In this chapter I identify three problems affecting the plausibility of group privacy and argue in favour of their resolution. The first problem concerns the nature of the groups in question. I shall argue that groups are neither discovered nor invented, but designed by the level of abstraction (LoA) at which a specific analysis of a social system is developed. Their design is therefore justified insofar as the purpose, guiding the choice of the LoA, is justified. This should (...) remove the objection that groups cannot have a right to privacy because groups are mere artefacts (there are no groups, only individuals) or that, even if there are groups, it is too difficult to deal with them. The second problem concerns the possibility of attributing rights to groups. I shall argue that the same logic of attribution of a right to individuals may be used to attribute a right to a group, provided one modifies the LoA and now treats the whole group itself as an individual. This should remove the objection that, even if groups exist and are manageable, they cannot be treated as holders of rights. The third problem concerns the possibility of attributing a right to privacy to groups. I shall argue that sometimes it is the group and only the group, not its members, that is correctly identified as the correct holder of a right to privacy. This should remove the objection that privacy, as a group right, is a right held not by a group as a group but rather by the group’s members severally. The solutions of the three problems supports the thesis that an interpretation of privacy in terms of a protection of the information that constitutes an individual—both in terms of a single person and in terms of a group—is better suited than other interpretations to make sense of group privacy. (shrink)

An issue about the privacy of the clustered groups designed by algorithms arises when attempts are made to access certain pieces of information about those groups that would likely be used to harm them. Therefore, limitations must be imposed regarding accessing such information about clustered groups. In the discourse on group privacy, it is argued that the right to privacy of such groups should be recognised to respect group privacy, protecting clustered groups against discrimination. (...) According to this viewpoint, this right places a duty on others, for example, private companies, institutions, and governments, to refrain from accessing such information. To defend the idea that the right to privacy should be recognised for clustered groups, at least two requirements must be satisfied. First, clustered group privacy must be conceived of as either a collective good or a participatory good. Since these forms of good are of the type from which no member of a group can be excluded from benefiting, the right to them is defined as a group right. Second, there must be group interests on which to base a group right. Group interests can be either the interests of those members that are a result of their being in the group or the interests of the group as a whole that transcend the interests of its members. However, this paper argues that clustered group privacy cannot be conceived of as either a collective or a participatory good because it is possible for some individuals to be excluded from benefiting from it. Furthermore, due to the lack of awareness among individuals that they are members of a clustered group and the nature of a clustered group itself, such groups cannot have the group interests necessary to establish a group right. Hence, the group right to privacy cannot be recognised for these groups, implying that the group right cannot be considered a means to protect clustered groups against discrimination. Instead, this paper suggests that moral principles need to be articulated within an ethics of vulnerability to identify the moral obligations of protecting vulnerable clustered groups. The duty owed to the vulnerable should involve refraining from accessing certain information about clustered groups in specific contexts. This duty is not engendered by the right to privacy of such groups; it is the duty owed to the vulnerable. The findings highlight the need to articulate moral principles regarding privacy and data protection to protect clustered groups in contexts in which accessing information about them could constitute a reason for discriminatory targeting. (shrink)

Technological advances are bringing new light to privacy issues and changing the reasons for why privacy is important. These advances have changed not only the kind of personal data that is available to be collected, but also how that personal data can be used by those who have access to it. We are particularly concerned with how information about personal attributes inferred from collected data (such as online behaviour), can be used to tailor messages and services to specific (...) individuals or groups. This kind of ‘personalised targeting’ has the potential to influence individuals’ perceptions, attitudes, and choices in unprecedented ways. In this paper, we argue that because it is becoming easier for companies to use collected data for influence, threats to privacy are increasingly also threats to personal autonomy—an individual’s ability to reflect on and decide freely about their values, actions, and behaviour, and to act on those choices.4 While increasing attention is directed to the ethics of how personal data is collected, we make the case that a new ethics of privacy needs to also think more rigorously about how personal data may be used, and its potential impact on personal autonomy. (shrink)

Must privacy and freedom of expression conflict? To witness recent debates in Britain, you might think so. Anything other than self-regulation by the press is met by howls of anguish from journalists across the political spectrum, to the effect that efforts to protect people’s privacy will threaten press freedom, promote self-censorship and prevent the press from fulfilling its vital function of informing the public and keeping a watchful eye on the activities and antics of the powerful.[Brown, 2009, 13 (...) January]1 Effective protections for privacy, from such a perspective, inevitably pose a threat to democratic government via the constraints that they place on the press. Such concerns with privacy must be taken seriously by anyone who cares about democratic government, and the freedom, equality and wellbeing of individuals. But if it is one thing to say that privacy and freedom of expression cannot always be fully protected, it is another to suppose that protections for the one must always come at the expense of the other. After all, the economics of contemporary politics and journalism would seem to be partly responsible for our difficulties in protecting personal privacy while sustaining robust and informative forms of public discourse. [Moore, 2010, 10 -141]2 Most newspapers are loss-making businesses and the need to reduce those losses and, if possible, to turn a profit, make investigative journalism an increasingly expensive proposition as compared to both “comment” and more or less elevated forms of gossip. At the same time, politics has increasingly become the prerogative of a narrow group of people with access to the large sums of money necessary successfully to compete for high office. In those circumstances, the need for critical scrutiny is as important as it is difficult. Revising our ideas about privacy and its protection cannot alone reduce the tensions between freedom of expression and personal privacy typical of our societies, necessary though such revision may be. Moreover, this paper can only touch on some aspects of the ways in which we need to rethink our interests in privacy, in order adequately to reflect people’s diverse interests in freedom of expression, and the important role of a free press to democratic government. Nonetheless, I hope to suggest ways of thinking about people’s claims to privacy which can be generalised fairly readily, and can help us to think constructively about the nature, causes and solutions to some important social and political problems, even if, in its nature, philosophical analysis rarely tells us what to do. More specifically, this paper argues that people are entitled to keep some true facts about themselves to themselves, should they so wish, as a sign of respect for their moral and political status, and in order to protect themselves from being used as a public example in order to educate or to entertain other people. The “outing” - or non-consensual public disclosure - of people’s health records or status, or their sexual behaviour or orientation is usually unjustified, even when its consequences seem to be beneficial. Indeed, the paper claims, the reasons to reject outing, as inconsistent with democratic commitments to freedom and equality, are reasons to insist on the importance of privacy to freedom of expression. While a free press is of the utmost importance to democratic government, it is not identical with the free expression of individuals and, on occasion, the former may have to be constrained in order to protect the latter. [Barendt, 2007, 231]. Hence, the paper concludes, we should distinguish the claims of individuals to publish reports about their lives – even if this necessarily involves revealing the private lives of others – from journalistic claims to publish information about the sex lives of consenting adults. I will start by briefly situating my argument within a democratic approach to privacy, before using the “outing” of Oliver Sipple to examine people’s claims to privacy and their implications for freedom of expression and of the press. I will be assuming that some forms of privacy are legitimate, in order to focus more closely on the question of what information, if any, people may keep to themselves. (shrink)

