Information privacy law / 3rd ed.

CONTENTS
Preface xxv
Acknowledgments xxix
1 INTRODUCTION 1
A. INFORMATION PRIVACY, TECHNOLOGY, AND THE LAW 1
? Sidis v. F-R Publishing Corp. 2
B. INFORMATION PRIVACY LAW: ORIGINS AND TYPES 9
1. Common Law 9
(a) The Warren and Brandeis Article 9
? Samuel D. Warren and Louis D. Brandeis, The Right to Privacy 12
(b) The Recognition of Warren and Brandeis¿s Privacy Torts 24
? William Prosser, Privacy 26
? Lake v. Wal-Mart Stores, Inc. 27
(c) Privacy Protection in Tort Law 30
(d) Privacy Protection in Evidence Law 31
(e) Privacy Protection via Property Rights 31
(f) Privacy Protection in Contract Law 32
(g) Privacy Protection in Criminal Law 32
2. Constitutional Law 33
3. Statutory Law 35
4. International Law 38
C. PERSPECTIVES ON PRIVACY 39
1. The Philosophical Discourse About Privacy 39
(a) The Concept of Privacy and the Right to Privacy 39
(b) The Public and Private Spheres 39
2. The Definition and the Value of Privacy 40
? Alan Westin, Privacy and Freedom 41
? Julie E. Cohen, Examined Lives: Informational Privacy and the Subject
as Object 46
? Daniel J. Solove, Conceptualizing Privacy 49
? Anita L. Allen, Coercing Privacy 52
? Paul M. Schwartz, Privacy and Democracy in Cyberspace 54
? Spiros Simitis, Reviewing Privacy in an Information Society 56
3. Critics of Privacy 59
? Amitai Etzioni, The Limits of Privacy 59
? Richard A. Posner, The Right of Privacy 62
? Fred H. Cate, Principles of Internet Privacy 65
4. The Feminist Perspective on Privacy 67
? State v. Rhodes 67
? Reva B. Siegel, ¿The Rule of Love¿: Wife Beating as Prerogative
and Privacy 69
? Catharine A. MacKinnon, Toward a Feminist Theory of the State 71
? Anita L. Allen, Uneasy Access: Privacy for Women in a Free Society 72
2 PRIVACY AND THE MEDIA 75
A. INFORMATION GATHERING 76
1. Intrusion upon Seclusion 76
? Restatement (Second) of Torts § 652B: Intrusion upon Seclusion 76
? Nader v. General Motors Corp. 77
? Dietemann v. Time, Inc. 81
? Desnick v. American Broadcasting Co., Inc. 84
? Shulman v. Group W Productions, Inc. 90
2. Paparazzi 94
? Galella v. Onassis 94
? California Anti-Paparazzi Act 96
3. Video Voyeurism 100
? Video Voyeurism Prevention Act of 2004 101
B. DISCLOSURE OF TRUTHFUL INFORMATION 102
1. Public Disclosure of Private Facts 103
(a) Introduction 103
? Restatement (Second) of Torts § 652D: Publicity Given to
Private Life 103
(b) Private Matters 104
? Gill v. Hearst Publishing Co. 104
? Daily Times Democrat v. Graham 108
(c) Publicity 114
? Miller v. Motorola, Inc. 114
(d) The Newsworthiness Test 117
? Sipple v. Chronicle Publishing Co. 117
? Shulman v. Group W Productions, Inc. 129
? Bonome v. Kaysen 129
(e) First Amendment Limitations 131
? Cox Broadcasting Corp. v. Cohn 134
? The Florida Star v. B.J.F. 137
? Bartnicki v. Vopper 152
C. DISSEMINATION OF FALSE OR MISLEADING
INFORMATION 159
1. Defamation 159
(a) Introduction 159
(b) Defamation and the Internet 161
? Zeran v. America Online, Inc. 163
? Blumenthal v. Drudge 166
(c) First Amendment Limitations 170
? New York Times Co. v. Sullivan 170
? Gertz v. Robert Welch, Inc. 173
2. False Light 181
(a) Introduction 181
? Restatement (Second) of Torts § 652E: Publicity Placing Person
in False Light 181
(b) First Amendment Limitations 183
? Time, Inc. v. Hill 183
3. Infliction of Emotional Distress 185
? Hustler Magazine v. Falwell 186
D. APPROPRIATION OF NAME OR LIKENESS 188
1. Introduction 188
? Restatement (Second) of Torts § 652C: Appropriation of Name
or Likeness 188
