some of the key features of American privacy law for a general audience. In particular, it tries to explain American privacy law against the critique that because the US currently lacks a European-style privacy law, the United States lacks much in the way of privacy law. We argue that the lack of a European-style data protection law in the United States is not the end of the analysis. This article therefore offers a basic roadmap to American privacy law for the uninitiated. In order to understand American privacy, we believe that it is important …

The Gdpr As Privacy Pretext And The Problem Of Co-Opting Privacy, Neil M. Richards

Scholarship@WashULaw

Privacy and data protection law's expansion brings with it opportunities for mischief as privacy rules are used pretextually to serve other ends. This Essay examines the problem of such co-option of privacy using a case study of lawsuits in which defendants seek to use the EU’s General Data Protection Regulation (“GDPR”) to frustrate ordinary civil discovery. In a series of cases, European civil defendants have argued that the GDPR requires them to redact all names from otherwise valid discovery requests for relevant evidence produced under a protective order, thereby turning the GDPR from a rule designed to protect the fundamental …

Legislating Data Loyalty, Neil M. Richards, Woodrow Hartzog

Scholarship@WashULaw

Lawmakers looking to embolden privacy law have begun to consider imposing duties of loyalty on organizations trusted with people’s data and online experiences. The idea behind loyalty is simple: organizations should not process data or design technologies that conflict with the best interests of trusting parties. But the logistics and implementation of data loyalty need to be developed if the concept is going to be capable of moving privacy law beyond its “notice and consent” roots to confront people’s vulnerabilities in their relationship with powerful data collectors.

In this short Essay, we propose a model for legislating data loyalty. Our …

The Surprising Virtues Of Data Loyalty, Neil M. Richards, Woodrow Hartzog

Scholarship@WashULaw

Lawmakers in the United States and Europe are seriously considering imposing duties of data loyalty that implement ideas from privacy law scholarship, but critics claim such duties are unnecessary, unworkable, overly individualistic, and indeterminately vague. This paper takes those criticisms seriously, and its analysis of them reveals that duties of data loyalty have surprising virtues. Loyalty, it turns out, can support collective well-being by embracing privacy’s relational turn; it can be a powerful state of mind for reenergizing privacy reform; it prioritizes human values rather than potentially empty formalism; and it offers solutions that are flexible and clear rather than …

Verification Dilemmas In Law And The Promise Of Zero-Knowledge Proofs, Kenneth A. Bamberger, Ron Canetti, Shafi Goldwasser, Evan J. Zimmerman

Faculty Scholarship

Individuals who wish to access a website or qualify for a loan are expected to expose personally identifying information, undermining their privacy and security. Firms share proprietary information in dealmaking negotiations which, if the deal fails, may be used by the negotiating partner for a competitive advantage. Regulators are expected to disclose their algorithmic tools to comply with public transparency and oversight requirements, a practice that risks rendering these tools circumventable and ineffective. Litigants might have to reveal trade secrets in court proceedings to prove a claim or defense. Such “verification dilemmas” — costly choices between opportunities that require the …

Fourth Amendment Limits On Extensive Quarantine Surveillance, Benjamin Wolters

Duke Journal of Constitutional Law & Public Policy Sidebar

The devastation wreaked by the COVID-19 pandemic spurred innovations in technology and public policy. Many countries rushed to implement extensive quarantines, and some introduced disease surveillance, including location tracking to enforce quarantines. Though the United States has never implemented high-tech quarantine surveillance, such technology will certainly be available for the next disease outbreak.

Absent significant doctrinal change, the Fourth Amendment likely bars some, but not all, forms of quarantine surveillance. Quarantine surveillance probably constitutes a Fourth Amendment “search” that generally must be backed by probable cause. This probable cause requirement, and its subcomponent of individualized suspicion, likely applies differently to …