Digital data help data scientists and epidemiologists track and predict outbreaks of disease. Mobile phone GPS data, social media data, or other forms of information updates such as the progress of epidemics are used by epidemiologists to recognize disease spread among specific groups of people. Targeting groups as potential carriers of a disease, rather than addressing individuals as patients, risks causing harm to groups. While there are rules and obligations at the level of the individual, we have to reach a (...) stage in the development of data analytics where groups are protected as entities. This chapter offers a deeper examination of harms to the groups. (shrink)

The International Severe Acute Respiratory and Emerging Infection Consortium (ISARIC) COVID-19 dataset is one of the largest international databases of prospectively collected clinical data on people hospitalized with COVID-19. This dataset was compiled during the COVID-19 pandemic by a network of hospitals that collect data using the ISARIC-World Health Organization Clinical Characterization Protocol and data tools. The database includes data from more than 705,000 patients, collected in more than 60 countries and 1,500 centres worldwide. Patient data are available from acute (...) hospital admissions with COVID-19 and outpatient follow-ups. The data include signs and symptoms, pre-existing comorbidities, vital signs, chronic and acute treatments, complications, dates of hospitalization and discharge, mortality, viral strains, vaccination status, and other data. Here, we present the dataset characteristics, explain its architecture and how to gain access, and provide tools to facilitate its use. (shrink)

There is increasing concern about “surveillance capitalism,” whereby for-profit companies generate value from data, while individuals are unable to resist (Zuboff 2019). Non-profits using data-enabled surveillance receive less attention. Higher education institutions (HEIs) have embraced data analytics, but the wide latitude that private, profit-oriented enterprises have to collect data is inappropriate. HEIs have a fiduciary relationship to students, not a narrowly transactional one (see Jones et al, forthcoming). They are responsible for facets of student life beyond education. In addition to (...) classrooms, learning management systems, and libraries, HEIs manage dormitories, gyms, dining halls, health facilities, career advising, police departments, and student employment. HEIs collect and use student data in all of these domains, ostensibly to understand learner behaviors and contexts, improve learning outcomes, and increase institutional efficiency through “learning analytics” (LA). ID card swipes and Wi-Fi log-ins can track student location, class attendance, use of campus facilities, eating habits, and friend groups. Course management systems capture how students interact with readings, video lectures, and discussion boards. Application materials provide demographic information. These data are used to identify students needing support, predict enrollment demands, and target recruiting efforts. These are laudable aims. However, current LA practices may be inconsistent with HEIs’ fiduciary responsibilities. HEIs often justify LA as advancing student interests, but some projects advance primarily organizational welfare and institutional interests. Moreover, LA advances a narrow conception of student interests while discounting privacy and autonomy. Students are generally unaware of the information collected, do not provide meaningful consent, and express discomfort and resigned acceptance about HEI data practices, especially for non-academic data (see Jones et al. forthcoming). The breadth and depth of student information available, combined with their fiduciary responsibility, create a duty that HEIs exercise substantial restraint and rigorous evaluation in data collection and use. (shrink)

Dateline NBC’s “To Catch a Predator”(2006-08) involved NBC staff working with police and a watchdog group called “Perverted Justice” to televise “special intensity” arrests of men who were lured into meeting adult decoys posing as young children, presumably for a sexual encounter. As reality television, “To Catch a Predator” facilitates public shaming of those caught in front of the cameras, which distinguishes it from fictional representations. In one case, a Texas District Attorney, Louis Conradt, shot himself on film, unable (...) to bear the public humiliation of cameras airing his arrest. The show engenders conflicting responses: Did the show fulfill a public service by informing the public about real dangers and deterring potential predators, or was it an insensitive effort to garner ratings by taking advantage of human weaknesses? Is the sort of public shaming it imposes an appropriate form of punishment given the legitimate purposes of punishment? Did the show portray justice, or did it entrap victims? How did NBC’s working relationship with local police bear on the answer to that question? This paper addresses these questions and develops three objections to the show: that NBC in effect metes out unjust punishment; that it invades privacy; and that it entraps. (shrink)

Writing a college-application essay has become a rite of passage for high-school seniors in the U.S., one whose importance has expanded over time due to an increasingly competitive admissions process. Various commentators have noted the disturbing evolution of these essays over the years, with an ever-greater emphasis placed on obstacles overcome and traumas survived. How have we gotten to the point where college-application essays are all too frequently competitive-victimhood displays? Colleges have an understandable interest in the disadvantages their applicants may (...) have suffered, but this interest—and the awareness of it among both applicants and their advisors—has led to a “race to the bottom”: in order to thrive (or even survive) in a particular competitive context, participants are forced to continuously lower relevant standards in a game of one-upmanship. With college essays, the competition is among high-school seniors for admission, the one-upmanship is an ever-escalating effort to persuade admission committees of one’s greater disadvantage, and the relevant standards being lowered are honesty, privacy, and dignity—or so I shall argue. As we shall see, this particular race to the bottom imposes unequal costs on certain groups and has implications stretching well beyond collegiate admissions. (shrink)

