An issue about the privacy of the clustered groups designed by algorithms arises when attempts are made to access certain pieces of information about those groups that would likely be used to harm them. Therefore, limitations must be imposed regarding accessing such information about clustered groups. In the discourse on group privacy, it is argued that the right to privacy of such groups should be recognised to respect group privacy, protecting clustered groups against discrimination. According (...) to this viewpoint, this right places a duty on others, for example, private companies, institutions, and governments, to refrain from accessing such information. To defend the idea that the right to privacy should be recognised for clustered groups, at least two requirements must be satisfied. First, clustered group privacy must be conceived of as either a collective good or a participatory good. Since these forms of good are of the type from which no member of a group can be excluded from benefiting, the right to them is defined as a group right. Second, there must be group interests on which to base a group right. Group interests can be either the interests of those members that are a result of their being in the group or the interests of the group as a whole that transcend the interests of its members. However, this paper argues that clustered group privacy cannot be conceived of as either a collective or a participatory good because it is possible for some individuals to be excluded from benefiting from it. Furthermore, due to the lack of awareness among individuals that they are members of a clustered group and the nature of a clustered group itself, such groups cannot have the group interests necessary to establish a group right. Hence, the group right to privacy cannot be recognised for these groups, implying that the group right cannot be considered a means to protect clustered groups against discrimination. Instead, this paper suggests that moral principles need to be articulated within an ethics of vulnerability to identify the moral obligations of protecting vulnerable clustered groups. The duty owed to the vulnerable should involve refraining from accessing certain information about clustered groups in specific contexts. This duty is not engendered by the right to privacy of such groups; it is the duty owed to the vulnerable. The findings highlight the need to articulate moral principles regarding privacy and data protection to protect clustered groups in contexts in which accessing information about them could constitute a reason for discriminatory targeting. (shrink)

In this paper, we argue that there is at least a pro tanto reason to favor the control account of the right to privacy over the access account of the right to privacy. This conclusion is of interest due to its relevance for contemporary discussions related to surveillance policies. We discuss several ways in which the two accounts of the right to privacy can be improved significantly by making minor adjustments to their respective definitions. (...) We then test the improved versions of the two accounts on a test case, to see which account best explains the violation that occurs in the case. The test turns out in favor of the control account. (shrink)

In this paper, I defend what I call the ‘Inference Principle’. This principle holds that if an agent obtains some information legitimately, then the agent can make any inference she wants based on the information, without violating anyone’s right to privacy. This principle is interesting for at least three reasons. First, it constitutes a novel answer to the timely question of whether the widespread use of ‘data analytics’ to infer personal information about individuals is morally permissible. Second, it (...) contradicts what seems to be a common view of inferences’ ability to violate privacy rights. Third, it offers an account of the theoretically underdeveloped issue of what duties are engendered by the moral right to privacy with regard to inferred information. (shrink)

Recent discussions among lawyers, philosophers, policy researchers and athletes have focused on the potential threat to privacy posed by the World Anti-Doping Agency’s (WADA) whereabouts requirements. These requirements demand, among other things, that all elite athletes file their whereabouts information for the subsequent quarter on a quarterly basis and comprise data for one hour of each day when the athlete will be available and accessible for no advance notice testing at a specified location of their choosing. Failure to file (...) one’s whereabouts, or the non-availability for testing at said location on three occasions within any 18-month period constitutes an anti-doping rule violation that is equivalent to testing positive to a banned substance, and may lead to a suspension of the athlete for a time period of between one and two years. We critically explore the extent to which WADA’s whereabouts requirements are in tension with existing legislation on privacy, with respect to UK athletes, who are simultaneously protected by UK domestic and EU law. Both UK domestic and EU law are subject to the European Convention on Human Rights (ECHR) Article 8, which establishes a right to “respect for private and family life, home and correspondence”. We critically discuss the centrality of the whereabouts requirements in relation to WADA’s aims, and the adoption and implementation of its whereabouts rules. We conclude that as WADA’s whereabouts requirements appear to be in breach of an elite athlete’s rights under European workers’ rights, health & safety and data protection law they are also, therefore, in conflict with Article 8 of the ECHR and the UK Human Rights Act 1998. We call for specific amendments that cater for the exceptional case of elite sports labour if the WADA requirements are to be considered legitimate. (shrink)

This article argues that people have legitimate interests in privacy that deserve legal protection on democratic principles. It describes the right to privacy as a bundle of rights of personal choice, association and expression and shows that, so described, people have legitimate political interests in privacy. These interests reflect the ways that privacy rights can supplement the protection for people’s freedom and equality provided by rights of political choice, association and expression, and can help to (...) make sure that these are, genuinely, democratic. Feminists have often been ambivalent about legal protection for privacy, because privacy rights have, so often, protected the coercion and exploitation of women, and made it difficult to politicise personal forms of injustice. However, attention to the differences between democratic and undemocratic forms of politics can enable us to meet these concerns, and to distinguish a democratic justification of privacy rights from the alternatives. (shrink)

I develop a contractualist theory of just intelligence collection based on the collective moral responsibility to deliver security to a community and use the theory to justify certain kinds of signals interception. I also consider the rights of various intelligence targets like intelligence officers, service personnel, government employees, militants, and family members of all of these groups in order to consider how targets' waivers or forfeitures might create the moral space for just surveillance. Even people who are not doing anything (...) prejudicial to other states' security can be modeled as ceding rights against diagnostic collection--light touch collection limited to ascertaining if someone is likely an intelligence threat--as part of their duty to support just foreign institutions. Foreign intelligence officers could not perform the same job potential targets can reasonably demand their intelligence agencies perform on their behalf without this ceding of rights. More invasive forms of collection can only be justified if officers can reasonably model their citizens consenting to being the target of the same sort of collection by adversary states. (shrink)

In 2016, the European Parliament approved the General Data Protection Regulation (GDPR) whose core aim is the safeguarding of information privacy, and, by corollary, human dignity. Drawing on the field of philosophical anthropology, this paper analyses various interpretations of human dignity and human exceptionalism. It concludes that privacy is essential for humans to flourish and enable individuals to build a sense of self and the world.