2. Name or Likeness 191
? Carson v. Here¿s Johnny Portable Toilets, Inc. 191
3. For One¿s Own Use or Benefit 191
? Raymen v. United Senior Association, Inc. 191
4. Connection to Matters of Public Interest 197
? Finger v. Omni Publications International, Ltd. 199
5. First Amendment Limitations 203
? Zacchini v. Scripps-Howard Broadcasting Co. 203
? Estate of Presley v. Russen 203
3 PRIVACY AND LAW ENFORCEMENT 207
A. THE FOURTH AMENDMENT AND EMERGING
TECHNOLOGY 207
1. Introduction 207
(a) Privacy and Security 207
(b) The Fourth and Fifth Amendments 208
(c) Privacy of the Mail 210
(d) Privacy of Papers and Documents 210
(e) The Applicability of the Fourth Amendment 210
(f) Reasonable Searches and Seizures 210
(g) The ¿Special Needs¿ Doctrine 211
(h) Administrative Searches 211
(i) Checkpoints 212
(j) Terry Stops 212
(k) The Enforcement of the Fourth Amendment 213
2. Wiretapping, Bugging, and Beyond 214
? Olmstead v. United States 215
? Lopez v. United States 221
? Katz v. United States 223
? United States v. White 229
3. The Reasonable Expectation of Privacy Test and Emerging Technology 232
(a) Applying the Reasonable Expectation of Privacy Test 232
? Smith v. Maryland 232
? United States v. Place 238
? Illinois v. Caballes 238
? California v. Greenwood 243
? Plain View, Open Fields, and Curtilage 245
? Florida v. Riley 245
(b) Sensory Enhancement Technology 252
? Dow Chemical Co. v. United States 252
? Kyllo v. United States 256
B. FEDERAL ELECTRONIC SURVEILLANCE LAW 263
1. Section 605 of the Federal Communications Act 263
2. Title III 264
3. The Electronic Communications Privacy Act (ECPA) 265
(a) Statutory Structure 265
? Types of Communications 266
? The Wiretap Act 267
? The Stored Communications Act 269
? The Pen Register Act 271
? Electronic Surveillance Law and the Fourth Amendment 272
? Electronic Surveillance Orders 274
? State Electronic Surveillance Law 275
4. The Communications Assistance for Law Enforcement Act 285
6. The USA PATRIOT Act 294
C. DIGITAL SEARCHES AND SEIZURES 323
1. Searching the Contents of Computers 323
2. Encryption 323
3. E-mail 323
? Steve Jackson Games, Inc. v. United States Secret Service 277
2. ISP Records 326
? United States v. Hambrick 326
? McVeigh v. Cohen 329
5. IP Addresses and URLs 338
? United States v. Forrester 329
6. Key Logging Devices 339
? United States v. Scarfo 339
C. NATIONAL SECURITY AND FOREIGN INTELLIGENCE 300
1. Is National Security Different? 300
? United States v. United States District Court (¿Keith¿) 291
2. The Foreign Intelligence Surveillance Act 288
? Global Relief Foundation, Inc. v. O¿Neil 291
? United States v. Isa 293
? The 9/11 Commission Report 309
? In re Sealed Case 304
3. The Attorney General¿s FBI Guidelines 314
4. The Homeland Security Act 317
5. The Intelligence Reform and Terrorism Prevention Act 317
6. The NSA Surveillance Program 317
? Al-Haramain Islamic Foundation v. Bush 309
? Hepting v. AT&T Corp. 304
4 HEALTH AND GENETIC PRIVACY 345
A. CONFIDENTIALITY OF MEDICAL INFORMATION 350
1. Professional Ethics and Evidentiary Privileges 350
(a) Ethical Rules 350
? Oath and Law of Hippocrates 350
? Current Opinions of the Judicial Council of the American Medical Association Canon 5.05 350
(b) Evidentiary Privileges 350
? Jaffee v. Redmond 352
2. Tort Liability for Disclosure of Patient Information 356
¿ McCormick v. England 356
? Hammonds v. Aetna Casualty & Surety Co. 358
3. Tort Liability for Failure to Disclose Patient Information 363
