Privacy law concerns the storing, sharing and usage of personal information. There are horizontal privacy laws which cover a broad range of information, and vertical privacy laws which protect specific types of data.
In the United States, state attorneys general oversee data privacy laws. They bring enforcement actions against companies. They are now working with business interests on comprehensive federal legislation.
The Information Big Bang
In a time when every new device or service generates massive amounts of data, the twin imperatives of corporate profit and national security often militate 상간녀위자료소송 against greater privacy protections. On the criminal-justice side, law enforcement is in an arms race with lawbreakers, who are adept at technology, and whose devices can reveal their location and record their conversations. A classic contest played out in San Bernardino, where Syed Rizwan Farook and Tashfeen Malik used their phones to orchestrate a massacre that killed fourteen people.
But in the end, Igo believes, privacy is about more than a right to be left alone. It is associated with liberty (private roads, private sales), with privilege and confidentiality, with nonconformity and dissent, with the taboo and the deviant, and with subterfuge and concealment.
Igo tries to bring this perspective to bear on her mighty undertaking, which takes her through telegraphy, telephony, instantaneous photography, the Muzak case, dactyloscopy, Social Security numbers, suburbanization, the Minnesota Multiphasic Personality Inventory, the privacy of the home, abortion rights, gay liberation, the memoir craze, and Fourth Amendment jurisprudence. Her intelligent interpretation of the facts, however, often leads her to conclude that privacy has no stable meaning. The only constant is change, and figuring out how to balance th 상간녀위자료소송 e competing interests of privacy, commercial exploitation, and surveillance will be an unending job.
The Right to Privacy
The right to privacy includes a person’s interest in freedom from unauthorized intrusion into private activities. It also, in some jurisdictions, includes a constitutional or statutory right to privacy against unlawful governmental intrusion. Often, however, the right to privacy must be balanced against compelling state interests. Seat-belt laws and motorcycle helmet requirements, for example, serve legitimate public goals that can outweigh the right to privacy in these cases.
The Supreme Court first established a Constitutional right to privacy in 1965, with the landmark decision in Griswold v. Connecticut. It held that an individual had a fundamental right to privacy in family, home and correspondence. Governments could only interfere with this right when specifically allowed by law and for a compelling reason such as national security or public safety.
Courts have since interpreted this right to privacy to cover a wide range of activities. Moreover, the rights to privacy have become increasingly important in a society that is becoming more and more digital.
A variety of states have adopted privacy statutes, which impose legal obligations on businesses that collect personal information from individuals. These laws require businesses to post privacy policies, inform consumers of how their information will be used and provide an opt-out option. The federal Children’s Online Privacy Protection Act, for example, requires websites that target children to obtain parental consent before collecting their personal information. The right to privacy sometimes conflicts with other societal interests, such as free speech and the First Amendment rights of the press. The courts have addressed these conflicting claims on a case-by-case basis.
Informed Consent Is a Fantasy
The informed consent requirement is supposed to ensure that participants in data processing exercises make decisions based on their interests and on knowledge about the risks and benefits of those exercises. The requirement is often defended on the basis of an account of morality called deontological ethics, which asserts that a person’s fundamental moral right to autonomy entails that she may not be forced into conduct that violates her self-respect (compare Savulescu 1994, 3).
Informed consent requirements, in other words, are grounded in a belief that a person has a strong claim to be free to choose what she will or won’t do. Yet there is a growing body of evidence that people are not able to make truly informed choices in this context.
Several researchers have documented how difficult it is for individuals to comprehend privacy disclosures, which typically come in the form of lengthy and complex privacy policies. Comprehension is affected by the length and terminology of a policy, as well as its organization and layout. Users have also reported that privacy policies are difficult to remember, leading them to fail as a means of informing their choices.
Even if privacy disclosures were easy to understand, it is not clear that they would be effective. Patients and research subjects often harbor biases about medicine or their own health, which lead them to refuse interventions that physicians and a Condorcet jury might consider to be in their best interests. And many people simply want to avoid the hassle of opting out of a practice that they find intrusive.
The Corporate Interest in Privacy
In addition to a desire to protect their customers, companies have a very strong interest in being seen as trustworthy. A company’s reputation and sales will suffer if it is perceived to be abusing people’s privacy. This makes it a powerful incentive to try to influence the development of privacy laws.
Rather than trying to resolve whether or not personal information belongs to individuals and thus should be their property, a baseline federal privacy law should directly protect the abiding interest that all people have in their own data. It should empower individuals through more layered and meaningful transparency, and give them rights that include the right to know what personal information businesses have collected on them, the right to correct any inaccurate data they have, the right to opt out of the sale of their personal information, and the right not to be discriminated against for exercising their privacy rights.
A pure market approach to protecting privacy could work if the rules are well defined and enforcement is robust enough. However, the problem is that there are often market failures that prevent self-regulation from working. The alternative is to rely on legal enforcement. In this model, the privacy rules are defined by the government either through legislation or agency regulation and designated parties, such as the citizen whose privacy has been violated, are allowed to sue to enforce those rules. The lawsuits seek the twin goals of compensation and deterrence.