This paper offers a general theory of privacy, a theory that takes privacy to consist in being free from certain kinds of intrusions. On this understanding, privacy interests are distinct and distinguishable from those in solitude, anonymity, and property, for example, or from the fact that others possess, with neither consent nor permission, personal information about oneself. Privacy intrusions have both epistemic and psychological components, and can range in value from relatively trivial considerations to those of (...) profound consequence for an individual’s dignity, integrity, and autonomy. Thus while the focus of this theory is privacy per se— privacy as being free from certain kinds of intrusions—it has significant implications, discussed briefly, for what properly counts as the content of moral or legal rights to privacy. (shrink)

Often, when we share information about ourselves, we contribute to people learning personal things about others. This may happen because what we share about ourselves can be used to infer personal information about others. Such dependencies have become known as privacy dependencies in the literature. It is sometimes claimed that the scope of the right to privacy should be expanded in light of such dependencies. For example, some have argued that inferring information about others can violate their (...) right to privacy. Others have argued that sharing personal information about yourself that license such inferences can by itself violate the right to privacy. In this paper, we argue that the latter view should be rejected. (shrink)

In this paper, we defend what we call the ‘Hybrid View’ of privacy. According to this view, an individual has privacy if, and only if, no one else forms an epistemically warranted belief about the individual’s personal matters, nor perceives them. We contrast the Hybrid View with what seems to be the most common view of what it means to access someone’s personal matters, namely the Belief-Based View. We offer a range of examples that demonstrate why the Hybrid (...) View is more plausible than the Belief-Based View. Finally, we show how the Hybrid View generates a more plausible fit between the concept of privacy, and a (morally objectionable) violation of privacy. (shrink)

Civil liberty and privacy advocates have criticized the USA PATRIOT Act (Act) on numerous grounds since it was passed in the wake of the World Trade Center attacks in 2001. Two of the primary targets of those criticisms are the Act’s sneak-and-peek search provision, which allows law enforcement agents to conduct searches without informing the search’s subjects, and the business records provision, which allows agents to secretly subpoena a variety of information – most notoriously, library borrowing records. Without attending (...) to all of the ways that critics claim the Act burdens privacy, I examine whether those two controversial parts of the Act, the section 213 sneak-and-peak search and the section 215 business records gag-rule provisions, burden privacy as critics charge. I begin by describing the two provisions. Next, I explain why those provisions don’t burden privacy on standard philosophical accounts. Moreover, I argue that they need not conflict with the justifications for people’s claims to privacy, nor do they undermine the value of privacy on the standard accounts. However, rather than simply concluding that the sections don’t burden privacy, I argue that those provisions are problematic on the grounds that they undermine the value of whatever rights to privacy people have. Specifically, I argue that it is important to distinguish rights themselves from the value that those rights have to the rights-holders, and that an essential element of privacy rights having value is that privacy right-holders be able to tell the extent to which they actually have privacy. This element, which is justified by the right-holders’ autonomy interests, is harmed by the two provisions. (shrink)

In this paper, I offer an indirect argument for the Access Theory of privacy. First, I develop a new version of the rival Control Theory that is immune to all the classic objections against it. Second, I show that this new version of the Control Theory collapses into the Access Theory. I call the new version the ‘Negative Control Account’. Roughly speaking, the classic Control Theory holds that you have privacy if, and only if, you can control whether (...) other people know personal information about you. Critics of the Control Theory often give counterexamples, where privacy is either not diminished even though the claimant has lost control, or where privacy is diminished even though the claimant is in control. I argue that none of these alleged counterexamples work against the Negative Control Account. However, this is not a victory for the control theorist, because the Negative Control Account collapses into the Access Theory. The paper thus adds to the recent trend in the literature of favoring the Access Theory over the Control Theory. (shrink)

Lauritz Munch and Björn Lundgren have recently replied to a paper published by us in this journal. In our original paper, we defended a novel version of the so-called ‘control theory’ of the moral right to privacy. We argued that control theorists should define ‘control’ as what we coined ‘Negative Control’. Munch and Lundgren have recently provided a range of interesting and challenging objections to our view. Independently of each other, they give almost identical counterexamples to our definition (...) of Negative Control. In this comment, we show that while the counterexamples are genuine counterexamples, they do not force us to abandon the idea of Negative Control. Furthermore, we reply to two additional objections raised by Lundgren. One of these replies involves giving a new account of what the relation is between the concept of privacy and the right to privacy. (shrink)

This article explores the social value of privacy and the intricate relationship between personal autonomy and societal cohesion within the realm of privacy. It contrasts George Herbert Mead’s two models of social organization—hostility and integration—in terms of their impact on the interplay between individuals and society. The model of hostility envisions individuals and society engaged in a zero-sum game, resulting in diminished individuality and an atomistic view of autonomy. In contrast, the model of integration recognizes the interdependence of (...) entities, fostering individuality and promoting a relational understanding of autonomy. Applying these models to privacy theory, the article argues that privacy has often been conceived in terms of hostility, pitting individuals against society. Instead, the article advocates for embracing the model of integration, in which privacy is seen as fundamental to a society where individuals maintain their uniqueness while pursuing a common good. The right to privacy, rooted in this integrative model, allows individuals to preserve their distinct social selves while participating in joint social organization. Furthermore, understanding privacy through the lens of integration highlights the importance of the common good as a necessary condition for both individuality and autonomy. This relational perspective positions privacy as an essential aspect of a democratic and moral society, where diverse individuals mutually constitute themselves and the broader social fabric. By presenting this view, the article offers a fresh understanding of privacy's social value and its implications for societal organization, democracy, and morality. (shrink)

This essay focuses on the interrelationship of regulation and private life in human rights. It argues three main points. Article 8 connects the question of protection of private lives and privacies with the question of their management. Thus, Article 8 orients regulatory practices to private lives and privacies. Article 8’s holders are autonomous to the extent that laws respect their private lives and privacies. They are not autonomous in a ‘pre-political’ sense, where we might expect legal rules to protect an (...) already autonomous private life or privacy. Article 8 does not simply prohibit or permit acts. In certain cases, it also ‘enables’ acts. Then, this essay introduces the idea of oikopolitics. This idea allows us to capture these three points in a useful manner. By this idea, this essay means the context where the interpretation of privacy reaches out to broader social practices and norms and where the status of rights-holders living their private lives makes them objects of attention. (shrink)