? Tarasoff v. Regents of University of California 363
? McIntosh v. Milano 369
4. Statutory Reporting Requirements 375
5. State Law Privacy Protections for Medical Information 377
6. Health Insurance Portability and Accountability Act 379
? Entities Subject to the Regulations 380
? Type of Information and Records Covered 381
? Privacy Protections 382
? Exceptions 384
? Compliance and Enforcement 385
? Effect on Existing Law 385
? Northwestern Memorial Hospital v. Ashcroft 390
C. CONSTITUTIONAL PROTECTION OF MEDICAL INFORMATION 394
1. The Constitutional Right to Pivacy 394
? Griswold v. Connecticut 394
? Planned Parenthood of Southeastern Pennsylvania v. Casey 396
? Lawrence v. Texas 404
2. The Constitutional Right to Information Privacy 394
? Whalen v. Roe 396
? 42 U.S.C. § 1983 and ¿Constitutional Torts¿ 404
? Carter v. Broadlawns Medical Center 405
? Doe v. Borough of Barrington 406
? Doe v. Southeastern Pennsylvania Transportation Authority 409
2. The Fourth Amendment 415
? Ferguson v. City of Charleston 418
D. GENETIC INFORMATION 421
1. Background: Genetic Privacy 421
2. Property Rights in Body Parts and DNA 422
? Moore v. Regents of the University of California 422
3. Genetic Testing and Discrimination 436
? Richard A. Epstein, The Legal Regulation of Genetic Discrimination:
Old Responses to New Technology 436
? Paul M. Schwartz, Privacy and the Economics of Health Care Information 437
4. DNA Databases and Identification 441
? United States v. Kincade 442
5 PRIVACY OF ASSOCIATION AND IDENTITY 451
A. PRIVACY OF GROUP ASSOCIATIONS 453
1. Compelled Disclosure of Group Membership Lists 453
? National Association for the Advancement of Colored People v. State of Alabama 453
2. Interrogation About Group Associations 456
? Barenblatt v. United States 456
3. Surveillance of Group Activities 461
? Laird v. Tatum 461
? Philadelphia Yearly Meeting of the Religious Society of Friends v. Tate 467
B. ANONYMITY 470
1. Anonymous Speech 470
? Talley v. State of California 470
? McIntyre v. Ohio Elections Commission 472
? Watchtower Bible & Tract Society v. Village of Stratton 477
2. Anonymity in Cyberspace 480
? ACLU v. Miller 481
? Doe v. Cahill 486
3. Anonymous Reading and Receiving of Ideas 490
? Tattered Cover, Inc. v. City of Thornton 490
4. Anonymity and Copyright 498
C. IDENTIFICATION 504
1. Identification Devices and Techniques 504
2. Identification and the Constitution 506
? Hiibel v. Sixth Judicial District Court 508
3. Social Security Numbers 513
? Greidinger v. Davis 515
4. National Identification Systems 519
? Richard Sobel, The Degradation of Political Identity Under a National Identification System 519
6 PRIVACY AND GOVERNMENT RECORDS
AND DATABASES 523
A. PUBLIC ACCESS TO GOVERNMENT RECORDS 524
1. Public Records and Court Records 524
? Doe v. Shakur 525
2. The Freedom of Information Act 526
? United States Dep¿t of Justice v. Reporters Committee for Freedom
of the Press 530
? National Archives and Records Administration v. Favish 536
3. Constitutional Requirements of Public Access 542
? Los Angeles Police Department v. United Reporting Publishing Corp. 544
4. Constitutional Limitations on Public Access 550
(a) Public Records 550
? Kallstrom v. City of Columbus 550
(b) Police Records 556
? Paul v. Davis 556
? Cline v. Rogers 560
? Scheetz v. The Morning Call, Inc. 561
(c) Megan¿s Laws 565
? Paul P. v. Verniero 566
B. GOVERNMENT RECORDS OF PERSONAL INFORMATION 577
1. Fair Information Practices 577
? Marc Rotenberg, Fair Information Practices and the Architecture
