Privacy

In "The Right to Privacy" (1890), the Boston lawyers Samuel D. Warren and Louis Brandeis argued that the common law should recognise a general "right to be let alone", a phrase they took from Judge Thomas M. Cooley.^[19] Their immediate concern was that "instantaneous photographs and newspaper enterprise" had "invaded the sacred precincts of private and domestic life", a reference to the sensationalist press of the period, often described as yellow journalism.^[5] They grounded the right not in property or contract but in the protection of an "inviolate personality".^[20]

The formula proved influential but indeterminate, since it does not explain which forms of being left alone the law should protect. It has been read to include a person's right to choose seclusion from the attention of others, and to be free from scrutiny or observation in private settings such as the home.^[21] Although the concept did not define privacy precisely enough to ground comprehensive legal protection, it strengthened the notion of an individual right to privacy and began a long tradition of debate about such rights in the United States.^[21]

A second family of theories treats privacy as limited accessibility to the self. In 1890 the American journalist E. L. Godkin described private life as "the right of every man to keep his affairs to himself, and to decide for himself to what extent they shall be the subject of public observation and discussion".^[22][23] Ruth Gavison developed the idea analytically, arguing that privacy concerns the extent to which a person is known to others (secrecy), the subject of their attention (anonymity) and physically accessible to them (solitude).^[24] Sissela Bok similarly defined privacy as "the condition of being protected from unwanted access by others—either physical access, personal information, or attention".^[25]

On a narrower view, privacy is the concealment of discreditable or sensitive information. Richard Posner described it as the right of people to "conceal information about themselves that others might use to their disadvantage", and argued on economic grounds that such concealment can amount to a form of misrepresentation that impairs the efficient working of markets.^[26][27] When privacy is understood as secrecy, it is usually imagined as a selective secrecy, in which individuals keep some information private while choosing to make other information public.^[28] Critics reply that the secrecy view cannot explain why a person may retain a privacy interest in information that has already been disclosed to some people, or in information that is not discreditable at all.^[29]

The most influential definition in the information age is that of the political scientist Alan Westin, for whom privacy is "the claim of individuals, groups, or institutions to determine for themselves when, how, and to what extent information about them is communicated to others".^[30] The philosopher Charles Fried likewise argued that privacy "is not simply an absence of information about us in the minds of others; rather it is the control we have over information about ourselves".^[31] The control model underlies the fair information practice principles on which most data protection legislation is built.^[32][33] It has been criticised for presupposing that individuals are able to make informed choices about complex and opaque data practices.^[34][14]

The psychologist Carl A. Johnson tied privacy to the psychological concept of "personal control", which he modelled as a process with four stages and two kinds of behaviour–outcome relationship, the outcomes depending on both situational and personal factors.^[35] On this model, privacy consists of "behaviors falling at specific locations on these two dimensions".^[36] The four stages are outcome choice control, the selection between possible outcomes; behaviour selection control, the selection between strategies for attaining the chosen outcome; outcome effectance, the carrying out of the chosen behaviour so as to achieve the outcome; and outcome realisation control, the person's interpretation of the outcome achieved. The two dimensions are primary control, in which behaviour directly causes outcomes, and secondary control, in which it does so indirectly.^[37] Johnson treated privacy as behaviour exercising secondary control over outcomes, and argued that a person's conception of privacy itself depends on these behaviour–outcome relationships; he developed the account in dialogue with the work of Irwin Altman, and of Maxine Wolfe and Robert S. Laufer.^[38]

The philosopher Lorenzo Magnani extends the idea of control to personal identity. He argues that consciousness is partly constituted by external representations of the self, such as narratives and data stored outside the body, but that much of it consists of internal representations that remain private and are rarely externalised.^[39] Magnani describes this internal privacy as a form of "information property" or "moral capital" that is essential to free choice and personal agency. When too much of a person's identity is externalised and subjected to scrutiny, he contends, the result is a loss of control, dignity and responsibility; the protection of privacy therefore safeguards the ability to pursue personal projects free from intrusive external forces.^[40]

Helen Nissenbaum's theory of contextual integrity holds that privacy is violated not by disclosure as such but by information flows that breach the norms of the social context in which the information was shared. A patient's disclosure of symptoms to a doctor is appropriate within medicine but would violate contextual norms if passed to an employer.^[41] The theory has been widely adopted in computer science and policy analysis because it explains why aggregating individually public information can nevertheless be harmful.

