PRIVACY + SECURITY BLOG

News, Developments, and Insights

high-tech technology background with eyes on computer display

Cartoon: Social Media

Cartoon Social Media - TeachPrivacy Privacy Training 02 small

It is hard to imagine a world without social media. People are increasingly relying on social media to maintain friendships, share photos and happenings with family, and keep current with the news.  But there’s a dark side – more superficial relationships, cyberbullying, harassment, hate speech, and manipulation. Social media has become a cesspool of lies and misinformation campaigns, a place where radicalized hate groups can spread their venom, recruit more members, and rally their followers to attack.

Several prominent social media sites are struggling to figure out what to do. In the early days of the commercial Internet (mid 1990s through early 2000s), idealists pushed a vision of the Internet as a free speech zone. Bad speech would be countered and beaten by good speech, lies would be defeated by truth, and freedom and happiness would reign.  Platforms could just remain neutral and rarely intervene.  They could mainly let the battles be fought, with the faith that eventually the forces of good would win out over the forces of evil.

But this view is naive. We have seen in the past 10-15 years that lies, hate, harassment, defamation, invasion of privacy, and many other social ills are festering online. Social media platforms must wake up and realize that the earlier idealism isn’t the direction reality is taking us. A position of neutrality isn’t appropriate. Platforms must intervene more; they must govern.

Social media platforms currently lack much experience and skill with governance. They don’t have enough personnel who have the background to formulate wise rules, procedures, and due process.  But the call for platforms to govern is increasing in volume, and they can’t keep avoiding it. This is why social media companies should start hiring more people in the humanities, who often have a background in thinking about complicated moral and philosophical issues.

Continue Reading

Cartoon: Data Use and Transparency

Cartoon Data Use and Transparency - TeachPrivacy Privacy Training 02 small

Wouldn’t it be nice if companies were completely transparent in their privacy notices?  Typically, privacy notices are filled with long clunky prose that manages to say hardly anything meaningful to consumers.  These notices are written by lawyers who carefully craft every sentence so that they won’t pin down a company.  The drafters of privacy notices do this because it is difficult to anticipate all the uses of personal data that might be fruitful in the future.  Companies want to avoid making promises that are too limiting of how they might use personal data.  This could tie their hands in the future, making them less nimble in the dynamic and fast-paced world of business in the digital age.

From a business standpoint, having greater room to use personal data in different ways is a great benefit.  From a consumer standpoint, consumers are not adequately informed about how their data is being used.

Additionally, companies often have many different things going on with personal data, and there frequently isn’t a strong enough central command structure to oversee everything that’s happening.  Companies aren’t evil in all of this, but the interests of companies and those of consumers are often not fully aligned.

Continue Reading

Cartoon: Algorithmic Transparency

Cartoon Algorithmic Transparency - TeachPrivacy Privacy Training 02

This cartoon is about algorithmic transparency. Today, more and more decisions are being made by algorithms.  The logic and functioning of these algorithms is increasingly complex and opaque to people. Today, the new buzzwords are “artificial intelligence” and “machine learning.”  AI and machine learning represent a number of different but related things, but what they generally share in common are algorithms.  As algorithms become more complex and rely on being fed massive quantities of data, it becomes harder and harder to explain their reasoning.  This is a big problem because algorithms play a significant role in our lives by making some very important decisions.

Continue Reading

Cartoon: Multi-Jurisdictional Privacy Law Compliance

Cartoon Multi-Jurisdictional Privacy Law Compliance Poodle - TeachPrivacy CCPA Training 02 small

This cartoon depicts the challenges of multi-jurisdictional privacy law compliance. In 2018, organizations scrambled to comply with the GDPR.  In 2019, businesses are scrambling to comply with the California Consumer Privacy Act (CCPA).  And, there will be a new referendum on privacy law in California next year — CCPA 2.0.  There’s a flurry of legislative activity in the states on privacy — IAPP has a great chart tracking what is going on.  And, each year, more and more countries are passing new comprehensive privacy laws.

We are witnessing the growing pains of privacy law.  Privacy wasn’t adequately regulated for too long, and now the concerns are festering, sparking a rush to action. In the US, state legislation on privacy will continue until the concerns are allayed.  A thoughtful and powerful federal law could weaken the enthusiasm for states to jump into the fray, but this is a challenge with Congress as polarized as it is.

For more on the issue, I recently interviewed K Royal on this topic – see here for the interview.

Continue Reading

Developing a Multi-Jurisdictional Approach to Privacy Laws — An Interview with K Royal

Global Privacy Law

I’m thrilled to interview K Royal, Senior Director, Western Region, Privacy, at TrustArc. K has had a long career in privacy law, having served as privacy counsel for several companies. She’s also an adjunct professor at Arizona State University.

Prof Solove: What is the need for a multi-jurisdictional approach to privacy laws?

K RoyalK Royal: With the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA),  and other laws such as the Brazilian General Data Protection Law (“Lei Geral de Proteção de Dados” or “LGPD”), businesses must be prepared to comply with a variety of laws around the world.

Privacy is a complex, multi-level, comprehensive concept which is now being regulated in more than 130 countries with more than 500 privacy laws. To be successful in complying with so many laws, businesses must develop a multi-jurisdictional approach to privacy laws that is consistent and predictable yet also not one-size-fits-all.

Prof Solove: Can a company just set one high bar and just treat all personal data the same?

Continue Reading