Ambient assisted living technologies are increasingly presented and sold as essential smart additions to daily life and home environments that will radically transform the healthcare and wellness markets of the future. An ethical approach and a thorough understanding of all ethics in surveillance/monitoring architectures are therefore pressing. AAL poses many ethical challenges raising questions that will affect immediate acceptance and long-term usage. Furthermore, ethical issues emerge from social inequalities and their potential exacerbation by AAL, accentuating the existing access gap between (...) high-income countries and low and middle-income countries. Legal aspects mainly refer to the adherence to existing legal frameworks and cover issues related to product safety, data protection, cybersecurity, intellectual property, and access to data by public, private, and government bodies. Successful privacy-friendly AAL applications are needed, as the pressure to bring Internet of Things devices and ones equipped with artificial intelligence quickly to market cannot overlook the fact that the environments in which AAL will operate are mostly private. The social issues focus on the impact of AAL technologies before and after their adoption. Future AAL technologies need to consider all aspects of equality such as gender, race, age and social disadvantages and avoid increasing loneliness and isolation among, e.g. older and frail people. Finally, the current power asymmetries between the target and general populations should not be underestimated nor should the discrepant needs and motivations of the target group and those developing and deploying AAL systems. Whilst AAL technologies provide promising solutions for the health and social care challenges, they are not exempt from ethical, legal and social issues. A set of ELSI guidelines is needed to integrate these factors at the research and development stage. (shrink)

This paper addresses issues regarding perceptions of surveillance technologies in Europe. It analyses existing studies in order to explore how perceptions of surveillance affect and are affected by the negative effects of surveillance and how perceptions and effectiveness of surveillance technologies relate to each other. The paper identifies 12 negative effects of surveillance including, among others, privacy intrusion, the chilling effect and social exclusion, and classifies them into three groups. It further illustrates the different ways in which perceptions and (...) effectiveness of surveillance interact with each other, distinguishing between perceived security and perceived effectiveness. Finally, the paper advances a methodology to take into account perception issues when designing new surveillance technologies. By doing so, it rejects manipulative measures aiming at improving perceptions only and suggests measures that address the background conditions affecting perceptions. (shrink)

This chapter is concerned with the role of democracy in preventing terrorism, identifying and apprehending terrorists, and in minimizing and alleviating the damage created by terrorism.1 Specifically, it considers the role of democracy as a resource, not simply a limitation, on counterterrorism.2 I am mainly concerned with the ways in which counterterrorism is similar to more familiar forms of public policy, such as the prevention of crime or the promotion of economic prosperity, and so nothing that I say turns on (...) being able sharply to distinguish terrorism from other bad things that democracies have to face. I will not, then, address the extensive debate on the best way to define terrorism.3 However, I assume that terrorists characteristically seek to terrorize people in order to secure their particular ends. What forms that terror takes, what people terrorists seek to terrorize, and what ends terrorists seek to promote I assume to be indeterminate, open to change, and a matter for empirical investigation. However, I take it that the IRA, Baader Meinhoff, and the Red Brigade, as well as certain animal rights groups in the United Kingdom and certain anti-abortion groups in the United States, are examples of terrorist groups and individuals. In short, I will be assuming that terrorism is principally characterized by the choice of means to given ends, rather than by the ends themselves, and that it is the choice of means, rather than the favored ends, that makes terrorism so problematic from a democratic perspective. However good the goal, terrorizing a population—whether or not this involves killing the innocent—is morally wrong and, from a democratic perspective, an abuse of power over the lives of others. While the use of terror may indicate that the ends sought by terrorists are such that people cannot be expected to support them voluntarily, there is no justification for supposing that the ends of terrorism must be morally or politically unacceptable simply because the means are both. It is a staple of ordinary life—not merely of philosophical examples—that people are sometimes unjustified in the means they use in order to accomplish perfectly acceptable ends. So, the ends terrorists seek are, or might become, morally or politically acceptable without in any way altering our objections to the use of terror as a tool for promoting them. (shrink)

ICTs, personal data, digital rights, the GDPR, data privacy, online security… these terms, and the concepts behind them, are increasingly common in our lives. Some of us may be familiar with them, but others are less aware of the growing role of ICTs and data in our lives - and the potential risks this creates. These risks are even more pronounced for vulnerable groups in society. People can be vulnerable in different, often overlapping, ways, which place them at a (...) disadvantage to the majority of citizens; Table 3 in this guide presents some of the many forms and causes of vulnerability. As a result, vulnerable people need greater support to navigate the digital world, and to ensure that they are able to exercise their rights. This guide explains where such support can be found, and also answers the following questions: - What are the main ethical and legal issues around ICTs for vulnerable citizens? - Who is vulnerable in Europe? - How do issues around ICTs affect vulnerable people in particular? This guide is a resource for members of vulnerable groups, people who work with vulnerable groups, and citizens more broadly. It is also useful for data controllers1 who collect data about vulnerable citizens. While focused on citizens in Europe, it may be of interest to people in other parts of the world. It forms part of the Citizens’ Information Pack produced by the PANELFIT project, and is available in English, French, German, Italian and Spanish. You are welcome to translate this guide into other languages. Please send us a link to online versions in other languages, so that we can add them to the project website. (shrink)

This article challenges the view most recently expounded by Emily Jackson that ‘decisional privacy’ ought to be respected in the realm of artificial reproduction (AR). On this view, it is considered an unjust infringement of individual liberty for the state to interfere with individual or group freedom artificially to produce a child. It is our contention that a proper evaluation of AR and of the relevance of welfare will be sensitive not only to the rights of ‘commissioning parties’ (...) to AR but also to public policy considerations. We argue that AR has implications for the common good, by involving matters of human reproduction, kinship, race, parenthood and identity. In this paper we challenge presuppositions concerning decisional privacy. We examine the essential commodification of human life implicit in AR and the systematicity that makes this possible. We address the objection that it is an ethically neutral way of having children and consider the problem of ‘existential debt’. After examining objections to the thesis that AR is illegitimate for reasons of public policy and the common good, we return to the issue of decisional privacy in the light of considerations concerning the legitimate role of the state in matters affecting human reproduction. (shrink)