Must privacy and freedom of expression conflict? To witness recent debates in Britain, you might think so. Anything other than self-regulation by the press is met by howls of anguish from journalists across the political spectrum, to the effect that efforts to protect people’s privacy will threaten press freedom, promote self-censorship and prevent the press from fulfilling its vital function of informing the public and keeping a watchful eye on the activities and antics of the powerful.[Brown, 2009, 13 (...) January]1 Effective protections for privacy, from such a perspective, inevitably pose a threat to democratic government via the constraints that they place on the press. Such concerns with privacy must be taken seriously by anyone who cares about democratic government, and the freedom, equality and wellbeing of individuals. But if it is one thing to say that privacy and freedom of expression cannot always be fully protected, it is another to suppose that protections for the one must always come at the expense of the other. After all, the economics of contemporary politics and journalism would seem to be partly responsible for our difficulties in protecting personal privacy while sustaining robust and informative forms of public discourse. [Moore, 2010, 10 -141]2 Most newspapers are loss-making businesses and the need to reduce those losses and, if possible, to turn a profit, make investigative journalism an increasingly expensive proposition as compared to both “comment” and more or less elevated forms of gossip. At the same time, politics has increasingly become the prerogative of a narrow group of people with access to the large sums of money necessary successfully to compete for high office. In those circumstances, the need for critical scrutiny is as important as it is difficult. Revising our ideas about privacy and its protection cannot alone reduce the tensions between freedom of expression and personal privacy typical of our societies, necessary though such revision may be. Moreover, this paper can only touch on some aspects of the ways in which we need to rethink our interests in privacy, in order adequately to reflect people’s diverse interests in freedom of expression, and the important role of a free press to democratic government. Nonetheless, I hope to suggest ways of thinking about people’s claims to privacy which can be generalised fairly readily, and can help us to think constructively about the nature, causes and solutions to some important social and political problems, even if, in its nature, philosophical analysis rarely tells us what to do. More specifically, this paper argues that people are entitled to keep some true facts about themselves to themselves, should they so wish, as a sign of respect for their moral and political status, and in order to protect themselves from being used as a public example in order to educate or to entertain other people. The “outing” - or non-consensual public disclosure - of people’s health records or status, or their sexual behaviour or orientation is usually unjustified, even when its consequences seem to be beneficial. Indeed, the paper claims, the reasons to reject outing, as inconsistent with democratic commitments to freedom and equality, are reasons to insist on the importance of privacy to freedom of expression. While a free press is of the utmost importance to democratic government, it is not identical with the free expression of individuals and, on occasion, the former may have to be constrained in order to protect the latter. [Barendt, 2007, 231]. Hence, the paper concludes, we should distinguish the claims of individuals to publish reports about their lives – even if this necessarily involves revealing the private lives of others – from journalistic claims to publish information about the sex lives of consenting adults. I will start by briefly situating my argument within a democratic approach to privacy, before using the “outing” of Oliver Sipple to examine people’s claims to privacy and their implications for freedom of expression and of the press. I will be assuming that some forms of privacy are legitimate, in order to focus more closely on the question of what information, if any, people may keep to themselves. (shrink)

Celem opracowania jest dookreślenie tego, czym jest prywatność. Interesuje mnie prywatność w aspekcie nor¬matywnym, jako coś, co uważamy za nasze dobro; coś, czego się domagamy, co jest naszym prawem, i to nie tylko w sensie moralnym, ale także chronionym prawem pozytywnym. Prywatność jest czymś relacyjnym, i to przynajmniej w dwojakim znaczeniu. Po pierwsze, konstytuowana jest poprzez relację oddzielenia od czegoś - państwa, zakładu pracy (pracodawcy), rozmaitych instytucji. Po drugie, to, co prywatne z punktu widzenia jednych relacji - np. relacji jednostki (...) do państwa, do sprawowanych urzędów - nie musi być prywatne z punktu widzenia pracy zawodowej. Prywatność nie jest oparta na prostej opozycji pomiędzy tym, co społeczne, grupowe, a tym, co osobiste, indywidualne; podmiotem prywatności może być podmiot zbiorowy i nie wobec każdej grupy społecznej można się sensownie domagać prywatności. Prywatność pozwala w pełni dysponować tym, co „moje”. Sfera prywatna daje szczególne możliwości realizacji moich własnych celów, uzyskuję przestrzeń indywidualizacji, realizacji siebie jako niepowtarzalnej jednostki, której też sam jestem autorem. W sferze prywatnej podmioty stają się też podmiotami tworzącymi przestrzeń normatywną, uznając reguły rozpoznawane jako wyraz tego, co naturalne, zastane, i tworząc lub współtworząc z innymi uczestnikami tej sfery własne reguły, realizując przez to istotny wymiar autonomii osoby. Prywatność daje wreszcie przestrzeń dla rozwoju relacji ściśle osobowych, opartych na wyłączności tego, co między osobami się rozgrywa. Mając na uwadze zbieżność dążenia do ograniczania prywatności z wprowadzaniem elementów totalitarnych, można także zauważyć, że ochrona prywatności nie tylko chroni jednostki, ale i potrzebna jest sferze publicznej jako jeden ze środków przeciwko wadom rozwiązań totalitarnych. (shrink)

The 2010s were a golden age of information privacy research, but its policy accomplishments tell a mixed story. Despite significant progress on the development of privacy theory and compelling demonstrations of the need for privacy in practice, real achievements in privacy law and policy have been, at best, uneven. In this chapter, I outline three broad shifts in the way scholars (and, to some degree, advocates and policy makers) are approaching privacy and social media. First, (...) a change in emphasis from individual to structural approaches. Second, increasing attention to the political economy of privacy—especially the business models of information companies, such as social media platforms. And third, a deeper understanding of privacy’s role in a healthy digital public sphere. (shrink)

In the wake of high profile and recent events of blatant privacy violations, which also raise issues of democratic accountability as well as, at least potentially, undermining the legitimacy of current local and international governance arrangements, a rethinking of the justification of the right to privacy is proposed. In this paper, the case of the violation of the privacy of a bullied autistic youngster and the consequent prosecution of 3 Google executives will be discussed first. We (...) will then analyse the arguments made by both academic experts and pundits who agree with Google’s claim that if the first sentence had been left unchallenged, it would have opened the floodgates to several other jurisdictions that would as a consequence have used it as a pretext to increase control on the internet, jeopardising in such a way free speech, which has been seen so far as an inalienable right which should not be censored. Finally, by going beyond the sentences and their immediate contexts, we will propose a theoretical justification of our analysis. Our main claim is that the value of the right to privacy is based on the argument that its violation would undermine citizens’ capacity to participate effectively in democratic politics. (shrink)

In light of technology that may reveal the content of a person’s innermost thoughts, I address the question of whether there is a right to ‘brain privacy’—a right not to have one’s inner thoughts revealed to others–even if exposing these thoughts might be beneficial to society. I draw on a conception of privacy as the ability to control who has access to information about oneself and to an account that connects one’s interest in privacy to (...) one’s interests in autonomy and associated reputational interests, and preserving one’s dignity. Focusing on the controversial case of Gilberto Valle, known as the ‘cannibal cop’, who faced legal punishment and moral reproach for deeply disturbing thoughts of doing violence to women, thoughts he claimed were mere fantasies, I argue that Valle has a right to brain privacy if he has a legitimate privacy interest that is not outweighed by competing societal interests in avoiding harm. Our weighing of competing privacy and societal interests will depend on the magnitude of the privacy interests in autonomy and dignity, and on how reliable the technology used to expose inner thoughts is in predicting future harmful behavior and identifying true threats. (shrink)

At the beginning of the COVID-19 pandemic, high hopes were placed on digital contact tracing. Digital contact tracing apps can now be downloaded in many countries, but as further waves of COVID-19 tear through much of the northern hemisphere, these apps are playing a less important role in interrupting chains of infection than anticipated. We argue that one of the reasons for this is that most countries have opted for decentralised apps, which cannot provide a means of rapidly informing users (...) of likely infections while avoiding too many false positive reports. Centralised apps, in contrast, have the potential to do this. But policy making was influenced by public debates about the right app configuration, which have tended to focus heavily on privacy, and are driven by the assumption that decentralised apps are “privacy preserving by design”. We show that both types of apps are in fact vulnerable to privacy breaches, and, drawing on principles from safety engineering and risk analysis, compare the risks of centralised and decentralised systems along two dimensions, namely the probability of possible breaches and their severity. We conclude that a centralised app may in fact minimise overall ethical risk, and contend that we must reassess our approach to digital contact tracing, and should, more generally, be cautious about a myopic focus on privacy when conducting ethical assessments of data technologies. (shrink)

