Posts Tagged ‘privacy’

How tort law harms privacy

Per Eugene Volokh‘s new article, a wide range of actors from landlords to employers to colleges to product manufacturers correctly see themselves as being at legal risk if they don’t surveill, probe, and share information about those they deal with:

Gathering or disclosing information about people’s backgrounds, tendencies, and actions is increasingly inexpensive, and increasingly effective at helping avoid, interrupt, or deter harm. …Failure to take those precautions thus becomes negligent. … Failure to provide camera surveillance is now a common claim in negligence cases.

An especially fertile source of such incentives is the duty (much expanded by modern developments in liability law) to take reasonable precautions against criminal acts by others. It will soon be feasible at low cost, if it is not already, for automakers to install electronic components in new cars that send a warning communication — to police monitors, for example — when a motorist tries to drive at very high speed. What will happen after automakers begin to be sued after accidents for not installing such components?

Tech roundup

  • Far-reaching, little-discussed new regulation: Stewart Baker on NIST rules mandating cybersecurity at private enterprises [Volokh; first, second, third, fourth posts]
  • “Ominous Developments on the Internet Governance Front” [David Post]
  • “The Exaggeration Of The Cyberbullying Problem Is Harming Anti-Bullying Efforts” [Tim Cushing, TechDirt]
  • “Will California’s New Data Breach Notification Duty Stimulate Class Action Litigation?” [Glenn Lammi, WLF]
  • Some thoughts on how the law should treat domestic drones, public and private [Kenneth Anderson]
  • Privacy lawsuit against Gmail could do a lot of damage [Mike Masnick, TechDirt; Matt Powers, CEI “Open Market”, parts one, two]
  • Warning: more efforts ahead from legal academia to come up with stringent liability schemes for software makers [New Republic and Lawfare]

Employer knew of Navy Yard shooter’s mental instability

This fairly gripping New York Times account by reporter Serge Kovaleski gives the backstory of the horrendous Navy Yard massacre — a contract employee with a security clearance had been displaying increasingly florid symptoms of paranoid schizophrenia, yet was not taken off his job — but is missing one angle I was curious about:

On Aug. 9, the director of human resources for the Experts spoke to Mr. Alexis’ mother, who told the director of his previous paranoid behavior, the person with knowledge of the investigation said. His mother told the director that Mr. Alexis’ paranoia tended to subside with time, but that “he likely needed to see a therapist.”

That same day, the director convened a meeting of “senior-level personnel” at the Experts who concluded that he could be sent back to work. The Hewlett-Packard investigation found that the Experts did not attempt to get Mr. Alexis to seek mental health care, a finding that the Experts has not disputed.

…In an e-mail message, the Experts said that a Hewlett-Packard manager in Newport said she was “comfortable” having Mr. Alexis come back to work after he reported hearing voices.

Hewlett-Packard said its manager in Newport was a low-level employee who was not given full details by the Experts about Mr. Alexis’ problems. The company said it has placed that manager on administrative leave.

The missing angle is: what if any role was played by the legal constraints on the various entities that directly or indirectly employed Mr. Alexis? Severe mental illness is a protected condition under the ADA, and employers may not be free to take workers off their duties unless and until they can assemble evidence that would stand up in court documenting a “direct threat,” “undue hardship” or other adequate reason for removal; the law places limits on the employer’s right to demand medical exams to evaluate the exact contours of disability; and privacy rules limit sharing of medically relevant information between different entities, as we saw in the Seung-Hui Cho/Virginia Tech case. All these rules apply to ordinary larger private businesses, but some come in especially stringent form when applied to federal contractors.

Did any of these legal doctrines influence the course of decision-making by which Mr. Alexis received oddly hands-off treatment even as his mental state spun out of control? One hopes a future NYT article will return to take a look at those questions.

School district pays private firm to monitor students’ after-hours social media

If a private employer tried to pull this kind of thing I expect there’d be an outcry:

Glendale school officials have hired a Hermosa Beach company to monitor and analyze public social media posts, saying the service will help them step in when students are in danger of harming themselves or others.

And with a private employer, you’d be there by your own choice.