of Privacy (What Larry Doesn¿t Get) 578
2. The Privacy Act 579
? Quinn v. Stone 583
? Doe v. Chao 584
? J. Roderick MacArthur Foundation v. Federal Bureau of Investigation 594
3. The Use of Government Databases 599
(a) The Computer Matching and Privacy Protection Act 599
(b) Airline Passenger Screening 600
? The 9/11 Commission Report 600
(c) Government Data Mining 604
? U.S. GAO, Data Mining: Federal Efforts Cover a Wide Range
of Uses 605
? Mary DeRosa, Data Mining and Data Analysis for Counterterrorism 609
? United States v. Sokolow 604
? Arizona v. Evans 604
? United States v. Ellison 604
4. The Driver¿s Privacy Protection Act 618
7 PRIVACY OF FINANCIAL AND
COMMERCIAL DATA 623
A. THE FINANCIAL SERVICES INDUSTRY AND
FINANCIAL DATA 700
1. The Fair Credit Reporting Act 702
? Smith v. Bob Smith Chevrolet, Inc. 702
? Sarver v. Experian Information Solutions 709
2. The Use and Disclosure of Financial Information 711
(a) The Breach of Confidentiality Tort and Financial Institutions 711
(b) The Gramm-Leach-Bliley Act 713
(c) State Financial Regulation 716
3. Identity Theft 711
(a) Identity Theft Statutes 711
(b) Tort Law 711
? Wolfe v. MBNA America Bank 711
(c) The Fair Credit Reporting Act 711
? Sloan v. Equifax Information Services, LLC 711
B. COMMERCIAL ENTITIES AND PERSONAL DATA 636
1. Governance by Tort 636
? Dwyer v. American Express Co. 643
? Remsburg v. Docusearch, Inc. 646
2. Governance by Contract and Promises 637
(a) Privacy Policies 739
? Jeff Sovern, Opting In, Opting Out, or No Options At All 740
? Michael E. Staten & Fred H. Cate, The Impact of Opt-In Privacy
Rules on Retail Markets 742
(b) Contract Law 746
? In re Northwest Airlines Privacy Litigation 747
(c) FTC Enforcement 750
? In the Matter of Vision I Properties 750
3. Governance by Self-Regulation 642
4. Governance by Property 643
5. Governance by Statutory Regulation 649
(a) Entertainment Records 660
? Video Privacy Protection Act 661
? Dirkes v. Borough of Runnemede 661
? Daniel v. Cantell 661
? Cable Communications Policy Act 661
(b) Internet Use and Electronic Communications 664
? Children¿s Online Privacy Protection Act
? Electronic Communications Privacy Act 658
? In re Pharmatrak, Inc. Privacy Litigation 649
? Dyer v. Northwest Airlines Corp. 655
? Computer Fraud and Abuse Act. 658
? Creative Computing v. Getloaded.com LLC. 658
(c) Marketing
? Telephone Consumer Protection Act 666
? CAN-SPAM Act 666
(d) Federal Privacy Legislation: An Assessment 669
(e) State Statutory Regulation 672
C. DATA SECURITY 636
1. Introduction 636
2. Data Security Breach Notification Statutes 636
3. Civil Liability 636
? Pisciotta v. Old National Bankcorp 636
4. FTC Regulation 636
? In the Matter of Reed Elsevier, Inc. and Seisint 636
D. FIRST AMENDMENT LIMITATIONS ON PRIVACY
REGULATION 636
? Rowan v. United States Post Office Department 675
? Mainstream Marketing Services, Inc. v. Federal Trade Commission 676
? U.S. West, Inc. v. Federal Communications Commission 680
? Trans Union Corp. v. Federal Trade Commission 686
E. GOVERNMENT ACCESS TO PRIVATE SECTOR RECORDS 718
1. Information Gathering Without Search Warrants 718
(a) Subpoenas
? Gonzales v. Google 719
(b) Financial Information and the Third Party Doctrine 719
? The Bank Secrecy Act 719
? California Bankers Association v. Shultz 720
? United States v. Miller 721
(c) The USA PATRIOT Act § 215 727
(d) National Security Letters 727
2. Information Gathering with Search Warrants 735
? Zurcher v. The Stanford Daily 736