The anti-counterfeiting trade agreement was originally meant to harmonise and enforce intellectual property rights provisions in existing trade agreements within a wider group of countries. This was commendable in itself, so ACTA’s failure was all the more disappointing. In this article, I wish to contribute to the post-ACTA debate by proposing a specific analysis of the ethical reasons why ACTA failed, and what we can learn from them. I argue that five kinds of objections—namely, secret negotiations, lack of consultation, (...) vagueness of formulation, negotiations outside any international body, and the creation of a new governing body outside already existing forums—had only indirect ethical implications. This takes nothing away from their seriousness but it does make them less compelling, because agreements should be evaluated, ethically, for what they are, rather than for the alleged reasons why they are being proposed. I then argue that ACTA would have caused three ethical problems: an excessive and misplaced kind of responsibility, a radical decrease in freedom of expression, and a severe reduction in information privacy. I conclude by indicating three lessons that can help us in shaping a potential ACTA 2.0. First, we should acknowledge the increasingly vital importance of the framework of implicit expectations, attitudes, and practices that can facilitate and promote morally good decisions and actions. ACTA failed to perceive that it would have undermined the very framework that it was supposed to foster, namely one promoting some of the best and most successful aspects of our information society. Second, we should realise that, in advanced information societies, any regulation affecting how people deal with information is now bound to influence the whole ‘onlife’ habitat within which they live. So enforcing IPR becomes an environmental problem. Third, since legal documents, such as ACTA, emerge from within the infosphere that they affect, we should apply to the process itself, which one day may lead to a post-ACTA treaty, the very framework and ethical values that we would like to see promoted by it. (shrink)

Presently philosophers, social theorists, educationists and legal scholars are busy with issues of contemporary importance such as affirmative actions, animal’s rights, capital punishment, cloning, euthanasia, immigration, pornography, privacy in civil society, values in nature, human rights, cultural values and world hunger etc. Since ancient time ethics is one of the most important part of philosophical speculations and human development. The development of morality comes under three stages viz. intrinsic morality, customary morality and reflective morality. Intrinsic morality has traditionally been (...) thought to lie at the heart of ethics and this is the first stage of morality where the objective is to be moral is to lead one’s life according its basic needs. Customary morality is the second stage of morality, where customs of a particular group and tribe rule the life of the man living in this group and morals based on the customs and traditions of society. Members of the group are motivated to sacrifice their lives to save the culture and norms of the particular group or tribe. In the last reflective morality, man started thinking himself and started to do reflection on their life and contributed to the development of the nation or society where he/she lives. Here he/she is independent to think and follow the best for his life. Reflective morals are those that are based on what you believe to be right and not others. The ideas related to the development of art, values, human rights and quality education etc., all are because of man’s reflection. Reflective morality is the best stage of development of morality in human society. In this paper an attempt is made to draw an outline of development of morality in human life and its application of morality in public and personal life. (shrink)

I develop a contractualist theory of just intelligence collection based on the collective moral responsibility to deliver security to a community and use the theory to justify certain kinds of signals interception. I also consider the rights of various intelligence targets like intelligence officers, service personnel, government employees, militants, and family members of all of these groups in order to consider how targets' waivers or forfeitures might create the moral space for just surveillance. Even people who are not doing anything (...) prejudicial to other states' security can be modeled as ceding rights against diagnostic collection--light touch collection limited to ascertaining if someone is likely an intelligence threat--as part of their duty to support just foreign institutions. Foreign intelligence officers could not perform the same job potential targets can reasonably demand their intelligence agencies perform on their behalf without this ceding of rights. More invasive forms of collection can only be justified if officers can reasonably model their citizens consenting to being the target of the same sort of collection by adversary states. (shrink)

According to Corey Brettschneider, we can protect freedom of religion and promote equality, by distinguishing religious groups’ claims to freedom of expression and association from their claims to financial and verbal support from the state. I am very sympathetic to this position, which fits well with my own views of democratic rights and duties, and with the importance of recognizing the scope for political choice which democratic politics offers to governments and to citizens. This room for political choice, I believe, (...) is necessary if people are to have any chance of reconciling the conflicting moral and political obligations they are likely to face, however idealized our conception of democracy or morality. Granted that no amount of personal and political choice will ever guarantee that we do not encounter tragic choices, and painfully conflicting moral demands, it is an important feature of democracy – or so I believe – that its rights reflect the importance of mitigating these conflicts so that people are able, as a rule, to act as they ought, so that they do not experience their moral sentiments, beliefs and capacities simply as grounds for recrimination, alienation and despair. I therefore believe that democracies have good reason not to force the consciences of the undemocratic and the intolerant, where it is possible to accommodate such people without threatening the rights of others. However, the fact that I share many of Brettschneider’s intuitions and beliefs does not mean that I share them all. In particular, I find his conception of democracy unduly narrow, and unduly based on a rather idealized conception of the American constitution which is unlikely to appeal to those whose conceptions of democracy are more republican, more socialist, more pragmatic and more international than his. I have explained these worries elsewhere and drawn out some of their implications for his arguments about privacy and judicial review. There is no need to repeat them here. I will also set to one side my worries about his uninflected, overly abstract and rather reified characterization of the State, in the hope that others will discuss this and that, in the end, a more nuanced conception of the State and a more lively appreciation of the conflicting people, institutions, histories and norms which make up most states, will prove consistent with his arguments. Finally, I do not propose to enter into a detailed discussion of the difficulties of Brettschneider’s overly abstract and reified conception of State ‘speech’ and ‘expression’ which, while motivated by the language of American constitutionalism, appears to cover pretty much anything a government might do, from raising and spending taxes, to accepting judicial interpretations of contested constitutional provisions, or to affirmatively pronouncing on the goals that will animate its legislative agenda and its aspirations for citizen’s lives. Again, while I would have wished for a more nuanced and analytical discussion of so central a concept as ‘expression’ and, in particular, expression by ‘the State’, I am uncertain that anything fundamental in Brettschneider’s account of citizen rights and duties would be altered in the process. Instead, then, I want to focus on points in Brettschneider’s argument that intrigue, and sometimes puzzle, me the most and where issues of nuance and clarification might make a substantial difference to our views of equality and religious freedom. (shrink)