“If You Knew What I Know About Email, You Might Not Use It”

The head of Lavabit — one of two small encrypted email providers that just closed down pre-emptively rather than fight federal government demands — “says he’s been told it’s illegal even to discuss what demand the feds made of him.” [Kashmir Hill/Forbes, more, TechCrunch, Guardian] “Wyden’s constant references to location tracking in this context would be nothing short of bizarre unless he had reason to believe that the governments assurances on this score are misleading, and that there either is or has been some program involving bulk collection of phone records.” [Julian Sanchez, Cato] “The Public-Private Surveillance Partnership” [Bruce Schneier, Bloomberg] “A Guide to What We Now Know About the NSA’s Dragnet Searches of Your Communications” [Brett Max Kaufman, ACLU] The Cato Institute has filed a brief urging the Supreme Court to accept a case challenging the legality of current programs of mass surveillance, in a case filed by the Electronic Privacy Information Center.

More: No right to noisy exit? “Feds Threaten To Arrest Lavabit Founder For Shutting Down His Service” [TechDirt] And now (Sunday): with no charges and no arrest, authorities at Heathrow held and interrogated the partner of journalist Glenn Greenwald (who has exposed the NSA program) for nine hours, exactly as long as they could under Britain’s anti-terror law without pressing a charge. They also confiscated his phone, laptop, USB sticks and other electronic gear. [Guardian, Greenwald, NY Times, Lowering the Bar, Peter Maass/NYT Magazine (filmmaker and Greenwald collaborator Laura Poitras regularly detained and interrogated at airports), Joel Mathis/Philly Mag] But see The Spectator (Miranda “carrying encrypted files from Snowden to Greenwald”).

Other federal agencies want in to the Panopticon

Yes, “copyright infringement”:

Agencies working to curb drug trafficking, cyberattacks, money laundering, counterfeiting and even copyright infringement complain that their attempts to exploit the [National Security Agency’s] vast resources have often been turned down because their own investigations are not considered a high enough priority, current and former government officials say. …

“It’s a very common complaint about N.S.A.,” said Timothy H. Edgar, a former senior intelligence official at the White House and at the office of the director of national intelligence. “They collect all this information, but it’s difficult for the other agencies to get access to what they want.”

“The other agencies feel they should be bigger players,” said Mr. Edgar, who heard many of the disputes before leaving government this year to become a visiting fellow at Brown University. “They view the N.S.A. — incorrectly, I think — as this big pot of data that they could go get if they were just able to pry it out of them.”

Rep. Justin Amash (R-Mich.) speaks out on NSA bulk surveillance in this new Cato video with Caleb Brown. Earlier on surveillance here, here, and here; earlier on panopticons here. For the use of “money laundering” laws to pursue financial flows having nothing to do with terrorism or drug smuggling, see our reports here, here, here, here, etc.

Banking and finance roundup

  • Employer mandate not the only impractical reg being postponed: “IRS Delays Implementation of FATCA” [Paul Caron; earlier]
  • Foreign banks whipsawed betwen U.S. terrorism-finance liability and privacy laws in home countries [Daniel Fisher]
  • “NY Fed Official: Let’s ‘Facilitate’ The Seizure Of Underwater Loans” [Kevin Funnell]
  • “If anything, the data suggest [home] ownership … inversely correlated with political stability and rule of law.” [Michael Greve]
  • Revisiting the Randy and Karen Sowers structuring case [Kathleen Hunker, Bell Towers; earlier]
  • “Can we improve payday lending?” [Andrew Sullivan]
  • When if ever should the SEC pay bounties to attorneys to snitch on their clients? [Prof. Bainbridge]

Did Euro data privacy regs help kill Google Reader?

Many loyal users (including me) were beyond glum when Google decided to close down its venerable RSS reader, effective yesterday. Maxim Lott at Fox News has this report:

“You would think that it would take little effort to maintain the site, but compliance keeps the cost up,” the source [“familiar with the matter”] told FoxNews.com.

He gave one example of a costly regulation.

“In Europe they’ve had a regulation for years where basically, if someone requests that all their data on a site be deleted, the company must comply. Reader wasn’t compliant with that. So it comes down to, do you spend a lot more resources making the service compliant, or working on something new?”…

Google spokeswoman Nadja Blagojevic declined to comment about whether regulatory costs played a role in Reader’s demise.