This paper examines MacKinnon’s claims about the relationship of rights to privacy and equality in light of the reasoning in Harris and Bowers. When we contrast the Majority and Minority decisions in these cases, it shows, we can distinguish interpretations of the right to privacy that are consistent with sexual equality from those that are not. This is not simply because the two differ in their consequences – though they do - but because the former, unlike the (...) latter, rely on empirical and normative assumptions that would justify sexual inequality whatever right they were used to interpret. So while I agree with MacKinnon that the Majority’s interpretation of the right to privacy in Harris is inconsistent with the equality of men and women, I show that there is no inherent inconsistency in valuing both privacy and equality, and no reason why we must chose to protect the one, rather than the other. Indeed, an examination of MacKinnon’s article, I suggest, can help us to see why rights to privacy can be part of a scheme of democratic rights, and how we might go about democratising the right to privacy in future. To avoid confusion I should emphasise that my arguments are of a philosophical, not a legal, nature. Thus, I will be ignoring the specifically legal and constitutional aspects of MacKinnon’s article, and of the Supreme Court decisions, in order to bring their philosophical significance into focus. (shrink)

Are rights to privacy consistent with sexual equality? In a brief, but influential, article Catherine MacKinnon trenchantly laid out feminist criticisms of the right to privacy. In “Privacy v. Equality: Beyond Roe v. Wade” she linked familiar objections to the right to privacy and connected them to the fate of abortion rights in the U.S.A. (MacKinnon, 1983, 93-102). For many feminists, the Supreme Court’s decision in Roe v. Wade (1973) had suggested that, notwithstanding a (...) dubious past, legal rights to privacy might serve feminist objectives, and prove consistent with sexual equality. By arguing that Roe’s privacy justification of abortion rights was directly responsible for the weakness and vulnerability of abortion rights in America, MacKinnon took aim at feminist hopes for the right to privacy at their strongest point. Maintaining that Roe’s privacy justification of abortion is intimately, and not contingently, related to the Supreme Court’s subsequent decision in Harris v. McRae, (1980) MacKinnon concluded that privacy rights cannot be reconciled with the freedom and equality of women, and so can have no place in a democracy.1 In Harris, the Supreme Court held that the State need not provide Medicaid coverage for abortions that are necessary to preserve the health, but not the life, of a pregnant woman, effectively depriving poor women of almost all state aid for abortions.2 Moreover, the Court’s subsequent decision in Bowers v . Hardwick (1986) appeared to confirm the truth of MacKinnon’s observation – though this case concerned gay rights, rather than abortion rights, and occurred several years after MacKinnon’s condemnation of Harris. -/- This paper examines MacKinnon’s claims about the relationship of rights to privacy and equality in light of the reasoning in Harris and Bowers. When we contrast the Majority and Minority decisions in these cases, it shows, we can distinguish interpretations of the right to privacy that are consistent with sexual equality from those that are not. This is not simply because the two differ in their consequences – though they do - but because the former, unlike the latter, rely on empirical and normative assumptions that would justify sexual inequality whatever right they were used to interpret. So while I agree with MacKinnon that the Majority’s interpretation of the right to privacy in Harris is inconsistent with the equality of men and women, I show that there is no inherent inconsistency in valuing both privacy and equality, and no reason why we must chose to protect the one, rather than the other. Indeed, an examination of MacKinnon’s article, I suggest, can help us to see why rights to privacy can be part of a scheme of democratic rights, and how we might go about democratising the right to privacy in future. To avoid confusion I should emphasise that my arguments are of a philosophical, not a legal, nature. Thus, I will be ignoring the specifically legal and constitutional aspects of MacKinnon’s article, and of the Supreme Court decisions, in order to bring their philosophical significance into focus. -/- . (shrink)

The first few years of the 21st century were characterised by a progressive loss of privacy. Two phenomena converged to give rise to the data economy: the realisation that data trails from users interacting with technology could be used to develop personalised advertising, and a concern for security that led authorities to use such personal data for the purposes of intelligence and policing. In contrast to the early days of the data economy and internet surveillance, the last few years (...) have witnessed a rising concern for privacy. As bad data practices have come to light, citizens are starting to understand the real cost of using online digital technologies. Two events stamped 2018 as a landmark year for privacy: the Cambridge Analytica scandal, and the implementation of the European Union’s General Data Protection Regulation (GDPR). The former showed the extent to which personal data has been shared without data subjects’ knowledge and consent and many times for unacceptable purposes, such as swaying elections. The latter inaugurated the beginning of robust data protection regulation in the digital age. Getting privacy right is one of the biggest challenges of this new decade of the 21st century. The past year has shown that there is still much work to be done on privacy to tame the darkest aspects of the data economy. As data scandals continue to emerge, questions abound as to how to interpret and enforce regulation, how to design new and better laws, how to complement regulation with better ethics, and how to find technical solutions to data problems. The aim of the research project Data, Privacy, and the Individual is to contribute to a better understanding of the ethics of privacy and of differential privacy. The outcomes of the project are seven research papers on privacy, a survey, and this final report, which summarises each research paper, and goes on to offer a set of reflections and recommendations to implement best practices regarding privacy. (shrink)

The potential to collect brain data more directly, with higher resolution, and in greater amounts has heightened worries about mental and brain privacy. In order to manage the risks to individuals posed by these privacy challenges, some have suggested codifying new privacy rights, including a right to “mental privacy.” In this paper, we consider these arguments and conclude that while neurotechnologies do raise significant privacy concerns, such concerns are—at least for now—no different from those (...) raised by other well-understood data collection technologies, such as gene sequencing tools and online surveillance. To better understand the privacy stakes of brain data, we suggest the use of a conceptual framework from information ethics, Helen Nissenbaum’s “contextual integrity” theory. To illustrate the importance of context, we examine neurotechnologies and the information flows they produce in three familiar contexts—healthcare and medical research, criminal justice, and consumer marketing. We argue that by emphasizing what is distinct about brain privacy issues, rather than what they share with other data privacy concerns, risks weakening broader efforts to enact more robust privacy law and policy. (shrink)