The author has extensive law enforcement experience and the paper is intended to provoke thought on the use of technology as it pertains to information sharing between the police and the private sector. -/- As the world edges closer and closer to the convergence of man and machine, the human capacity to retrieve information is increasing by leaps and bounds. We are on the verge of knowing everything and anything there is to know, and literally in the blink of an (...) eye! -/- This means that police will have the capacity to learn everything about everyone with the only restriction being privacy legislation. But it also means that those involved in immoral, unlawful or illegal activity will have that same capacity and with no such restriction. ‘Bad Brother’ may be far more dangerous than ‘Big Brother!' -/- The global community requires a secure and credible system to retrieve and assess all of the information ‘generally available to the public.' A system that will strive to keep ‘Big Brother’ in check and ‘Bad Brother’ out, all the while providing a means of alerting citizens to genuine risks or to dangerous people. Such as system would help diffuse the systemic inaccurate and harmful profiling that is often based on rumours and innuendo. -/- There is an identified public-private partnership opportunity. A chance to work with privacy advocate groups and background checking private companies to define, design and deliver on something that will be of immense benefit to citizens around the globe. -/- We have an opportunity to create something that will work to ensure that only the best information gets used and in a moralistic, lawful and legal way! Technology continues to move forward at incomprehensible speeds – failure to act could have serious consequences. (shrink)

Traditional arguments for privacy in public suggest that intentionally public activities, such as political speech, do not deserve privacy protection. In this article, I develop a new argument for the view that surveillance of intentionally public activities should be limited to protect the specific good that this context provides, namely democratic legitimacy. Combining insights from Helen Nissenbaum’s contextualism and Jürgen Habermas’s theory of the public sphere, I argue that strategic surveillance of the public sphere can undermine the capacity (...) of citizens to freely deliberate in public and therefore conflicts with democratic self-determination. (shrink)

The first few years of the 21st century were characterised by a progressive loss of privacy. Two phenomena converged to give rise to the data economy: the realisation that data trails from users interacting with technology could be used to develop personalised advertising, and a concern for security that led authorities to use such personal data for the purposes of intelligence and policing. In contrast to the early days of the data economy and internet surveillance, the last few years (...) have witnessed a rising concern for privacy. As bad data practices have come to light, citizens are starting to understand the real cost of using online digital technologies. Two events stamped 2018 as a landmark year for privacy: the Cambridge Analytica scandal, and the implementation of the European Union’s General Data Protection Regulation (GDPR). The former showed the extent to which personal data has been shared without data subjects’ knowledge and consent and many times for unacceptable purposes, such as swaying elections. The latter inaugurated the beginning of robust data protection regulation in the digital age. Getting privacy right is one of the biggest challenges of this new decade of the 21st century. The past year has shown that there is still much work to be done on privacy to tame the darkest aspects of the data economy. As data scandals continue to emerge, questions abound as to how to interpret and enforce regulation, how to design new and better laws, how to complement regulation with better ethics, and how to find technical solutions to data problems. The aim of the research project Data, Privacy, and the Individual is to contribute to a better understanding of the ethics of privacy and of differential privacy. The outcomes of the project are seven research papers on privacy, a survey, and this final report, which summarises each research paper, and goes on to offer a set of reflections and recommendations to implement best practices regarding privacy. (shrink)

As the science and technology of the brain and mind develop, so do the ways in which brains and minds may be surveilled and manipulated. Some cognitive libertarians worry that these developments undermine cognitive liberty, or “freedom of thought.” I argue that protecting an individual’s cognitive liberty undermines others’ ability to use their own cognitive liberty. Given that the threatening devices and processes are not relevantly different from ordinary and frequent intrusions upon one’s brain and mind, strong protections of cognitive (...) liberty may proscribe neurotechnological intrusions, but also ordinary intrusions. Thus, the cognitive libertarian position “hog-ties” others’ use of their own liberties. This problem for the cognitive libertarian is the same problem that ordinary libertarianism faces in protecting individual rights to property and person. But the libertarian strategies for resolving the problem don’t work for the cognitive libertarian. I conclude that the right to mental privacy is weaker than what cognitive libertarians want it to be. (shrink)

Despite widespread agreement that privacy in the context of education is important, it can be difficult to pin down precisely why and to what extent it is important, and it is challenging to determine how privacy is related to other important values. But that task is crucial. Absent a clear sense of what privacy is, it will be difficult to understand the scope of privacy protections in codes of ethics. Moreover, privacy will inevitably conflict with (...) other values, and understanding the values that underwrite privacy protections is crucial for addressing conflicts between privacy and institutional efficiency, advising efficacy, vendor benefits, and student autonomy. -/- My task in this paper is to seek a better understanding of the concept of privacy in institutional research, canvas a number of important moral values underlying privacy generally (including several that are explicit in the AIR Statement), and examine how those moral values should bear upon institutional research by considering several recent cases. (shrink)

Aggregating individuals’ consistent attitudes might produce inconsistent collective attitudes. Some groups therefore need the capacity to form attitudes that are irreducible to those of their members. Such groups, group-agent realists argue, are agents in control of their own attitude formation. In this paper, however, I show how group-agent realism overlooks the important fact that groups consist of strategically interacting agents. Only by eliminating group agency from our social explanations can we see how individuals vote strategically to gain (...) control of their groups and produce collective attitudes we cannot make sense of if we treat groups as agents. (shrink)

At the beginning of the COVID-19 pandemic, high hopes were placed on digital contact tracing. Digital contact tracing apps can now be downloaded in many countries, but as further waves of COVID-19 tear through much of the northern hemisphere, these apps are playing a less important role in interrupting chains of infection than anticipated. We argue that one of the reasons for this is that most countries have opted for decentralised apps, which cannot provide a means of rapidly informing users (...) of likely infections while avoiding too many false positive reports. Centralised apps, in contrast, have the potential to do this. But policy making was influenced by public debates about the right app configuration, which have tended to focus heavily on privacy, and are driven by the assumption that decentralised apps are “privacy preserving by design”. We show that both types of apps are in fact vulnerable to privacy breaches, and, drawing on principles from safety engineering and risk analysis, compare the risks of centralised and decentralised systems along two dimensions, namely the probability of possible breaches and their severity. We conclude that a centralised app may in fact minimise overall ethical risk, and contend that we must reassess our approach to digital contact tracing, and should, more generally, be cautious about a myopic focus on privacy when conducting ethical assessments of data technologies. (shrink)

