Every day, Internet users interact with technologies designed to undermine their privacy. Social media apps, surveillance technologies, and the Internet of Things are all built in ways that make it hard to guard personal information. And the law says this is okay because it is up to users to protect themselves—even when the odds are deliberately stacked against them. In Privacy’s Blueprint, Woodrow Hartzog pushes back against this state of affairs, arguing that the law should require software and hardware makers to respect privacy in the design of their products. Current legal doctrine treats technology as though it were value-neutral: only the user decides whether it functions for good or ill. But this is not so. As Hartzog explains, popular digital tools are designed to expose people and manipulate users into disclosing personal information. Against the often self-serving optimism of Silicon Valley and the inertia of tech evangelism, Hartzog contends that privacy gains will come from better rules for products, not users. The current model of regulating use fosters exploitation. Privacy’s Blueprint aims to correct this by developing the theoretical underpinnings of a new kind of privacy law responsive to the way people actually perceive and use digital technologies. The law can demand encryption. It can prohibit malicious interfaces that deceive users and leave them vulnerable. It can require safeguards against abuses of biometric surveillance. It can, in short, make the technology itself worthy of our trust.

The case for taking design seriously in privacy law -- Why design is (almost) everything -- Privacy law's design gap -- Privacy values in design -- Setting boundaries for design -- A toolkit for privacy design -- Social media -- Hide and seek technologies -- The internet of things

Online surveillance of our behavior by private companies is on the increase, particularly through the Internet of Things and the increasing use of algorithmic decision-making. This troubling trend undermines privacy and increasingly threatens our ability to control how information about us is shared and used. Written by a computer scientist and a legal scholar, The Privacy Fix proposes a set of evidence-based, practical solutions that will help solve this problem. Requiring no technical or legal expertise, the book explains complicated concepts in clear, straightforward language. Bridging the gap between computer scientists, economists, lawyers, and public policy makers, this book provides theoretically and practically sound public policy guidance about how to preserve privacy in the onslaught of surveillance. It emphasizes the need to make tradeoffs among the complex concerns that arise, and it outlines a practical norm-creation process to do so.

The subjects of this volume are more relevant than ever, especially in light of the raft of electoral scandals concerning voter profiling. This volume brings together papers that offer conceptual analyses, highlight issues, propose solutions, and discuss practices regarding privacy and data protection. It is one of the results of the twelfth annual International Conference on Computers, Privacy and Data Protection, CPDP, held in Brussels in January 2019. The book explores the following topics: dataset nutrition labels, lifelogging and privacy by design, data protection iconography, the substance and essence of the right to data protection, public registers and data protection, modelling and verification in data protection impact assessments, examination scripts and data protection law in Cameroon, the protection of children's digital rights in the GDPR, the concept of the scope of risk in the GDPR and the ePrivacy Regulation. This interdisciplinary book has been written at a time when the scale and impact of data processing on society – not only on individuals, but also on social systems – is becoming ever starker. It discusses open issues as well as daring and prospective approaches, and will serve as an insightful resource for readers with an interest in computers, privacy and data protection.

This book discusses the implementation of privacy by design in Europe, a principle that has been codified within the European Data Protection Regulation (GDPR). While privacy by design inspires hope for future privacy-sensitive designs, it also introduces the need for a common understanding of the legal and technical concepts of privacy and data protection. By pursuing an interdisciplinary approach and comparing the problem definitions and objectives of both disciplines, this book bridges the gap between the legal and technical fields in order to enhance the regulatory and academic discourse. The research presented reveals the scope of legal principles and technical tools for privacy protection, and shows that the concept of privacy by design goes beyond the principle of the GDPR. The book presents an analysis of how current regulations delegate the implementation of technical privacy and data protection measures to developers and describes how policy design must evolve in order to implement privacy by design and default principles.

Cover -- Half Title -- Why Privacy Matters -- Copyright -- Contents -- Introduction: The Privacy Conversation -- Part I -- 1. What Privacy Is -- 2. A Theory of Privacy as Rules -- 3. What Privacy Isn't -- Part II -- 4. Identity -- 5. Freedom -- 6. Protection -- Conclusion: Why Privacy Matters -- Acknowledgments -- Notes -- Index.

Uncovers why privacy laws fail at protecting us from corporate data harms and charts a path for reform.