? Privacy Protection Act 738
8 PRIVACY AND PLACE 765
A. PRIVACY AT HOME 765
? Stanley v. Georgia 766
? Wilson v. Layne 772
? Georgia v. Randolph 768
B. PRIVACY AT SCHOOL 778
1. School Searches and Surveillance 778
? New Jersey v. T.L.O. 778
2. Drug Testing 784
? Vernonia School District v. Acton 784
? Board of Education v. Earls 789
3. School Records 794
? The Family Educational Rights and Privacy Act 794
? Owasso Independent School District v. Falvo 796
? Family Educational Rights and Privacy: Proposed Rule 794
C. PRIVACY AT WORK 798
1. Introduction 798
2. Workplace Searches 801
? O¿Connor v. Ortega 801
? K-Mart Corp. v. Trotti 808
3. Workplace Surveillance 809
? Thompson v. Johnson County Community College 809
4. Drug Testing 813
? National Treasury Employees Union v. Von Raab 813
? Chandler v. Miller 818
? Borse v. Piece Goods Shop 820
5. The Issue of Consent 824
? Baggs v. Eagle-Picher Industries, Inc. 824
6. Testing, Questionnaires, and Polygraphs 830
(a) Testing and Questionnaires 830
? Greenawalt v. Indiana Department of Corrections 837
(b) Polygraph Testing 839
? The Employee Polygraph Protection Act 843
7. Telephone Monitoring 845
? Watkins v. L.M. Berry & Co. 845
? Deal v. Spears 849
8. Computer Monitoring and Searches 852
(a) E-mail 855
? Smyth v. Pillsbury Co. 855
(b) Internet Use 863
? Leventhal v. Knapek 863
? United States v. Ziegler 866
9 INTERNATIONAL PRIVACY LAW 869
A. THE OECD PRIVACY GUIDELINES 871
B. PRIVACY PROTECTION IN EUROPE 873
1. Divergence or Convergence? 873
? James Q. Whitman, The Two Western Cultures of Privacy: Dignity Versus Liberty 875
2. European Convention on Human Rights Article 8 878
(a) Introduction 878
? ECHR Article 8 880
(b) Privacy and the Media 882
? Von Hannover v. Germany 882
(c) Privacy and Law Enforcement 882
? P.G. & J.H. v. United Kingdom 882
(d) Privacy and Identification 888
? B. v. France 888
(e) Privacy, Records, and Computer Databases 893
? Rotaru v. Romania 893
(f) Privacy and Place 897
? Niemietz v. Germany 897
? Copland v. United Kingdom 897
3. The European Union Data Protection Directive 900
(a) Introduction 900
? Criminal Proceedings Against Bodil Lindqvist 915
(b) Article 8 and Harmonization 918
(d) Supervisory Authority and Individual Remedies 919
C. PRIVACY PROTECTION IN NORTH AMERICA 922
1. Canada 922
? Englander v. Telus Communications, Inc. 923
2. Mexico
D. PRIVACY PROTECTION IN SOUTH AMERICA 922
1. Argentina 922
2. Brazil
E. PRIVACY PROTECTION IN AFRICA AND THE
MIDDLE EAST 922
1. Africa 922
2. The Middle East
F. PRIVACY PROTECTION IN ASIA-PACIFIC 922
1. The APEC Privacy Framework 922
2. Australia 922
3. Japan 922
4. China and Hong Kong 922
5. India 922
G. INTERNATIONAL TRANSFERS OF DATA 929
1. International Data Transfers in Litigation 930
? Volkswagen, A.G. v. Valdez 930
2. Adequate Level of Protection Under the EU Directive 933
3. The Safe Harbor Arrangement 936
(a) Conflicting Privacy Approaches in the EU and U.S. 936
(b) The Safe Harbor Arrangement 938
? The Safe Harbor Privacy Principles 939
? The Commission Decision on Safe Harbor 945
? European Parliament Resolution on the Draft Commission Decision
on the Adequacy of the Protection Provided by the Safe Harbour
Privacy Principles 949
? Joel R. Reidenberg, E-Commerce and Trans-Atlantic Privacy 953
4. Outsourcing Data Processing 964
? FDIC, Offshore Outsourcing of Data Services by Insured Institutions
and Associated Consumer Privacy Risks 965
Table of Cases 969
Table of Authorities 979
Index 10