Differential privacy (DP) aims to confer data processing systems with inherent privacy guarantees, offering strong protections for personal data. But DP’s approach to privacy carries with it certain assumptions about how mathematical abstractions will be translated into real-world systems, which—if left unexamined and unrealized in practice—could function to shield data collectors from liability and criticism, rather than substantively protect data subjects from privacy harms. This article investigates these assumptions and discusses their implications for using DP to (...) govern data-driven systems. In Parts 1 and 2, we introduce DP as, on one hand, a mathematical framework and, on the other hand, a kind of real-world sociotechnical system, using a hypothetical case study to illustrate how the two can diverge. In Parts 3 and 4, we discuss the way DP frames privacy loss, data processing interventions, and data subject participation, arguing it could exacerbate existing problems in privacy regulation. In part 5, we conclude with a discussion of DP’s potential interactions with the endogeneity of privacy law, and we propose principles for best governing DP systems. In making such assumptions and their consequences explicit, we hope to help DP succeed at realizing its promise for better substantive privacy protections. (shrink)

Discussions of group knowledge typically focus on whether a group’s knowledge that p reduces to group members’ knowledge that p. Drawing on the cumulative reading of collective knowledge ascriptions and considerations about the importance of the division of epistemic labour, I argue what I call the Fragmented Knowledge account, which allows for more complex relations between individual and collective knowledge. According to this account, a group can know an answer to a question in virtue of members (...) of the group knowing parts of that answer, when the whole answer is available to group-level action. I argue that this account explains a swathe of central cases of group knowledge, as well as explaining some central features of group knowledge. (shrink)

Lauritz Munch and Björn Lundgren have recently replied to a paper published by us in this journal. In our original paper, we defended a novel version of the so-called ‘control theory’ of the moral right to privacy. We argued that control theorists should define ‘control’ as what we coined ‘Negative Control’. Munch and Lundgren have recently provided a range of interesting and challenging objections to our view. Independently of each other, they give almost identical counterexamples to our definition of (...) Negative Control. In this comment, we show that while the counterexamples are genuine counterexamples, they do not force us to abandon the idea of Negative Control. Furthermore, we reply to two additional objections raised by Lundgren. One of these replies involves giving a new account of what the relation is between the concept of privacy and the right to privacy. (shrink)

Privacy involves a zone of inaccessibility in a particular context. In social discourse it pertains to activities that are not public, the latter being by definition knowable by outsiders. The public domain so called is the opposite of secrecy and somewhat less so of confidentiality. The private sphere is respected in law and morality, now in terms of a right to privacy. In law some violations of privacy are torts. Philosophers tend to associate privacy with personhood. (...) Professional relationships are prima facie private but may be investigated for cause. Privacy may entail both intimacy and caring but neither necessarily so. Finally, various technology-based means of intrusion are rendering privacy ever more difficult to sustain. (shrink)

The dominant approach in privacy theory defines information privacy as some form of control over personal information. In this essay, I argue that the control approach is mistaken, but for different reasons than those offered by its other critics. I claim that information privacy involves the drawing of epistemic boundaries—boundaries between what others should and shouldn’t know about us. While controlling what information others have about us is one strategy we use to draw such boundaries, it is (...) not the only one. We conceal information about ourselves and we reveal it. And since the meaning of information is not self-evident, we also work to shape how others contextualize and interpret the information about us that they have. Information privacy is thus about more than controlling information; it involves the constant work of producing and managing public identities, what I call “social self- authorship.” In the second part of the essay, I argue that thinking about information privacy in terms of social self- authorship helps us see ways that information technology threatens privacy, which the control approach misses. Namely, information technology makes social self- authorship invisible and unnecessary, by making it difficult for us to know when others are forming impressions about us, and by providing them with tools for making assumptions about who we are which obviate the need for our involvement in the process. (shrink)

Unjustifiable assumptions about sex and gender roles, the untamable potency of maleness, and gynophobic notions about women's bodies inform and influence a broad range of policy-making institutions in this society. In December 2004, the U.S. Court of Appeals for the Sixth Circuit continued this ignoble cultural pastime when they decided Everson v. Michigan Department of Corrections. In this decision, the Everson Court accepted the Michigan Department of Correction's claim that “the very manhood” of male prison guards both threatens the safety (...) of female inmates and violates the women's “special sense of privacy in their genitals” and declared that sex-specific employment policies for prison guards is not impermissibly discriminatory. I believe that the Court's decision relies on unacceptable stereotypes about sex, gender and sexuality and it significantly undermines Title VII's power to end discriminatory employment practices. (shrink)

Today’s ethics of privacy is largely dedicated to defending personal information from big data technologies. This essay goes in the other direction; it considers the struggle to be lost, and explores two strategies for living after privacy is gone. First, total exposure embraces privacy’s decline, and then contributes to the process with transparency. All personal information is shared without reservation. The resulting ethics is explored through a big data version of Robert Nozick’s Experience Machine thought experiment. Second, (...) transient existence responds to privacy’s loss by ceaselessly generating new personal identities, which translates into constantly producing temporarily unviolated private information. The ethics is explored through Gilles Deleuze’s metaphysics of difference applied in linguistic terms to the formation of the self. Comparing the exposure and transience alternatives leads to the conclusion that today’s big data reality splits the traditional ethical link between authenticity and freedom. Exposure provides authenticity, but negates human freedom. Transience provides freedom, but disdains authenticity. (shrink)

Philosophers have focused on why privacy is of value to innocent people with nothing to hide. I argue that for people who do have something to hide, such as a past crime, or bad behavior in a public place, informational privacy can be important for avoiding undeserved or disproportionate non-legal punishment. Against the objection that one cannot expect privacy in public facts, I argue that I might have a legitimate privacy interest in public facts that are (...) not readily accessible, or in details of a public fact that implicate my dignity, or in not having a public fact memorialized and spread to more people than I willingly exposed myself to. (shrink)

This paper discusses the idea that the concept of privacy should be understood in terms of control. Three different attempts to spell out this idea will be critically discussed. The conclusion will be that the Source Control View on privacy is the most promising version of the idea that privacy is to be understood in terms of control.