Privacy may be understood as a prerequisite for the development of a sense of self-identity. Privacy barriers, in particular, are instrumental in this process. According to Irwin Altman, such barriers "define and limit the boundaries of the self" and thus "serve to help define [the self]."^[42] This control primarily entails the ability to regulate contact with others.^[42] Control over the "permeability" of the self's boundaries enables one to control what constitutes the self and thus to define what is the self.^[42]

Several philosophers present privacy as a condition for the development of personhood. Jeffrey Reiman argued that privacy is a social ritual by which a society recognises, and conveys to the individual—that one's physical existence is under one's moral ownership.^[43] Hence, a moral right to self-determination devirated from the notion of privacy.^[43] Stanley Benn grounded privacy in respect for persons as choosers, observing that covert observation alters the conditions under which a person chooses without one's knowledge.^[44] Joseph Kupfer linked privacy to the formation of an autonomous self-concept, drawing on studies of child development and on Erving Goffman's account of "total institutions", in which the systematic deprivation of privacy erodes inmates' sense of self.^[45][46] In his understanding, an autonomous self-concept entails a conception of oneself as a "purposeful, self-determining, responsible agent" and an awareness of one's capacity to control the boundary between self and other—that is, to control who can access and experience one's and to which extent.^[45] In United States constitutional law, a related "decisional" conception of privacy protected choices about contraception, abortion and intimate relationships.^[47][34]

In addition, privacy may be seen as a state that fosters personal growth, a process integral to the development of self-identity. Hyman Gross suggested that, without privacy—solitude, anonymity, and temporary releases from social roles—individuals would be unable to freely express themselves and to engage in self-discovery and self-criticism.^[45] Such self-discovery and self-criticism contributes to one's understanding of oneself and shapes one's sense of identity.^[45]

In a way analogous to how the personhood theory imagines privacy as some essential part of being an individual, the intimacy theory imagines privacy to be an essential part of the way that humans have strengthened or intimate relationships with other humans.^[48] Because part of human relationships includes individuals volunteering to self-disclose most if not all personal information, this is one area in which privacy does not apply.^[48]

James Rachels advanced this notion by writing that privacy matters because "there is a close connection between our ability to control who has access to us and to information about us, and our ability to create and maintain different sorts of social relationships with different people."^[49] On this view privacy allows people to calibrate what they disclose to friends, colleagues and strangers, and so makes intimate relationships possible.^[49] Hence, protecting intimacy is also at the core of the concept of sexual privacy. The legal scholar Danielle Citron has built on this tradition to argue that "sexual privacy" deserves recognition as a distinct and especially weighty interest.^[50]

Alan Westin defined four states—or experiences—of privacy: solitude, intimacy, anonymity, and reserve. Solitude is a physical separation from others;^[51] Intimacy is a "close, relaxed; and frank relationship between two or more individuals" that results from the seclusion of a pair or small group of individuals.^[51] Anonymity is the "desire of individuals for times of 'public privacy.'"^[51] Lastly, reserve is the "creation of a psychological barrier against unwanted intrusion"; this creation of a psychological barrier requires others to respect an individual's need or desire to restrict communication of information concerning themself.^[51]

In addition to the psychological barrier of reserve, Kirsty Hughes identified three more kinds of privacy barriers: physical, behavioural, and normative. Physical barriers, such as walls and doors, prevent others from accessing and experiencing the individual.^[52] (In this sense, "accessing" an individual includes accessing personal information about them.)^[52] Behavioral barriers communicate to others—verbally, through language, or non-verbally, through personal space, body language, or clothing—that an individual does not want the other person to access or experience them.^[52] Lastly, normative barriers, such as laws and social norms, restrain others from attempting to access or experience an individual.^[52]

