Privacy Law Commons^™

Striving To Thrive: Balancing Digital Health Innovation And Patient Protection Under Thailand’S Legal Framework, Thidarat Liamsomboon

Theses and Dissertations

The digitalization of health care has fundamentally transformed how health care services are accessed, delivered, and experienced worldwide. Telemedicine, artificial intelligence–assisted diagnostics, electronic health records, wearables, and mobile health applications are no longer novelties, but have become a substantial part of a modern clinical practice. Although these technologies offer great prospects for making health care more accessible, reducing administrative burden, and improving the quality of care, they also pose significant legal and regulatory challenges. The rate of technological development has far outpaced Thailand’s existing legal frameworks for regulating medical practice, professional accountability, and patient protection. This regulatory “lag” has generated …

Democratizing Health Data: A Legal Framework For Privacy-Preserving, Government-Led Ai Collaboration, Nicole Nigri

Cybaris®

No abstract provided.

Defamation, Privacy, And The First Amendment: Cases & Problems (3rd Ed.), George Biashvili

Books

I created this resource in anticipation of teaching my Torts II class, which will primarily explore defamation and privacy torts. Though I searched for a suitable coursebook, I found that none contained all of the opinions I consider essential for teaching the nuances and complexities of these subjects. Additionally, I wanted to spare my students the exorbitant price tags associated with traditional law school texts. Hence, I assembled a collection of relevant privacy and defamation cases that align with the objectives of my course. Each case is accompanied by a set of questions to further stimulate class discussion. Where I …

Body Of Law: When Content Moderation Becomes Gender Oppression And Triggers Legal Consequences, Sarah E. Bahrenburg

Journal of Race, Gender, and Ethnicity

For as long as the Internet has existed, it has been used as a tool for good and as a tool for malice. However, there is a discrepancy between punishment for those maliciously invading individuals’ personal space and those posting consensual images of themselves for art or entertainment purposes (not to mention for work). Over the years, while attempting to create safe spaces for people to express themselves, the Internet has also created barriers to individuals doing just that. The Internet and the laws surrounding exposure therein have become increasingly misogynistic and anti-women’s sexual freedom. The laws encompassing safety on …

Not All Sunshine In Wisconsin: The Cloudy Public Disclosure Predicament Surrounding Trade Secrets, Amelia S. Murray

Marquette Intellectual Property & Innovation Law Review

This Comment will explore the current landscape surrounding trade secret protections in Wisconsin Open Records Law requests. The lack of access to state-protected trade secrets, and overall lack of transparency, effectively endangers the general health and safety of the Wisconsin public and environment. When a request is made for information under the Wisconsin Open Records Law pertaining to state information protected by trade secret, and the requester is denied access to such information due to its trade secrecy status, the state should have to disclose trade secret information if it poses a greater danger to environmental health, human health, or …

People V. Riche, Timothy Mccormick

NYLS Law Review

No abstract provided.

Privacy’S Autonomy Thicket: Disentangling Choice, Consent And Control, Jordan Francis, Woodrow Hartzog, Neil Richards

Faculty Scholarship

When it comes to talking about autonomy, privacy law could use a little clarity. Its discourse uses terms like “choice,” “consent,” and “control” to evoke autonomy, but these terms are too rarely defined and too often used interchangeably, even though they can mean very different things. The three terms have become entangled in a way that has become confusing and counterproductive. We call this problem “privacy’s autonomy thicket,” and it matters because it encourages talking past each other in policy debates, enabling the redefinition of these terms in misleading ways that produce weak and disempowering “notice and choice” regimes.