Current technology and surveillance practices make behaviors traceable to persons in unprecedented ways. This causes a loss of anonymity and of many privacy measures relied on in the past. These de facto privacy losses are by many seen as problematic for individual psychology, intimate relations and democratic practices such as free speech and free assembly. I share most of these concerns but propose that an even more fundamental problem might be that our very ability to act as autonomous (...) and purposive agents relies on some degree of privacy, perhaps particularly as we act in public and semi-public spaces. I suggest that basic issues concerning action choices have been left largely unexplored, due to a series of problematic theoretical assumptions at the heart of privacy debates. One such assumption has to do with the influential conceptualization of privacy as pertaining to personal intimate facts belonging to a private sphere as opposed to a public sphere of public facts. As Helen Nissenbaum has pointed out, the notion of privacy in public sounds almost like an oxymoron given this traditional private-public dichotomy. I discuss her important attempt to defend privacy in public through her concept of ‘contextual integrity.’ Context is crucial, but Nissenbaum’s descriptive notion of existing norms seems to fall short of a solution. I here agree with Joel Reidenberg’s recent worries regarding any approach that relies on ‘reasonable expectations’ . The problem is that in many current contexts we have no such expectations. Our contexts have already lost their integrity, so to speak. By way of a functional and more biologically inspired account, I analyze the relational and contextual dynamics of both privacy needs and harms. Through an understanding of action choice as situated and options and capabilities as relational, a more consequence-oriented notion of privacy begins to appear. I suggest that privacy needs, harms and protections are relational. Privacy might have less to do with seclusion and absolute transactional control than hitherto thought. It might instead hinge on capacities to limit the social consequences of our actions through knowing and shaping our perceptible agency and social contexts of action. To act with intent we generally need the ability to conceal during exposure. If this analysis is correct then relational privacy is an important condition for autonomic purposive and responsible agency—particularly in public space. Overall, this chapter offers a first stab at a reconceptualization of our privacy needs as relational to contexts of action. In terms of ‘rights to privacy’ this means that we should expand our view from the regulation and protection of the information of individuals to questions of the kind of contexts we are creating. I am here particularly interested in what I call ‘unbounded contexts’, i.e. cases of context collapses, hidden audiences and even unknowable future agents. (shrink)

The purpose of this survey was to gather individual’s attitudes and feelings towards privacy and the selling of data. A total (N) of 1,107 people responded to the survey. -/- Across continents, age, gender, and levels of education, people overwhelmingly think privacy is important. An impressive 82% of respondents deem privacy extremely or very important, and only 1% deem privacy unimportant. Similarly, 88% of participants either agree or strongly agree with the statement that ‘violations to the (...) right to privacy are one of the most important dangers that citizens face in the digital age.’ The great majority of respondents (92%) report having experienced at least one privacy breach. -/- People’s first concern when losing privacy is the possibility that their personal data might be used to steal money from them. Interestingly, in second place in the ranking of concerns, people report being concerned about privacy because ‘Privacy is a good in itself, above and beyond the consequences it may have.’ -/- People tend to feel that they cannot trust companies and institutions to protect their privacy and use their personal data in responsible ways. The majority of people believe that governments should not be allowed to collect everyone’s personal data. Privacy is thought to be a right that should not have to be paid for. (shrink)

According to assurance views of testimonial justification, in virtue of the act of testifying a speaker provides an assurance of the truth of what she asserts to the addressee. This assurance provides a special justificatory force and a distinctive normative status to the addressee. It is thought to explain certain asymmetries between addressees and other unintended hearers (bystanders and eavesdroppers), such as the phenomenon that the addressee has a right to blame the speaker for conveying a falsehood but unintended (...) hearers do not, and the phenomenon that the addressee may deflect challenges to his testimonial belief to the speaker but unintended hearers may not. Here I argue that we can do a better job explaining the normative statuses associated with testimony by reference to epistemic norms of assertion and privacy norms. Following Sanford Goldberg, I argue that epistemic norms of assertion, according to which sincere assertion is appropriate only when the asserter possesses certain epistemic goods, can be ‘put to work’ to explain the normative statuses associated with testimony. When these norms are violated, they give hearers the right to blame the speaker, and they also explain why the speaker takes responsibility for the justification of the statement asserted. Norms of privacy, on the other hand, directly exclude eavesdroppers and bystanders from an informational exchange, implying that they have no standing to do many of the things, such as issue challenges or questions to the speaker, that would be normal for conversational participants. This explains asymmetries of normative status associated with testimony in a way logically independent of speaker assurance. (shrink)

Privacy involves a zone of inaccessibility in a particular context. In social discourse it pertains to activities that are not public, the latter being by definition knowable by outsiders. The public domain so called is the opposite of secrecy and somewhat less so of confidentiality. The private sphere is respected in law and morality, now in terms of a right to privacy. In law some violations of privacy are torts. Philosophers tend to associate privacy with (...) personhood. Professional relationships are prima facie private but may be investigated for cause. Privacy may entail both intimacy and caring but neither necessarily so. Finally, various technology-based means of intrusion are rendering privacy ever more difficult to sustain. (shrink)

This paper argues that assessing personal responsibility in healthcare settings for the allocation of medical resources would be too privacy-invasive to be morally justifiable. In addition to being an inappropriate and moralizing intrusion into the private lives of patients, it would put patients’ sensitive data at risk, making data subjects vulnerable to a variety of privacy-related harms. Even though we allow privacy-invasive investigations to take place in legal trials, the justice and healthcare systems are not analogous. The (...) duty of doctors and healthcare professionals is to help patients as best they can—not to judge them. Patients should not be forced into giving up any more personal information than what is strictly necessary to receive an adequate treatment, and their medical data should only be used for appropriate purposes. Medical ethics codes should reflect these data rights. When a doctor asks personal questions that are irrelevant to diagnose or treat a patient, the appropriate response from the patient is: ‘none of your business’. (shrink)

This paper examines whether American parents legally violate their children’s privacy rights when they share embarrassing images of their children on social media without their children’s consent. My inquiry is motivated by recent reports that French authorities have warned French parents that they could face fines and imprisonment for such conduct, if their children sue them once their children turn 18. Where French privacy law is grounded in respect for dignity, thereby explaining the French concerns for parental “over-sharing,” (...) I show that there are three major legal roadblocks for such a case to succeed in US law. First, US privacy tort law largely only protects a person’s image where the person has a commercial interest in his or her image. Secondly, privacy tort laws are subject to constitutional constraints respecting the freedom of speech and press. Third, American courts are reluctant to erode parental authority, except in cases where extraordinary threats to children’s welfare exist. I argue that while existing privacy law in the US is inadequate to offer children legal remedy if their parents share their embarrassing images of them without their consent, the dignity-based concerns of the French should not be neglected. I consider a recent proposal to protect children’s privacy by extending to them the “right to be forgotten” online, but I identify problems in this proposal, and argue it is not a panacea to the over-sharing problem. I conclude by emphasizing our shared social responsibilities to protect children by teaching them about the importance of respecting one another’s privacy and dignity in the online context, and by setting examples as responsible users of internet technologies. (shrink)

As the science and technology of the brain and mind develop, so do the ways in which brains and minds may be surveilled and manipulated. Some cognitive libertarians worry that these developments undermine cognitive liberty, or “freedom of thought.” I argue that protecting an individual’s cognitive liberty undermines others’ ability to use their own cognitive liberty. Given that the threatening devices and processes are not relevantly different from ordinary and frequent intrusions upon one’s brain and mind, strong protections of cognitive (...) liberty may proscribe neurotechnological intrusions, but also ordinary intrusions. Thus, the cognitive libertarian position “hog-ties” others’ use of their own liberties. This problem for the cognitive libertarian is the same problem that ordinary libertarianism faces in protecting individual rights to property and person. But the libertarian strategies for resolving the problem don’t work for the cognitive libertarian. I conclude that the right to mental privacy is weaker than what cognitive libertarians want it to be. (shrink)

