Academia.eduAcademia.edu

Outline

Title
Abstract
Figures
Conclusion
References
All Topics
Business and Management
Information Systems and Management

Beyond terrorism: data collection and responsibility for privacy

Profile image of Cynthia GaytonCynthia Gayton
https://doi.org/10.1108/03055720610716647
visibility

…

description

19 pages

link

1 file

Abstract

Abstract Purpose – The purpose of this paper is to examine privacy rights and the relationship between those rights and business and government interests in data collected from individuals. Design/methodology/approach – This paper approaches legal issues from the perspective of the consumer or citizen. Findings – While conducting research for this paper, it was found that the issues facing the citizenry on privacy protection have been addressed extensively in the not too distant past. The distinguishing characteristic is the speed with which data can be collected and disseminated and the infinitely more vast amount of personal data being collected not only by the government and businesses with whom consumers conduct transactions, but also by independent data brokers. Originality/value – Privacy rights are ephemeral and difficult to measure. Businesses, therefore, appear to have difficulty determining the value of protecting consumers’ privacy. Additionally, governments from which citizens derive many social services accumulate substantial personal information given in exchange for those services. Businesses and governments are increasingly negligent in protecting the data collected on individuals, which has been revealed by a series of reported data breaches, disclosures, thefts, and surveillance activities. This paper addresses the inherent value in protecting the privacy interests of individuals and proposes that more robust privacy laws, derived from established tort law, be developed and used by concerned persons. Keywords: Data collection, Law, Privacy, Human rights, Knowledge management, Consumers Paper type: Conceptual paper

Figures (1)
Source: Stoneburner et al. (2002)
Source: Stoneburner et al. (2002)

Related papers

Data Collection, Counter-Terrorism, and the Right to Privacy (Politics, Philosophy & Economics)
Isaac Taylor

Politics, Philosophy & Economics, 2017

Governments around the world collect huge amounts of personal data from their citizens (as well as foreigners) for counterterrorist purposes. While mining this data has arguably increased the security of populations, the practices through which this data is currently collected in many countries have been criticised for violating individuals' rights to privacy. Yet it is not clear what a permissible data-collection regime (if one is possible) would look like, and thus also how we could reform existing regimes to make them morally acceptable. This paper explores a number of ways in which we might justify a data-collection regime to those affected in spite of the set-backs to their privacy. In contrast to existing justifications, I argue that individuals can be asked to surrender their personal data as a requirement of reciprocity in a cooperative system in which they gain security from others doing likewise. Relying on this justification, though, has significant implications for how we should reform existing data-collection regimes. In particular, more stringent limits will need to be placed on the forms which these regimes can legitimately take.

View PDFchevron_right
Privacy in the Information Age: Stakeholders, Interests and Values
Nancy Pouloudi

Journal of Business Ethics, 1999

Privacy is a relational and relative concept that has been defined in a variety of ways. In this paper we offer a systematic discussion of potentially different notions of privacy. We conclude that privacy as the freedom or immunity from the judgement of others is an extremely useful concept to develop ways in which to understand privacy claims and associated

View PDFchevron_right
Theoretical and practical issues relating to the right to the protection of personal data
Marieta Safta

Juridical Tribune, 2015

The legal regime of the right to the protection of personal data is of particular concern in the context of the technological developments that have as a consequence the increased collection and exchange of such data. Information technology and its development constitute forms of evolution of society, but this evolution must take place within the limits of and with respect for fundamental rights as regulated by States’ Constitutions and the relevant international documents. Having regard to the dynamics of these phenomena, timely and continuous adaptation of the legislation is undoubtedly difficult. As a result, an important role in the definition and guarantee of the right to the protection of personal data and the reconciliation with other fundamental rights that also need to be protected is played by national courts (particularly the constitutional courts) and international courts, obliged to carry out an evolutionary and at the same time consistent approach in this matter. The j...

View PDFchevron_right
Data protection legislation: What is at stake for our society and democracy?
Yves Poullet

Computer Law & Security Review, 2009

Privacy Data protection Social networks Web 2.0 Profiling Terminal equipment Proportionality Opacity Informational self-determination Semantic Web Digital identities Ubiquitous computing Ambient intelligence Data Protection Authority a b s t r a c t

View PDFchevron_right
Balancing National Security and Individual Rights: A Comparative Study of Data Privacy Laws
shah jubaer

This dissertation analyzes the legal, political, and technological conflicts between national security requirements and the safeguarding of individual data privacy in five jurisdictions: the European Union, the United States, the United Kingdom, China, and India. This study employs doctrinal analysis, case studies, and comparative institutional evaluation to assess how legal frameworks balance state security functions (surveillance, law enforcement, and intelligence) against privacy rights (including permission, data minimization, access, and redress). The research delineates prevalent design patterns and variations, contextualizes them within the constitutional and political frameworks of each jurisdiction, and presents a series of normative and practical proposals for legal reform and governance. The primary contribution is a calibrated framework-the Security-Privacy Balancing Matrix (SPBM)-designed for policymakers and scholars to evaluate the appropriateness and accountability of data-access methods employed for national security purposes.