In …

Data Rights For Workers, Pauline Kim, Rachel Leavitt

Scholarship@WashULaw

Workers are subject to immense amounts of data collection on the job, and the algorithmic management tools built with that data can produce negative effects, including deskilling jobs, unstable work hours, reduced wages, and dangerous and degrading working conditions. Workers thus have significant interests how their data are collected and used, and yet they have been excluded from nearly all the recently enacted or proposed data protection laws. Their exclusion stems from data protection’s roots in privacy law and theory, which primarily focused on consumers as data subjects. Current data protection laws, even if expanded to cover workers, would provide …

Beyond Digital Pessimism: How A Focus On Trust Can Enhance Eu Digital Law, Neil M. Richards, Woodrow Hartzog, Claire Boine, Lea Despotis

Scholarship@WashULaw

Lawmakers looking to foster technological innovation on the European market are adopting laws they hope will promote consumer trust in digital products. Their strategy can be broken down into three components. First, they aim to empower consumers to choose how much data they want to share with companies through an express consent framework. Second, they seek to avoid harms from digital products through product safety law such as adapting the Product Safety Regulation to digital products or adopting the AI Act. Third, they endeavor to prevent manipulation of consumers through digital means.

In this essay, we argue that while laudable, …

Against Ai Half Measures, Woodrow Hartzog, Neil Richards, Ryan Durrie, Jordan Francis

Faculty Scholarship

So far, U.S. consumer protection policy for artificial intelligence (AI) accountability has largely consisted of industry-led approaches such as encouraging transparency, mitigating bias, promoting principles of ethics, and empowering people. These approaches are vital, but they are only half measures. To bring AI within the rule of law, lawmakers must start drawing substantive lines.

In this Article, we identify four AI regulatory approaches to consumer, data, and democratic harms as half measures. First, transparency does not produce accountability on its own. Second, while mitigating bias in AI systems is critical, even unbiased systems are a threat to the vulnerable. Third, …

The Hypocrisy Of Data Governance, Zubair Shafiq, Olivia Figueira, Athina Markopoulou, Woodrow Hartzog, Michael Lavine

Faculty Scholarship

“Data governance” is an empty term, like a Rorschach inkblot just waiting to be filled with meaning. Tech companies take advantage of this ambiguity to craft narratives about their data-governance capabilities to fit their audience and purpose. On one hand, tech companies brag about their data-governance capabilities when it fits their business model (for example, to advertisers) and public image (for example, to their customers). On the other hand, tech companies claim that meaningful data governance is challenging or impossible when accountability is demanded.

In this Article, we argue that tech companies systematically misrepresent or selectively ignore their data-governance capabilities. …

Corporate Law's Duty Of Data Loyalty, Andy Serwin, Neil Richards, Woodrow Hartzog, Ryan Durrie

Faculty Scholarship

Privacy law used to be a relatively tidy field, involving a few interesting but discrete topics like press disclosures of private facts, wiretapping, and the processing of personal data by internet companies. But as the digital revolution continues to disrupt area after area of human activity and software “is eating the world,” the core concerns of privacy law such as “when is it appropriate to process personal data?” have similarly entered field after field. Today, most fields of law, including discrimination law, antitrust, and international law, have found it necessary to reckon with the questions of informational harm and power …

From Privacy To The Data Economy: The Ftc’S Reframing Of Its Regulatory Priorities, Maria P. Angel

Scholarly Works

This Article argues that the Federal Trade Commission’s turn to “commercial surveillance” reflects a strategic shift away from traditional privacy frameworks toward addressing structural power dynamics in the data economy. Drawing on an analysis of 112 FTC documents, it identifies three core commitments: tackling systemic harms, adopting a political economy lens, and constraining corporate power. The Article contends that this reframing is both necessary in the AI age and should influence the future of privacy regulation in the United States, even amid efforts to limit the FTC’s authority.