Physical privacy could be defined as preventing "intrusions into one's physical space or solitude."^[53] An example of the legal basis for the right to physical privacy is the U.S. Fourth Amendment, which guarantees "the right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures".^[54] Physical privacy may be a matter of cultural sensitivity, personal dignity or shyness.^[55] There may also be concerns about safety, if, for example one is wary of becoming the victim of crime or stalking.^[56]

Government agencies, corporations and other organisations may wish to keep their activities or secrets from other organisations or individuals, and adopt security practices and controls to keep information confidential. They may also seek legal protection for such information. A government may invoke executive privilege^[57] or designate information as classified, and a company may protect valuable proprietary information as trade secrets.^[54]

Political scientists such as Priscilla Regan have criticised accounts that treat privacy solely as an individual interest to be balanced against collective goods. Regan argued that privacy also has shared perceptions, public values, and collective components, since it sustains democratic participation and limits the power of government and organisations; in her view, recognising this would strengthen privacy's position in policy-making.^[59] David Flaherty's comparative study of data protection in five countries similarly treated privacy protection as a matter of controlling the surveillance capacities of the modern state.^[60] He believed believes networked computer databases pose threats to privacy and forwarded an idea of privacy as information control.^[60] More recent work emphasises that the burdens of weak privacy protection fall unequally: Scott Skinner-Thompson argues that marginalised groups are both more often required to disclose personal information and more severely harmed by exposure.^[61]

Richard Posner and Lawrence Lessig focus on the economic aspects of personal information control. Posner criticizes privacy for concealing information, which reduces market efficiency. For Posner, employment is selling oneself in the labour market, which he believes is like selling a product. Any 'defect' in the 'product' that is not reported is fraud.^[62] For Lessig, privacy breaches online can be regulated through code and law. Lessig claims "the protection of privacy would be stronger if people conceived of the right as a property right",^[63] and that "individuals should be able to control information about themselves".^[64]

There have been attempts to establish privacy as one of the fundamental human rights, whose social value is an essential component in the functioning of democratic societies.^[65] Leslie Regan Shade argues that the human right to privacy is necessary for meaningful democratic participation, and ensures human dignity and autonomy. Privacy depends on norms for how information is distributed, and if this is appropriate. Violations of privacy depend on context. The human right to privacy has precedent in the United Nations Declaration of Human Rights: "Everyone has the right to freedom of opinion and expression; this right includes freedom to hold opinions without interference and to seek, receive and impart information and ideas through any media and regardless of frontiers."^[8] Shade believes that privacy must be approached from a people-centered perspective, and not through the marketplace.^[66] Dr. Eliza Watt, Westminster Law School, University of Westminster in London, UK, proposes application of the International Human Right Law (IHRL) concept of "virtual control" as an approach to deal with extraterritorial mass surveillance by state intelligence agencies. Dr. Watt envisions the "virtual control" test, understood as a remote control over the individual's right to privacy of communications, where privacy is recognized under the ICCPR, Article 17. This, she contends, may help to close the normative gap that is being exploited by nation states.^[67]

Some philosophers doubt that privacy is a distinct value at all. Judith Jarvis Thomson argued that the "right to privacy" is a cluster of rights each of which derives from other rights, such as rights over one's property and person.^[68] Economic critics, notably Posner, argue that much privacy protection permits people to conceal information that others legitimately need.^[27] Feminist scholars have pointed out that appeals to the privacy of the home and family have historically shielded domestic violence and the subordination of women from public scrutiny; Catharine MacKinnon criticised the privacy rationale of Roe v. Wade on this ground, while Anita L. Allen defended privacy as a good that women have historically been denied.^[69][70]