View PDFchevron_right
The business of privacy
Christopher Millard

International Data Privacy Law, 2013

View PDFchevron_right
'Privacy Lost -and Found?' The information value chain as a model to meet citizens' concerns
Geert-Jan Van Bussel, John van de Pas

In this paper we explore the extent to which privacy enhancing technologies (PETs) could be effective in providing privacy to citizens. Rapid development of ubiquitous computing and 'the internet of things' are leading to Big Data and the application of Predictive Analytics, effectively merging the real world with cyberspace. The power of information technology is increasingly used to provide personalised services to citizens, leading to the availability of huge amounts of sensitive data about individuals, with potential and actual privacy-eroding effects. To protect the private sphere, deemed essential in a state of law, information and communication systems (ICTs) should meet the requirements laid down in numerous privacy regulations. Sensitive personal information may be captured by organizations, provided that the person providing the information consents to the information being gathered, and may only be used for the express purpose the information was gathered for. Any other use of information about persons without their consent is prohibited by law; notwithstanding legal exceptions. If regulations are properly translated into written code, they will be part of the outcomes of an ICT, and that ICT will therefore be privacy compliant. We conclude that privacy compliance in the 'technological' sense cannot meet citizens' concerns completely, and should therefore be augmented by a conceptual model to make privacy impact assessments at the level of citizens' lives possible.

View PDFchevron_right
Privacy in the Post-NSA Era: Time for a Fundamental Revision?
Bart van der Sloot
View PDFchevron_right
The legal significance of individual choices about privacy and personal data protection
Gloria González Fuster

This chapter looks into the security/privacy relationship through a legal prism. It is not about the legal acceptability of security measures, but rather about their legal- ity. Policy makers in the European Union (EU) taking security-related decisions are obliged to ensure all adopted measures are compliant with fundamental rights requirements. It is true that they might also, additionally, be interested in question- ing whether (some) individuals might perceive such decisions as impacting fundamentalrightsnegativelyornot.2 Thesearehowevertwodifferentissues,and should not be conflated: one regards compliance with fundamental rights, while the other is about perceptions of compliance. Whereas respect for fundamental rights is unquestionably a legal issue, perceptions of compliance might be described as a societal consideration, potentially addressed from an economic perspective in terms of a possible negative impact on the commercialisation of technological products.

View PDFchevron_right
Control Over Personal Data, Privacy And Administrative Discretion In Europe And The USA: The Paradox Of Italian “Data Protection Authority”, 30 J. Marshall J. Info. Tech. & Privacy L. 721 (2014)
Marco Alberto Quiroz Vitale

The John Marshall Journal of Information Technology Privacy Law, 2014

View PDFchevron_right

References (35)

