Digital Me: The Right to Privacy vs. the Public Good

Current State of Privacy

• Susan Herman (ACLU) states that privacy relative to the U.S. government has significantly eroded since 9/11 due to bulk metadata collection programs revealed by Edward Snowden.
• The National Security Agency (NSA) utilizes "gill net" collection methods, gathering data on everyone rather than targeting specific suspects, raising concerns about abuse and the potential for "cleavage" hunting by operators in the UK surveillance system.
• A survey by PEN (Publishers and Authors) found that one in six writers altered their research or topics due to fear of government surveillance, indicating a "chilling effect" on free speech and association.
• Stan Stahl (Standard Clouds) argues that true privacy may never have existed in civilization and that the default state is to stay "off the grid" or be a hermit.
• Susan Graham (Berkeley) defines privacy as contextual and dependent on the specific scenario, noting that individuals do not agree on a universal definition of what constitutes privacy.

Government Surveillance and Legal Frameworks

• The ACLU is actively litigating against metadata collection; a lawsuit involving Verizon Business Services successfully highlighted how metadata (call times, numbers, durations) can reconstruct a person's entire life story without listening to call contents.
• Section 215 of the USA PATRIOT Act, which authorizes bulk metadata collection, is set to sunset on June 1st; the proposed "USA Freedom Act" seeks to end this dragnet collection.
• The Foreign Intelligence Surveillance Act (FISA) allows the government to monitor non-U.S. persons located abroad, inadvertently capturing conversations of Americans who communicate with those targets (e.g., the Brandon Mayfield case where innocent citizens were surveilled for years).
• Congressional knowledge of technology is described as "abysmal," with legislators often failing to understand the implications of current surveillance tools or the speed of technological change.
• A specific case involved a college student detained for five hours at an airport solely because he carried Arabic-English flashcards, resulting in a lawsuit won by the ACLU of Pennsylvania for damages.

Commercial Sector and Data Practices

• Michelle Fenneman Dinity (Intel) asserts that privacy is now commercially sustainable and profitable, arguing that companies must adhere to "fair information principles" to maintain customer trust and human rights standards.
• The private sector has shifted from immediate compliance with government data requests (post-9/11) to protecting user data due to consumer pushback and the threat of international regulatory fragmentation (e.g., EU laws).
• "Data fusion" by small, unregulated startups combines unrelated data points to infer private information about individuals, a practice that investors often fund without rigorous ethical scrutiny.
• Wi-Fi triangulation and power meter usage on phones can track individuals' locations and movements even when the devices are not actively connected to networks, making "getting off the grid" technically difficult.
• Tech companies are retaining vast amounts of data ("hoarding") because storage costs are dropping (30-40% annually), despite the fact that 70% of retained data may hold no commercial value.
• The "right to be forgotten" is discussed as a potential solution for individuals harmed by online records, such as expunged criminal records or mugshots, though concerns exist regarding censorship and historical preservation.

Technology, Encryption, and Future Risks

• Susan Graham notes that while computer science research may eventually challenge encryption, viable encryption technology remains secure for at least several years.
• The Internet of Things (IoT) presents a new frontier for surveillance, with devices like smart refrigerators and toasters being easily hacked to send spam or monitor home activities.
• Michelle Fenneman highlights that companies like the "Burner App" destroy data to avoid liability and government retention requests, though current laws like the Communications Assistance and Law Enforcement Act (CALEA) may penalize non-retention.
• A 1986 statute (Electronic Communications Privacy Act) remains largely unamended, creating a legal lag where laws do not reflect modern digital realities.
• Susan Graham advocates for "Privacy Engineering," a discipline currently lacking in most university curricula, to build systems where privacy is a measurable technical requirement rather than an afterthought.

Consumer Behavior and Consent

• The "notice and consent" model is criticized for placing an undue burden on individuals to read and understand complex privacy policies, which most users ignore.
• Younger generations are not necessarily indifferent to privacy but often believe they have control over their shared data, leading to unintended long-term consequences when private information is seized or leaked.
• The concept of selling privacy (e.g., frequent flyer cards for discounts) is risky as it may expose sensitive health information (PHI) with no clear understanding of how that data is used by third parties.
• Dennis Neal concludes the session by reiterating the adage that individuals should not engage in any behavior they would not be comfortable having reported on the front page of their local newspaper.