A Proposed Tort To Address The Negligent Enablement Of Cloud Data Breaches, Michael L. Rustad

American University Business Law Review

[INTRODUCTION] The term “cloud computing” means the remote storage of software applications, tools, and data accessed through the internet. Cloud customers enter into subscription agreements with providers who give 24/7, on-demand, as-needed access to software, storage, and networking services owned and managed by providers through a web browser. “Many businesses are transitioning to the cloud for data storage, remote work, and collaboration.” Cloud providers operate their software as a software-as-a-service (“SaaS”) model, under which customers pay a subscription fee to access the software. Netflix and Amazon Prime Video are examples of subscription services that deliver television programs and videos through …

The Growing Divide: The Video Privacy Protection Act’S Inconsistent Subscriber Standard And The Need For Reform, Andrea Pacheco

American University Business Law Review

The Video Privacy Protection Act of 1988 (“VPPA”) has been brought into the twenty-first century due to a series of class action lawsuits surrounding consumer privacy rights in an increasingly digital world. A circuit split has emerged among the federal appellate courts on the meaning of the word “subscriber” under the VPPA and whether the statute’s protections should extend to casual users of goods and services provided by videotape service providers. The outcome of this debate carries significant implications for consumer privacy and business compliance obligations due to the escalation of business practices involving the collection of consumer data and …

Inside, Outside, And In Between: Black Homeplace As A Blueprint For Privacy Law, Nina-Simone Edwards

Library Scholarship

This essay reimagines the meaning of home and privacy for Black Americans by interrogating the legal and technological systems that routinely collapse the sanctity of the homeplace. Using the no-knock warrant as a central case study, this essay illustrates how state-sanctioned intrusions transform a space of rest, memory, and self-making into a site of violence. Although Fourth Amendment doctrine purports to guard against unreasonable searches, its prevailing binary framework–distinguishing only between “inside” and “outside” the home–renders Black domestic spaces uniquely vulnerable. Drawing from Critical Race Theory, particularly its social construction thesis, this essay shows how race, law, and technology co-produce …

Richmond Electronic Monitoring: The City Sees You While You're Sleeping, Fakira D. Johnson

Law Student Publications

The United States has increasingly recognized its reputation as a prison state, with widespread acknowledgment of its high incarceration rates. As of 2021, the United States imprisoned one out of every five prisoners in the world. Additionally, of its own population, the United States imprisoned one out of every one hundred people.

In response to this notoriety, worsening prison overcrowding, and the heightened risks posed by the COVID-19 pandemic, all fifty states, the District of Columbia, and the federal government increased their utilization of alternative measures to traditional incarceration. As both an addition and an alternative to traditional incarceration, criminal …

Forget Me Not? Machine Unlearning’S Implications For Privacy Law, Jevan Hutson, Cedric Whitney, Jay T. Conrad

Articles

Generative AI systems are increasingly relied on and are already actively reshaping how we think about privacy and data protection law. Models ingest and process vast amounts of personal and sensitive data, challenging assurances of compliance with legal frameworks like the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) with increasing intensity. Machine unlearning is an emerging tool in practitioners’ attempts to address these challenges: the act of selectively removing or suppressing specific data, such as personal data that a data subject requests be deleted, from AI models as means of complying with legal obligations or …

T.H. V. The Czech Republic: A Step Forward Or Back For Lgbtq+ Rights And Discourse In Europe With The First Openly Non-Binary Applicant?, Katherine Olsson

Human Rights Brief

On December 9, 2025, the European Court of Human Rights (ECtHR) issued a final judgment in the case of T.H. v. The Czech Republic.  The case concerned a non-binary individual, T.H., who was assigned male at birth and, since May 2012, had repeatedly petitioned to change their sex/gender marker and personal numerical code on their national identity card.  Because the Czech system does not provide for the option of a neutral gender marker, T.H. petitioned to have their registered gender changed to female.

No Justice Without Transparency: The Case For A Broad Presumption Of Public Access To Court Documents, Taylor Quimby

FIU Law Review

This Comment argues that a broad presumption of public access to court  documents is essential to preserving the legitimacy and constitutional values  of the American legal system. Although the principle of public access is  rooted in common law and constitutional tradition, individual states differ in  how they approach transparency in the context of court documents. These  jurisdictional inconsistencies continue to gain significance, as the digital age  has completely transformed the way people consume information. The  increasing digitization of court records has heightened the need for consistent  and constitutionally grounded standards that preserve transparency while  adequately protecting legitimate privacy interests. Florida’s …