  1. Associated Press (2006a), "Bush officials defend financial monitoring", The Journal, p. A3. Associated Press (2006b), "Sailors' data, Social Security, found on internet", The Journal, p. A3. Associated Press (2006c), "Some question expansion of presidential power", The Journal, p. A3, available at: www.journal-news.net/custserv/index.asp.
  2. Bazan, E. and Elsea, J. (2006), "Presidential authority to conduct warrantless electronic surveillance to gather foreign intelligence information", Congressional Research Service memorandum. Boyd v. US (1886), 116 US 616. Business for Social Responsibility (BSR) (2005), "BSR issue briefs: privacy (consumer and employee)",available at: www.bsr.org/CSRResources/IssueBriefDetail.cfm?DocumentID= 50970 (accessed June 20, 2006).
  3. Cauley, L. (2006), "NSA has massive database of Americans' phone calls", USAToday, available at: www.usatoday.com/news/washington/2006-05-10-nsa-x.htm (accessed June 14, 2006).
  4. Church Committee (1976), Intelligence Activities and the Rights of Americans. Book II, Final Report, US Senate, Washington, DC.
  5. Dam, K.W. and Lin, H.S. (Eds) (1996), Cryptography's Role in Securing the Information Society, Computer Science and Telecommunications Board, National Research Council, Washington, DC, available at: www.nap.edu/readingroom/books/crisis
  6. Epstein, R. (1998), Testimony before the Senate Judiciary Subcommittee on the constitution, federalism and property rights.
  7. Gayton, C. (2006), "Legal issues for the knowledge economy in the twenty-first century", VINE, Vol. 36 No. 1, pp. 17-26.
  8. Gayton, C. and Vaughn, R. (2004), Legal Aspects of Engineering, 7th ed., Kendall-Hunt Publishing, Dubuque, IA.
  9. Gonzales, A.R. (2006), "Prepared statement of Hon. Alberto R. Gonzales, Attorney General of the United States", February, available at: http://149.101.1.32/ag/speeches/2006/ ag_speech_060206.html
  10. Goo, S. (2006), "Concerns raised over AT&T privacy policy", The Washington Post, p. D5. Hamdi v. Rumsfeld (2004), 542 US 507.
  11. Harrow, R. Jr (2005), No Place to Hide, Simon & Schuster, New York, NY.
  12. Holtzman, D. (2006), "Viewpoint: the privacy pirates -corporate policies on the collection and management of personal data do precious little to protect your privacy", BusinessWeek, available at: http://businessweek.com/print/technology/content/jul2006/tc20060724_ 816608.htm (accessed August 9, 2006).
  13. Koh, H. (2006), Testimony of Professor Harold Hongju Koh, Dean, Yale Law School, before the Senate Judiciary Committee regarding wartime executive power and the National Security Agency's Surveillance Authority.
  14. Litman, J. (2000), "Information privacy/information property", Stanford Law Review, Vol. 52, p. 1283.
  15. Marquis, G. (2003), "From the 'dossier' society to database networks", Surveillance as Social Sorting: Privacy, Risk and Digital Discrimination, Routledge, London.
  16. PSECU v. Fifth Third Bank and BJ's Wholesale Club (2005), USDC MD Pa, Case No. CV04-1554. Privacy Protection Study Commission (1977), Personal Privacy in an Information Society: The Report of the Privacy Protection Study Commission, US Government Printing Office, Washington, DC.
  17. Rotenberg, M. (2000), Testimony and statement of record of Marc Rotenberg, hearing on identity theft and data broker services before the Committee on Commerce, Science and Transportation.
  18. Songini, M. (2006), "Auditor's report criticizes Florida's voter database", ComputerWorld, June 26, p. 12. Stanford Encyclopedia of Philosophy (2002), "Privacy", May 14, available at: http://plato.stanford. edu/entries/privacy (accessed June 29 2006).
  19. Stiglitz, J. (1999), "On liberty, the right to know, and public discourse: the role of transparency in public life", Oxford Amnesty Lecture, Oxford, available at: http://siteresources.worldbank. org/NEWS/Resources/oxford-amnesty.pdf (accessed February 2, 2006).
  20. Stoneburner, G., Goguen, A. and Feringa, A. (2002), Risk Management Guide for Information Technology Systems, Recommendations of the National Institute of Standards and Technology (NIST), United States Department of Commerce, Washington, DC, available at: http://csrc.nist.gov/publications/nistpubs/800-30/sp800-30.pdf (accessed July 5, 2006).
  21. Swanson, J. (1992), The Public and the Private in Aristotle's Political Philosophy, Cornell University Press, New York, NY.
  22. Szeremeta, J. (2005), Understanding Knowledge Societies, United Nations Publishing Section, New York, NY.
  23. Tussman, J. (1977), Government and the Mind, Oxford University Press, New York, NY. United States Department of Justice et al. v. Committee for Freedom of the Press et al. (1989), 789 US 749. Universal Music Group (n.d.), "Universal Music Group privacy policy", available at: http:// privacypolicy.umusic.com (accessed June 14 2006). Beyond terrorism
  24. Vijayan, J. (2006a), "Judge dismisses data breach lawsuit", ComputerWorld, p. 12.
  25. Vijayan, J. (2006b), "School out to improve its marks on security", ComputerWorld, p. 6.
  26. Wack, K. (2006), "US threatens suit if Maine probes Verizon ties to NSA", Portland Press Herald, available at: http://pressherald.mainetoday.com/news/state/060804verizon.shtml (accessed August 9 2006).
  27. Weeks v. US (1914), 232 US 383. Whalen v. Roe (1977), 429 US 589, 605.
  28. Winseck, D. (2003), "Netscapes of power: convergence, network design, walled gardens, and other strategies of control in the information age", Surveillance as Social Sorting: Privacy, Risk and Digital Discrimination, Routledge, London.
  29. Zureik, E. (2002), "Theorizing surveillance -the case of the workplace", in Lyon, D. (Ed.), Surveillance as Social Sorting, Routledge, London.
  30. Further reading Associated Press (2006), "AOL technology chief, two others leave after data-privacy breach", Wall Street Journal, p., p. 6.
  31. Garrison, W. and Ramamoorthy, C. (1970), Privacy and Security in Data Banks, Technical Memorandum No. 24, Information Systems Research Laboratory, Urbana-Champaign, IL.
  32. Healy, G. (2003), "Beware of total information awareness", available at: www.cato.org/daily/ 01-20-03.html (accessed June 14, 2006).
  33. Jensen, J. (1991), Army Surveillance in America, 1775-1980, Yale University Press, New Haven, CT. Lyon, D. (Ed.) (2003), Surveillance as Social Sorting: Privacy, Risk and Digital Discrimination, Routledge, London.
  34. Medford, C. (2006), "AT&T: we own your records", Red Herring, June 22, available at: www. redherring.com (accessed August 9, 2006).
  35. OECD (1979), "Transborder data flows and the protection of privacy", Proceedings, Information Computer Communications Policy, Paris. About the author Cynthia M. Gayton holds a Bachelor of Arts degree in International Affairs from The George Washington University and a Juris Doctor degree from George Mason University in Arlington. Cynthia is a member of both the State Bar of Virginia and the District of Columbia Bar. Before joining the AIA, Cynthia had her own practice specializing in intellectual property and corporate law. In addition, she worked as an attorney at Morgan Lewis & Bockius, concentrating in complex antitrust litigation. Additionally, Cynthia is a part time adjunct professor of engineering law at The George Washington University School of Engineering and Applied Sciences. Cynthia is the co-author of Legal Aspects of Engineering, released in August of 2004 by Kendall/Hunt publishers and "Knowledge management in the large law firm" available at www.knowledgeboard.com Cynthia Gayton can be contacted at cgayton@gwu.edu To purchase reprints of this article please e-mail: reprints@emeraldinsight.com Or visit our web site for further details: www.emeraldinsight.com/reprints