In this chapter I identify three problems affecting the plausibility of group privacy and argue in favour of their resolution. The first problem concerns the nature of the groups in question. I shall argue that groups are neither discovered nor invented, but designed by the level of abstraction (LoA) at which a specific analysis of a social system is developed. Their design is therefore justified insofar as the purpose, guiding the choice of the LoA, is justified. This should remove (...) the objection that groups cannot have a right to privacy because groups are mere artefacts (there are no groups, only individuals) or that, even if there are groups, it is too difficult to deal with them. The second problem concerns the possibility of attributing rights to groups. I shall argue that the same logic of attribution of a right to individuals may be used to attribute a right to a group, provided one modifies the LoA and now treats the whole group itself as an individual. This should remove the objection that, even if groups exist and are manageable, they cannot be treated as holders of rights. The third problem concerns the possibility of attributing a right to privacy to groups. I shall argue that sometimes it is the group and only the group, not its members, that is correctly identified as the correct holder of a right to privacy. This should remove the objection that privacy, as a group right, is a right held not by a group as a group but rather by the group’s members severally. The solutions of the three problems supports the thesis that an interpretation of privacy in terms of a protection of the information that constitutes an individual—both in terms of a single person and in terms of a group—is better suited than other interpretations to make sense of group privacy. (shrink)

The fact that Internet companies may record our personal data and track our online behavior for commercial or political purpose has emphasized aspects related to online privacy. This has also led to the development of search engines that promise no tracking and privacy. Search engines also have a major role in spreading low-quality health information such as that of anti-vaccine websites. This study investigates the relationship between search engines’ approach to privacy and the scientific quality of the (...) information they return. We analyzed the first 30 webpages returned searching “vaccines autism” in English, Spanish, Italian, and French. The results show that not only “alternative” search engines but also other commercial engines often return more anti-vaccine pages (10–53%) than Google (0%). Some localized versions of Google, however, returned more anti-vaccine webpages (up to 10%) than Google. Health information returned by search engines has an impact on public health and, specifically, in the acceptance of vaccines. The issue of information quality when seeking information for making health-related decisions also impact the ethical aspect represented by the right to an informed consent. Our study suggests that designing a search engine that is privacy savvy and avoids issues with filter bubbles that can result from user-tracking is necessary but insufficient; instead, mechanisms should be developed to test search engines from the perspective of information quality (particularly for health-related webpages) before they can be deemed trustworthy providers of public health information. (shrink)

Since approval of the EU General Data Protection Regulation (GDPR) in 2016, it has been widely and repeatedly claimed that the GDPR will legally mandate a ‘right to explanation’ of all decisions made by automated or artificially intelligent algorithmic systems. This right to explanation is viewed as an ideal mechanism to enhance the accountability and transparency of automated decision-making. However, there are several reasons to doubt both the legal existence and the feasibility of such a right. In (...) contrast to the right to explanation of specific automated decisions claimed elsewhere, the GDPR only mandates that data subjects receive meaningful, but properly limited, information (Articles 13-15) about the logic involved, as well as the significance and the envisaged consequences of automated decision-making systems, what we term a ‘right to be informed’. Further, the ambiguity and limited scope of the ‘right not to be subject to automated decision-making’ contained in Article 22 (from which the alleged ‘right to explanation’ stems) raises questions over the protection actually afforded to data subjects. These problems show that the GDPR lacks precise language as well as explicit and well-defined rights and safeguards against automated decision-making, and therefore runs the risk of being toothless. We propose a number of legislative and policy steps that, if taken, may improve the transparency and accountability of automated decision-making when the GDPR comes into force in 2018. (shrink)

At some point in the future – perhaps within the next few decades – it will be possible for foetuses to develop completely outside the womb. Ectogenesis, as this technology is called, raises substantial issues for the abortion debate. One such issue is that it will become possible for a woman to have an abortion, in the sense of having the foetus removed from her body, but for the foetus to be kept alive. We argue that while there is a (...) right to an abortion, there are reasons to doubt that there is a right to the death of the foetus. Our strategy in this essay is to consider and reject three arguments in favour of this latter right. The first claims that women have a right not to be biological mothers, the second that women have a right to genetic privacy, and the third that a foetus is one's property. Furthermore, we argue that it follows from rejecting the third claim that genetic parents also lack a right to the destruction of cryopreserved embryos used for in vitro fertilization. The conclusion that a woman possesses no right to the death of the foetus builds upon the claims that other pro-choice advocates, such as Judith Jarvis Thomson, have made. (shrink)

Many people believe that the abortion debate will end when at some point in the future it will be possible for fetuses to develop outside the womb. Ectogenesis, as this technology is called, would make possible to reconcile pro-life and pro-choice positions. That is because it is commonly believed that there is no right to the death of the fetus if it can be detached alive and gestated in an artificial womb. Recently Eric Mathison and Jeremy Davis defended this (...) position, by arguing against three common arguments for a right to the death of the fetus. I claim that their arguments are mistaken. I argue that there is a right to the death of the fetus because gestating a fetus in an artificial womb when genetic parents refuse it violates their rights not to become a biological parent, their rights to genetic privacy and their property rights. The right to the death of the fetus, however, is not a woman's right but genetic parents’ collective right which only can be used together. (shrink)

Does privacy--the condition of being invisible to public scrutiny--in so emphasizing individual rights, undermine community? One objection to privacy is that it is a license to engage in antisocial activity that undermines social norms. Another objection is that privacy encourages isolation and anonymity, also undermining community. Drawing on the political theory of Hegel, I argue that privacy can promote community. Some invasions of privacy can undermine a sort of autonomy essential for maintaining a community. I (...) also discuss what we need to know before establishing whether privacy empirically promotes or undermines community. (shrink)

This article is part of a symposium on property-owning democracy. In A Theory of Justice John Rawls argued that people in a just society would have rights to some forms of personal property, whatever the best way to organise the economy. Without being explicit about it, he also seems to have believed that protection for at least some forms of privacy are included in the Basic Liberties, to which all are entitled. Thus, Rawls assumes that people are entitled to (...) form families, as well as personal associations which reflect their tastes as well as their beliefs and interests. He seems also to have assumed that people are entitled to seclude themselves, as well as to associate with others, and to keep some of their beliefs, knowledge, feelings and ideas to themselves, rather than having to share them with others. So, thinking of privacy as an amalgam of claims to seclusion, solitude, anonymity and intimate association, we can say that Rawls appears to include at least some forms of privacy in his account of the liberties protected by the first principle of justice. -/- However, Rawls did not say very much about how he understands people’s claims to privacy, or how those claims relate to his ideas about property-ownership. This is unfortunate, because two familiar objections to privacy seem particularly pertinent to his conception of the basic liberties. The first was articulated with customary panache by Judith Thomson, in a famous article on the moral right to privacy, in which she argued that talk of a moral right to privacy is confused and confusing, because privacy rights are really just property rights in disguise. The second objection has long been a staple of leftist politics, and is that the association of privacy with private property means that privacy rights are just a mask for coercive and exploitative relationships, and therefore at odds with democratic freedom, equality and solidarity. If the first objection implies that Rawls is wrong to think that protection for privacy can be distinguished from protection of personal property, the second objection implies that Rawls cannot hope to protect privacy without thereby committing himself to the grossest forms of capitalist inequality. -/- In this paper I will not discuss Rawls’ views of property-owning democracy. However, by clarifying the relationship between claims to privacy and claims to property-ownership, I hope to illuminate some of the conceptual, moral and political issues raised by Rawls’ ideas, and by work on the concept of a property-owning democracy, which he inspired. As we will see, privacy-based justifications of private ownership are not always unappealing, and privacy is sometimes promoted, rather than threatened, by collective ownership. The conclusion draws out the significance of these claims for the idea of a property-owning democracy. (shrink)