According Philip Pettit, suitably organised groups not only possess ‘minds of their own’ but can also ‘make up their minds’ and 'speak for themselves'--where these two capacities enable them to perform as conversable subjects or 'persons'. In this paper I critically examine Pettit's case for group personhood. My first step is to reconstruct his account, explaining first how he understands the two capacities he considers central to personhood – the capacity to ‘make up one’s mind’, and the capacity to (...) ‘speak for oneself’ – before showing how he thinks these can be manifested in groups. With Pettit’s account duly reconstructed, I then turn to criticism, arguing that Pettit’s construal of making up one’s mind does not do proper justice to our first-personal self-understanding, nor to our characteristic interpersonal forms of engagement. This leads me, finally, to consider an alternative construal of ‘making up one’s mind’ and ‘speaking for oneself’ that is associated with the work of Richard Moran and whichargue, could usefully be exteextended to groups. (shrink)

: Does the rejection of pure proceduralism show that we should adopt Brettschneider’s value theory of democracy? The answer, this paper suggests, is ‘no’. There are a potentially infinite number of incompatible ways to understand democracy, of which the value theory is, at best, only one. The paper illustrates and substantiates its claims by looking at what the secret ballot shows us about the importance of privacy and democracy. Drawing on the reasons to reject Mill’s arguments for open voting, (...) in a previous paper by A. Lever, it argues that people’s claims to privacy have a constitutive, as well as an instrumental, importance to democratic government, which is best seen by attending to democracy as a practice, and not merely as a distinctive set of values. (shrink)

In light of technology that may reveal the content of a person’s innermost thoughts, I address the question of whether there is a right to ‘brain privacy’—a right not to have one’s inner thoughts revealed to others–even if exposing these thoughts might be beneficial to society. I draw on a conception of privacy as the ability to control who has access to information about oneself and to an account that connects one’s interest in privacy to one’s interests (...) in autonomy and associated reputational interests, and preserving one’s dignity. Focusing on the controversial case of Gilberto Valle, known as the ‘cannibal cop’, who faced legal punishment and moral reproach for deeply disturbing thoughts of doing violence to women, thoughts he claimed were mere fantasies, I argue that Valle has a right to brain privacy if he has a legitimate privacy interest that is not outweighed by competing societal interests in avoiding harm. Our weighing of competing privacy and societal interests will depend on the magnitude of the privacy interests in autonomy and dignity, and on how reliable the technology used to expose inner thoughts is in predicting future harmful behavior and identifying true threats. (shrink)

The purpose of this survey was to gather individual’s attitudes and feelings towards privacy and the selling of data. A total (N) of 1,107 people responded to the survey. -/- Across continents, age, gender, and levels of education, people overwhelmingly think privacy is important. An impressive 82% of respondents deem privacy extremely or very important, and only 1% deem privacy unimportant. Similarly, 88% of participants either agree or strongly agree with the statement that ‘violations to the (...) right to privacy are one of the most important dangers that citizens face in the digital age.’ The great majority of respondents (92%) report having experienced at least one privacy breach. -/- People’s first concern when losing privacy is the possibility that their personal data might be used to steal money from them. Interestingly, in second place in the ranking of concerns, people report being concerned about privacy because ‘Privacy is a good in itself, above and beyond the consequences it may have.’ -/- People tend to feel that they cannot trust companies and institutions to protect their privacy and use their personal data in responsible ways. The majority of people believe that governments should not be allowed to collect everyone’s personal data. Privacy is thought to be a right that should not have to be paid for. (shrink)

In recent years, educational institutions have started using the tools of commercial data analytics in higher education. By gathering information about students as they navigate campus information systems, learning analytics “uses analytic techniques to help target instructional, curricular, and support resources” to examine student learning behaviors and change students’ learning environments. As a result, the information educators and educational institutions have at their disposal is no longer demarcated by course content and assessments, and old boundaries between information used for assessment (...) and information about how students live and work are blurring. Our goal in this paper is to provide a systematic discussion of the ways in which privacy and learning analytics conflict and to provide a framework for understanding those conflicts. -/- We argue that there are five crucial issues about student privacy that we must address in order to ensure that whatever the laudable goals and gains of learning analytics, they are commensurate with respecting students’ privacy and associated rights, including (but not limited to) autonomy interests. First, we argue that we must distinguish among different entities with respect to whom students have, or lack, privacy. Second, we argue that we need clear criteria for what information may justifiably be collected in the name of learning analytics. Third, we need to address whether purported consequences of learning analytics (e.g., better learning outcomes) are justified and what the distributions of those consequences are. Fourth, we argue that regardless of how robust the benefits of learning analytics turn out to be, students have important autonomy interests in how information about them is collected. Finally, we argue that it is an open question whether the goods that justify higher education are advanced by learning analytics, or whether collection of information actually runs counter to those goods. (shrink)

Does privacy--the condition of being invisible to public scrutiny--in so emphasizing individual rights, undermine community? One objection to privacy is that it is a license to engage in antisocial activity that undermines social norms. Another objection is that privacy encourages isolation and anonymity, also undermining community. Drawing on the political theory of Hegel, I argue that privacy can promote community. Some invasions of privacy can undermine a sort of autonomy essential for maintaining a community. I (...) also discuss what we need to know before establishing whether privacy empirically promotes or undermines community. (shrink)

Can groups really be agents or is group agency just a fiction? Christian List and Philip Pettit argue influentially for group-agent realism by showing how certain groups form and act on attitudes in ways they take to be unexplainable at the level of the individual agents constituting them. Group agency is therefore considered not a fiction or a metaphor but a reality we must account for in explanations of certain social phenomena. In this paper, I challenge this (...) defence of group-agent realism by showing how it is undermined by individual-level analysis of how individuals interact within groups. While group agency can be a useful fiction, real agents are at the individual level, not the collective level. (shrink)

The claim is frequently made that structured collections of individuals who are themselves subjects of mental and cognitive states – such collections as courts, countries, and corporations – can be, and often are, subjects of mental or cognitive states. And, to be clear, advocates for this so-called group-minds hypothesis intend their view to be interpreted literally, not metaphorically. The existing critical literature casts substantial doubt on this view, at least on the assumption that groups are claimed to instantiate the (...) same species of mental and cognitive properties as individual humans. In this essay, I evaluate a defensive move made by some proponents of the group-oriented view: to concede that group states and individual states aren’t of the same specific natural kinds, while holding that groups instantiate different species of mental or cognitive states – perhaps a different species of cognition itself – from those instantiated by humans. In order to evaluate this defense of group cognition, I develop a view of natural kinds – or at least of the sort of evidence that supports inferences to the sameness of natural kind – a view I have previous dubbed the ‘tweak-and-extend’ theory. Guided by the tweak-and-extend approach, I arrive at a tentative conclusion: that what is common to models of individual cognitive processing and models of group processing does not suffice to establish sameness of cognitive (or mental) kinds, properties, or state-types, not even at a generic or overarching level. (shrink)

