Here are some notable books on privacy and security from 2021. To see a more comprehensive list of nonfiction works about privacy and security for all years, Professor Paul Schwartz and I maintain a resource page on Nonfiction Privacy + Security Books.
Webinar Cross Border Data Transfer
In this webinar, Daniel Solove (GW Law and TeachPrivacy), Justin Antonipillai (WireWheel), Peter Swire (Alston & Bird), Kenneth Propp (Atlantic Council), and Shannon Yavorsky (Orrick) discuss the latest developments regarding cross-border data transfers.
Why Privacy Matters: An Interview with Neil Richards
Professor Neil Richards has published a new book, Why Privacy Matters (Oxford University Press 2021), and it’s the perfect holiday gift for anyone interested in privacy.
Neil Richards is one of the world’s leading privacy experts. He holds the Koch Distinguished Chair in Law at Washington University in St. Louis where he also directs the Cordell Institute. He has published widely across the full range of privacy issues, and he has served as an expert in a number of high-profile privacy cases, most notably for the Irish government in the case of Data Protection Commissioner v. Facebook, more commonly known as “Schrems 2.”
Woodrow Hartzog’s Essay, What is Privacy? That’s the Wrong Question
Professor Woodrow Hartzog (Northeastern Law) has written a great essay focusing on my work. The piece is
What is Privacy? That’s the Wrong Question
88 U. Chicago L. Rev. 1677 (2021)
Webinar: China’s PIPL – A New Era of Privacy in China
In this webinar (1 hour), Daniel Solove, Justin Antonipillai (CEO and Founder of WireWheel), Mingli Shi (Qualcomm), and Edward R. McNicholas (Ropes & Gray) discuss China’s Personal Information Privacy Law (PIPL). The discussion covers how China’s PIPL compares to the EU’s GDPR, keys to compliance, and potential future developments on privacy and security law in China.
A Provocative Critique of Privacy Law: An Interview with Ari Waldman
I’m delighted to be interviewing Professor Ari Waldman (Northeastern Law), who has published Industry Unbound: The Inside Story of Privacy, Data, and Corporate Power (Cambridge University Press 2021), a provocative new book about privacy law and privacy programs at corporations.
In his book, Ari delivers an eviscerating critique of privacy law and of the approach to protect privacy through internal privacy programs at organizations. Although I diverge from Ari in that I believe that that many privacy law provisions and privacy programs are generally a good thing, his critique makes many salient points that must be reckoned with. Privacy law and compliance have significant shortcomings that should be addressed.
Cartoon: Big Data Halloween
Halloween is this week, so I thought I’d bring this older cartoon out of the archive. I updated it a bit. Enjoy!
Cartoon: Implantable Devices and Privacy
This cartoon is about implantable devices and privacy. Increasingly devices require subscriptions, and there is tremendous lock in, as the devices can only work with a particular company’s services. Implantable devices up the ante – a person could be locked in for life. The law must address lock in with more than data portability. When there are compelling reasons, such as devices that cannot readily be replaced, the law should require companies to allow other companies to supply necessary services to keep devices functioning.
Privacy Harms: A New Version
Professor Danielle Citron and I have thoroughly revised our article, Privacy Harms, forthcoming 102 B.U. Law Review __ (2022). You can download the latest draft for free on SSRN.
Some of the things we updated:
- We reordered the piece to discuss earlier on our theory of when harm should be required.
- We added a discussion of why recognizing privacy harm is important.
- We rethought the typology to add top-level categories and subcategories. We had received feedback from a number of people that the typology was unwieldy because we had too many categories and many seemed to overlap. Our new structure now has 7 top-level categories.
- We added short descriptions of each type of harm at the beginning of each section.
- We added commentary about the recent Supreme Court case on standing, TransUnion v. Ramirez.
- We added a diagram of the harms, which is above.
There are other changes, too, but the ones above are the most relevant ones. We’re still editing the piece, so we welcome additional feedback. The piece will be published in 2022.
You can read the latest draft here.
Abstract:
China’s Personal Information Protection Act (PIPL): Whiteboard and Training Course
I am pleased to announce that I created a new whiteboard and training course for China’s Personal Information Protection Law (PIPL).
The PIPL is China’s first comprehensive privacy law, and it has several notable similarities to the GDPR. There are also some key differences. In an earlier post, I provide a comparison between the PIPL and GDPR.
Information about the PIPL training course is here. The course is 20 minutes. There is also a short version of the course (5.5 mins) available here.
The whiteboard on China’s PIPL summarizes the law in 1 page. It is available for free for personal use. For other uses, please contact us.