If I decide to disclose information about myself, this act can undermine other people’s ability to effectively conceal information about themselves. One case in point involves genetic information: if I share ‘my’ genetic information with others, I thereby also reveal genetic information about my biological relatives. Such dependencies are well-known in the privacy literature and are often referred to as ‘privacy dependencies’. Some take the existence of privacy dependencies to generate a moral duty to sometimes avoid sharing (...) information about oneself. If true, we argue, then it is sometimes justified for others to impose harm on the person sharing the information to prevent them from doing so. This is a highly revisionary implication. Hence, one must either endorse a highly revisionary view on what one may do to protect one’s privacy, or one must reject the view that privacy dependencies can be used to justify a moral duty that constrains choices about sharing information about oneself. (shrink)

Disputes at the intersection of national security, surveillance, civil liberties, and transparency are nothing new, but they have become a particularly prominent part of public discourse in the years since the attacks on the World Trade Center in September 2001. This is in part due to the dramatic nature of those attacks, in part based on significant legal developments after the attacks (classifying persons as “enemy combatants” outside the scope of traditional Geneva protections, legal memos by White House counsel providing (...) rationale for torture, the USA Patriot Act), and in part because of the rapid development of communications and computing technologies that enable both greater connectivity among people and the greater ability to collect information about those connections. -/- One important way in which these questions intersect is in the controversy surrounding bulk collection of telephone metadata by the U.S. National Security Agency. The bulk metadata program (the “metadata program” or “program”) involved court orders under section 215 of the USA Patriot Act requiring telecommunications companies to provide records about all calls the companies handled and the creation of database that the NSA could search. The program was revealed to the general public in June 2013 as part of the large document leak by Edward Snowden, a former contractor for the NSA. -/- A fair amount has been written about section 215 and the bulk metadata program. Much of the commentary has focused on three discrete issues. First is whether the program is legal; that is, does the program comport with the language of the statute and is it consistent with Fourth Amendment protections against unreasonable searches and seizures? Second is whether the program infringes privacy rights; that is, does bulk metadata collection diminish individual privacy in a way that rises to the level that it infringes persons’ rights to privacy? Third is whether the secrecy of the program is inconsistent with democratic accountability. After all, people in the general public only became aware of the metadata program via the Snowden leaks; absent those leaks, there would have not likely been the sort of political backlash and investigation necessary to provide some kind of accountability. -/- In this chapter I argue that we need to look at these not as discrete questions, but as intersecting ones. The metadata program is not simply a legal problem (though it is one); it is not simply a privacy problem (though it is one); and it is not simply a secrecy problem (though it is one). Instead, the importance of the metadata program is the way in which these problems intersect and reinforce one another. Specifically, I will argue that the intersection of the questions undermines the value of rights, and that this is a deeper and more far-reaching moral problem than each of the component questions. (shrink)

All societies have to balance privacy claims with other moral concerns. However, while some concern for privacy appears to be a common feature of social life, the definition, extent and moral justifications for privacy differ widely. Are there better and worse ways of conceptualising, justifying, and managing privacy? These are the questions that lie in the background of this thesis. -/- My particular concern is with the ethical issues around privacy that are tied to the (...) rise of new information and communication technologies (henceforth “ICT”). The focus here is on technologies involved in processing personal data in its broadest sense, including “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.” The issue of moral concern is commonly designated as that of 'data privacy'. -/- The first step is to consider why privacy matters, or ought to matter, in the first place. And here we run into our first difficulty, since both the conceptualisation of privacy and the justification for the right to privacy are matters for contention. On the one hand, we are animated by a moral concern for privacy in some sense; on the other, we lack the conceptual and moral resources for making sense of this concern or for promoting particular social policies and criticising others. This often-cited dichotomy and its ensuing confusion have been the central motivation for most of the philosophical literature on privacy – including this thesis. -/- In what follows, I will suggest a way out of the confusion that pervades the current debate on data privacy. I will essentially argue two claims: one, that the concept of (data) privacy is uniquely characterised by a particular context within which we exchange information; two, that because (data) privacy constitutes an intrinsic value, its moral concerns and justifications ought to be deliberated as such. -/- The first chapter sketches the current data privacy landscape by introducing a number of concepts and arguing the unique nature of the landscape. I argue that the traditional distinction between four kinds of privacy (physical, mental, decisional and informational) is no longer accurate, given the technological context that reduces, unifies and processes all aspects of people’s lives by means of digital data. In fact, to hold on to the distinction leads to a fundamental misconception of data privacy. I further argue that today’s distinction between data protection and data privacy runs the risk of ignoring the fact that the former is an inherent aspect of the latter. These arguments allow me to settle on a (provisional) definition of data privacy: controlling how data about identifiable people is processed by ICT. -/- Next, I draw a line between descriptive and normative accounts of data privacy, and explain why this book belongs to the latter category. After a brief discussion of the coherence and distinctiveness theses, and of the difference between instrumental and intrinsic theories of privacy, I introduce the problem of data privacy as a distinct, coherent, and intrinsic moral concern. Three arguments support this position: one, data privacy is a coherent moral concern because it is motivated by a singular moral concept; two, data privacy is a distinct moral concern because the privacy challenges we face today are of a fundamentally new nature – distinct from any moral concerns we’ve faced in the past; and three, data privacy is an intrinsic moral concern that is predominantly justified, not by what it instrumentally protects us from, but by what it intrinsically constitutes. -/- Chapter Two makes the case against a harm-based, consequentialist approach to data privacy. After a brief introduction to the basic tenets of consequentialism I discuss harm-based arguments in favour as well as against privacy. I explain how privacy may protect us against psychological distress, but at the same time constitute the source of that distress; how privacy may be necessary for the proper functioning of democratic societies, but at the same time provide a cloak for anti-social and immoral behaviour; and how privacy protects us against the improper use of our personal data by others, but at the same enables us to conceal information or spread false information about ourselves in ways that are harmful to others. Next, I argue that consequentialism essentially relies on two flawed presumptions – that we know what harm is, and that we know how to predict it – and discuss the controversies surrounding definitions and predictions of harm. This argument becomes especially pertinent in today’s rapidly changing technological context: we may guess, and make assumptions, perhaps even find correlations, but don’t really know or understand (yet) with any degree of certainty the harmful consequences today’s data privacy violations are causing or will eventually cause – if any. -/- I illustrate this with examples of recent data privacy violations, and with a brief overview of consequentialist arguments for and against data privacy. Those who invoke consequentialist arguments against data privacy claim that personal data is nothing more than a raw material that can be turned into something useful and valuable without harming anyone. Choosing to move fast and break things – a popular mantra that promotes the benefits of technological “permissionless innovation” over and above its risks and costs – they draw our attention to the many benefits free data flows generate. Those who rely on consequentialist arguments in favour of data privacy, on the other hand, insist on actual and potential misuse of personal data. Rather careful than sorry, they draw our attention to the urgent need to take back control and protect ourselves against data privacy violations – precisely because we don’t know which harm they may cause in the future. Others go one step further and argue that these violations are part of a broader ideology of power. -/- What Chapter Two demonstrates is that vague definitions, unreliable predictions and inconclusive allegations of harm from both sides of the debate perpetuate a stalemate that fails to produce morally defensible answers to our growing data privacy concerns. Deliberating about data privacy from a consequentialist perspective is a dead end. -/- Chapter Three proposes an alternative to the harm-based approach, namely that privacy is an intrinsic value that deserves moral protection for its own sake. After a brief account of what I take values to be, and why we have a need to protect them, I introduce the foundational value of respect for persons, and lay out my main argument in two steps. The conceptual component of my argument returns to the definition of data privacy I had temporarily settled on in Chapter One, but now with the added consideration of the particular context, and particular circumstances and attitudes, within which information is exchanged. This addition is crucial, as it reveals the fundamental value that is at stake in our data privacy concerns, namely the inherent value of each and every person, which we protect by upholding an ethical principle commonly known as the principle of respect for persons. It is for this reason that the violation of privacy cannot (only) be expressed in terms of harm. I further argue that the principle of respect for persons is consistent with, and in fact unthinkable without, some degree of privacy. -/- I reply to potential challenges to a value-based approach to data privacy by showing that (i) values and value trade-offs are fundamentally different from consequential benefits and cost-benefit analyses; (ii) the suspension of one value in favour of another is not inherently contradictory; what matters is morally defensible deliberation about values and valid individual consent; (iii) data privacy concerns cannot be reduced to other moral concerns and therefore deserve a specific, distinct protection. -/- Finally, because this is a thesis in applied ethics, I attempt an answer to the question as to how we ought to apply a value-based approach to practical data privacy concerns. I argue that a revised, three-pronged version of John Rawls’ reflective equilibrium, founded on the non-negotiable principle of respect for persons, is the best possible procedure to deliberate data privacy concerns in relation to other moral values. (shrink)