What motivated an absolutist Erastian who rejected religious freedom, defended uniform public worship, and deemed the public expression of disagreement a catalyst for war to endorse a movement known to history as the champion of toleration, no coercion in religion, and separation of church and state? At least three factors motivated Hobbes’s 1651 endorsement of Independency: the Erastianism of Cromwellian Independency, the influence of the politique tradition, and, paradoxically, the contribution of early-modern practices of toleration to maintaining the public sphere’s (...) religious uniformity. The third factor illustrates how a key function of the emerging private sphere in the early-modern period was to protect uniformity, rather than diversity; it also shows that what was novel was not so much the public/private distinction itself, but the separation of two previously conflated dimensions of publicity – visibility and representativeness – that enabled early-modern Europeans to envisage modes of worship out in the open, yet still private. (shrink)

This paper is an overview about the state of privacy and power shifts during the pandemic, and the privacy challenges ahead.

this paper argues that people are entitled to keep some true facts about themselves to themselves, should they so wish, as a sign of respect for their moral and political status, and in order to protect themselves from being used as a public example in order to educate or to entertain other people. The “outing” - or non-consensual public disclosure - of people’s health records or status, or their sexual behaviour or orientation is usually unjustified, even when its consequences seem (...) to be beneficial. Indeed, the paper claims, the reasons to reject outing, as inconsistent with democratic commitments to freedom and equality, are reasons to insist on the importance of privacy to freedom of expression. While a free press is of the utmost importance to democratic government, it is not identical with the free expression of individuals and, on occasion, the former may have to be constrained in order to protect the latter. [Barendt, 2007, 231]. Hence, the paper concludes, we should distinguish the claims of individuals to publish reports about their lives – even if this necessarily involves revealing the private lives of others – from journalistic claims to publish information about the sex lives of consenting adults. I will start by briefly situating my argument within a democratic approach to privacy, before using the “outing” of Oliver Sipple to examine people’s claims to privacy and their implications for freedom of expression and of the press. I will be assuming that some forms of privacy are legitimate, in order to focus more closely on the question of what information, if any, people may keep to themselves. (shrink)

Throughout the 20th century, market capitalism was defended on parallel grounds. First, it promotes freedom by enabling individuals to exploit their own property and labor-power; second, it facilitates an efficient allocation and use of resources. Recently, however, both defenses have begun to unravel—as capitalism has moved into its “platform” phase. Today, the pursuit of allocative efficiency, bolstered by pervasive data surveillance, often undermines individual freedom rather than promoting it. And more fundamentally, the very idea that markets are necessary to achieve (...) allocative efficiency has come under strain. Even supposing, for argument’s sake, that the claim was true in the early 20th century when von Mises and Hayek pioneered it, advances in computing have rekindled the old “socialist calculation” debate. And this time around, markets—as information technology—are unlikely to have the upper hand. -/- All of this, we argue, raises an important set of governance questions regarding the political economy of the future. We focus on two: How much should our economic system prioritize freedom, and to what extent should it rely on markets? The arc of platform capitalism bends, increasingly, toward a system that neither prioritizes freedom nor relies on markets. And the dominant critical response, exemplified by Shoshana Zuboff’s work, has been to call for a restoration of market capitalism. Longer term, however, we believe it would be more productive to think about how “postmarket” economic arrangements might promote freedom—or better yet, autonomy—even more effectively than markets, and to determine the practical steps necessary to realize that possibility. (shrink)

The human mind is constituted by inner, subjective, private, first-person conscious experiences that cannot be measured with physical devices or observed from an external, objective, public, third-person perspective. The qualitative, phenomenal nature of conscious experiences also cannot be communicated to others in the form of a message composed of classical bits of information. Because in a classical world everything physical is observable and communicable, it is a daunting task to explain how an empirically unobservable, incommunicable consciousness could have any physical (...) substrates such as neurons composed of biochemical molecules, water, and electrolytes. The challenges encountered by classical physics are exemplified by a number of thought experiments including the inverted qualia argument, the private language argument, the beetle in the box argument and the knowledge argument. These thought experiments, however, do not imply that our consciousness is nonphysical and our introspective conscious testimonies are untrustworthy. The principles of classical physics have been superseded by modern quantum physics, which contains two fundamentally different kinds of physical objects: unobservable quantum state vectors, which define what physically exists, and quantum operators (observables), which define what can physically be observed. Identifying consciousness with the unobservable quantum information contained by quantum physical brain states allows for application of quantum information theorems to resolve possible paradoxes created by the inner privacy of conscious experiences, and explains how the observable brain is constructed by accessible bits of classical information that are bound by Holevo's theorem and extracted from the physically existing quantum brain upon measurement with physical devices. (shrink)

If I decide to disclose information about myself, this act can undermine other people’s ability to effectively conceal information about themselves. One case in point involves genetic information: if I share ‘my’ genetic information with others, I thereby also reveal genetic information about my biological relatives. Such dependencies are well-known in the privacy literature and are often referred to as ‘privacy dependencies’. Some take the existence of privacy dependencies to generate a moral duty to sometimes avoid sharing (...) information about oneself. If true, we argue, then it is sometimes justified for others to impose harm on the person sharing the information to prevent them from doing so. This is a highly revisionary implication. Hence, one must either endorse a highly revisionary view on what one may do to protect one’s privacy, or one must reject the view that privacy dependencies can be used to justify a moral duty that constrains choices about sharing information about oneself. (shrink)

Privacy is valued by many. But what it means to have privacy remains less than clear. In this paper, I argue that the notion of privacy should be understood in epistemic terms. What it means to have (some degree of) privacy is that other persons do not stand in significant epistemic relations to those truths one wishes to keep private.