As businesses and other entities have sought to collect more personal data on individuals, the public has pushed back, and lawmakers throughout the United States and elsewhere have responded by passing data protection laws. Recent data protection laws passed by the European Union and by several...

When card data is exposed in a data breach but has not yet been used to attempt fraud, the overall social costs of that breach depend on whether the financial institutions that issued those cards immediately cancel them and issue new cards or instead wait until fraud is attempted. This article...

Today’s online economy relies on exchanges of data for services. Online service providers collect personal data to earn revenue from targeted advertising. Many users of online services are concerned that their data might be used in ways contrary to their interests, interfering with their...

In 1890, when Louis Brandeis and Samuel Warren wrote their seminal work on The Right to Privacy, Japan did not have a word for the concept. Scholars settled on puraibashii a transliteration as opposed to translation, of the word privacy. Today, privacy is closely guarded in Japan; the European...

This paper discusses the regulation of mass metadata surveillance in Europe through the lens of the landmark judgment in which the Court of Justice of the European Union struck down the Data Retention Directive. The controversial directive obliged telecom and Internet access providers in Europe...

Open data are held to contribute to a wide variety of social and political goals, including strengthening transparency, public participation and democratic accountability, promoting economic growth and innovation, and enabling greater public sector efficiency and cost savings. However, releasing...

Where data centres located in the European Economic Area ('EEA') are utilised for cloud computing services, the customers, and in some circumstances even cloud service providers, could become subject to the EU Data Protection Directive on the basis that the data centre may be an...

Cloud computing service providers, even those based outside Europe, may become subject to the EU Data Protection Directive's extensive and complex regime purely through their customers' choices, of which they may have no knowledge or control. We consider the definition and application of the EU...

Through a historical examination of the UK case over the past forty years, this article argues that, although not drafted with such activities specifically in mind, the growth of legal initiatives protecting personal information have exerted a powerful and under-recognized impact on how social...