Related papers

The Right to Privacy and Data Protection in the Information Age
Tigran Oganesian

Journal of Siberian Federal University. Humanities & Social Sciences, 2020

The article considers the legality of mass surveillance and protection of personal data in the context of the international human rights law and the right to respect for private life. Special attention is paid to the protection of data on the Internet, where the personal data of billions of people are stored. The author emphasizes that mass surveillance and technology that allows the storage and processing of the data of millions of people pose a serious threat to the right to privacy guaranteed by Article 8 of the ECHR of 1950. Few companies comply with the human rights principles in their operations by providing user data in response to requests from public services. In this regard, States must prove that any interference with the personal integrity of an individual is necessary and proportionate to address a particular security threat. Mandatory data storage, where telephone companies and Internet service providers are required to store metadata about their users’ communications ...

View PDFchevron_right
Deliverable D1: Legal, social, economic and ethical conceptualisations of privacy and data protection
Silvia Venier

2010

View PDFchevron_right
The Fundamental Right to Data Protection: Normative Value in the Context of Counter-Terrorism Surveillance
Graça Canto Moniz

SCRIPT-ed

View PDFchevron_right
Book Review: The Fundamental Right to Data Protection: Normative Value in the Context of Counter-Terrorism Surveillance
Graça Canto Moniz
View PDFchevron_right
A Brief Introduction to the Right to Privacy -An International Legal Perspective
Dr. Md. Toriqul Islam

Globalex, NYU School of Law, USA, 2022

After the invention of computers in the 19th century and the Internet in the late 1960s, the vast majority of our work is done online. The dependence on online platforms has increased over the years, and people have begun using diverse online platforms for various purposes, including learning, business, entertainment, socialization, etc. The growing advancement in information and communication technology (ICT) has brought a radical transformation in the communicating process making life easier, faster, and smarter. This landscape also poses tremendous challenges to privacy, as numerous actors collect, store, and share our personal data with numerous third parties, mostly without our knowledge. Over the last couple of decades, the collection, retention, use, and transfer of personal data have become rampant chiefly by government agencies and businesses. To indicate governments’ aptitude toward data processing, George Orwell once warned in his dystopian novel Nineteen Eighty-Four that Big Brother (government authorities) is always watching you. This trend of government-sponsored data processing has increased significantly over time, especially, after September 11, 2001. While business’s data processing has also become evident by new business models that are mostly grounded on personal data. In course of time, the personal data market has become global due to the constant increase of the access and use of the Internet. Eventually, personal data has evolved as the main fuel of the 4th Industrial Revolution era. In such an atmosphere, ordinary citizens, being private individuals, or consumers desire to have adequate legal protections for their privacy rights. Thus, the worldwide debate on privacy concerns has become apparent. Keeping this in mind, this article aims to explore some basic aspects of privacy, including the meaning, value, historical development, challenges, and legal protections as ensured in international, regional, and national legal frameworks.

View PDFchevron_right

Related topics

  • Law
  • Knowledge Management
  • Human Rights
    • 580 California St., Suite 400
    San Francisco, CA, 94104
    © 2025 Academia. All rights reserved