In recent years, educational institutions have started using the tools of commercial data analytics in higher education. By gathering information about students as they navigate campus information systems, learning analytics “uses analytic techniques to help target instructional, curricular, and support resources” to examine student learning behaviors and change students’ learning environments. As a result, the information educators and educational institutions have at their disposal is no longer demarcated by course content and assessments, and old boundaries between information used for assessment (...) and information about how students live and work are blurring. Our goal in this paper is to provide a systematic discussion of the ways in which privacy and learning analytics conflict and to provide a framework for understanding those conflicts. -/- We argue that there are five crucial issues about student privacy that we must address in order to ensure that whatever the laudable goals and gains of learning analytics, they are commensurate with respecting students’ privacy and associated rights, including (but not limited to) autonomy interests. First, we argue that we must distinguish among different entities with respect to whom students have, or lack, privacy. Second, we argue that we need clear criteria for what information may justifiably be collected in the name of learning analytics. Third, we need to address whether purported consequences of learning analytics (e.g., better learning outcomes) are justified and what the distributions of those consequences are. Fourth, we argue that regardless of how robust the benefits of learning analytics turn out to be, students have important autonomy interests in how information about them is collected. Finally, we argue that it is an open question whether the goods that justify higher education are advanced by learning analytics, or whether collection of information actually runs counter to those goods. (shrink)

In this chapter I give a brief explanation of what privacy is, argue that protecting privacy is important because violations of the right to privacy can harm us individually and collectively, and offer some advice as to how to protect our privacy online.

The increasingly prominent role of digital technologies during the coronavirus pandemic has been accompanied by concerning trends in privacy and digital ethics. But more robust protection of our rights in the digital realm is possible in the future. -/- After surveying some of the challenges we face, I argue for the importance of diplomacy. Democratic countries must try to come together and reach agreements on minimum standards and rules regarding cybersecurity, privacy and the governance of AI.

This paper argues that legal privacy should be afforded to the content of the mind, comparing cognitive privacy to other protected forms of privacy and briefly addressing the potential pitfalls of compulsory neuroimaging.

Modern neurotechnologies are rapidly infringing on conventional notions of human dignity and they are challenging what it means to be human. This article is a survey analysis of the future of the digital age, reflecting primarily on the effects of neurotechnology that violate universal human rights to dignity, self-determination, and privacy. In particular, this article focuses on neuromarketing to critically assess potentially negative social ramifications of under-regulated neurotechnological application. Possible solutions are critically evaluated, including the human rights claim to (...) the ‘right to mental privacy’ and the suggestion of a new human right based on spiritual jurisdiction, where the human psyche is a legal space in a substantive legal setting. (shrink)

The paper makes a twofold contribution. Firstly, it advances a preliminary account of the conditions that need to obtain for constitutional rights to be democratic. Secondly, in so doing, it defends precommitment-based theories from a criticism raised by Jeremy Waldron—namely, that constitutional rights do not become any more democratic when they are democratically adopted, for the people could adopt undemocratic policies without such policies becoming democratic as a result. The paper shows that the reductio applies to political rights, yet not (...) to non-political rights, such as reproductive, environmental, or privacy rights. The democratic status of the former is process-independent. The latter, by contrast, are democratic precisely when they are adopted by democratic means. (shrink)

The debate on whether and how the Internet can protect and foster human rights has become a defining issue of our time. This debate often focuses on Internet governance from a regulatory perspective, underestimating the influence and power of the governance of the Internet’s architecture. The technical decisions made by Internet Standard Developing Organisations that build and maintain the technical infrastructure of the Internet influences how information flows. They rearrange the shape of the technically mediated public sphere, including which rights (...) it protects and which practices it enables. In this article, we contribute to the debate on SDOs’ ethical responsibility to bring their work in line with human rights. We defend three theses. First, SDOs’ work is inherently political. Second, the Internet Engineering Task Force, one of the most influential SDOs, has a moral obligation to ensure its work is coherent with, and fosters, human rights. Third, the IETF should enable the actualisation of human rights through the protocols and standards it designs by implementing a responsibility-by-design approach to engineering. We conclude by presenting some initial recommendations on how to ensure that work carried out by the IETF may enable human rights. (shrink)