Public policies designed to regulate the use of information technology to protect personal data have been based on different theoretical assumptions in different states, depending on whether the problem is defined in technological, civil libertarian, or bureaucratic terms. However, the rapid development, dispersal, and decentralization of information technology have facilitated a range of new surveillance practices that have in turn rendered the approaches of the 1960s and 1970s obsolete. The networking of the postindustrial state will require a reconceptualization of the (...) dynamic relationship between organizational practices and information technology and a more comprehensive appreciation of the privacy problem. With the call for the development of a more coherent information policy in a number of countries, there is evidence that policymakers have been taking this more holistic view. (shrink)