Distinctions between public and private domains appear in many early societies. In his comparative study, the sociologist Barrington Moore examined conceptions of privacy in classical Athens, in the Hebrew Bible and in ancient China, concluding that some desire for privacy appears in all of them while its content varies with social structure.^[4] Aristotle's distinction between the polis, the sphere of political life, and the oikos, the household, is frequently cited as an early statement of the public–private division in Western thought.^[71] Hannah Arendt later drew on the same distinction in her account of the decline of the public realm in modern society.^[72]

Religious texts also address intrusion. The Quran enjoins believers not to spy on one another (49:12) and not to enter houses other than their own without permission (24:27), verses that have informed the treatment of privacy in Islamic jurisprudence.^[73] In Sinosphere, the term yinsi (隱私) or siyin (私隱) long carried connotations of shameful secrecy, and historians have traced how Confucian and later conceptions of the private (私) and public (公) diverged from Western liberal ones.^[74]

Historians of private life in Europe have associated the growth of privacy with changes in domestic architecture, the separation of household from workplace, literacy and the rise of individual religious practice.^[75] Jürgen Habermas traced the emergence, in the eighteenth century, of a bourgeois "public sphere" formed by private persons coming together to debate matters of common concern, which presupposed a protected intimate sphere of the family.^[76]

Liberal political theory gave the distinction normative force. John Stuart Mill's On Liberty (1859) argued that the only legitimate ground for interfering with an individual's liberty against his will is to prevent harm to others, and defended a domain of conduct that "merely concerns himself".^[77] At the end of the eighteenth century Jeremy Bentham proposed the Panopticon, a prison in which inmates could be watched at any time without knowing whether they were being observed; Michel Foucault later took it as a model of a disciplinary power that induces people to regulate their own behaviour.^[78]

The concept of privacy has been explored and discussed by numerous philosophers throughout history. Privacy has historical roots in ancient Greek philosophical discussions. The most well-known of these was Aristotle's distinction between two spheres of life: the public sphere of the polis, associated with political life, and the private sphere of the oikos, associated with domestic life.^[71] Privacy is valued along with other basic necessities of life in the Jewish deutero-canonical Book of Sirach.^[79]

Islam's holy text, the Qur'an, states the following regarding privacy: 'Do not spy on one another' (49:12); 'Do not enter any houses except your own homes unless you are sure of their occupants' consent' (24:27).^[80]

English philosopher John Locke's (1632–1704) writings on natural rights and the social contract laid the groundwork for modern conceptions of individual rights, including the right to privacy. In his Second Treatise of Civil Government (1689), Locke argued that a man is entitled to his own self through one's natural rights of life, liberty, and property.^[81] He believed that the government was responsible for protecting these rights so individuals were guaranteed private spaces to practice personal activities.^[82]

In the political sphere, philosophers hold differing views on the right of private judgment. German philosopher Georg Wilhelm Friedrich Hegel (1770–1831) makes the distinction between moralität, which refers to an individual's private judgment, and sittlichkeit, pertaining to one's rights and obligations as defined by an existing corporate order. On the contrary, Jeremy Bentham (1748–1832), an English philosopher, interpreted law as an invasion of privacy. His theory of utilitarianism argued that legal actions should be judged by the extent of their contribution to human wellbeing, or necessary utility.^[83]

Hegel's notions were modified by prominent 19th century English philosopher John Stuart Mill. Mill's essay On Liberty (1859) argued for the importance of protecting individual liberty against the tyranny of the majority and the interference of the state. His views emphasized the right of privacy as essential for personal development and self-expression.^[84]

Discussions surrounding surveillance coincided with philosophical ideas on privacy. Jeremy Bentham developed the phenomenon known as the Panoptic effect through his 1791 architectural design of a prison called Panopticon. The phenomenon explored the possibility of surveillance as a general awareness of being watched that could never be proven at any particular moment.^[85] French philosopher Michel Foucault (1926–1984) concluded that the possibility of surveillance in the instance of the Panopticon meant a prisoner had no choice but to conform to the prison's rules.^[85]

More recently, the unequal effects of weak privacy protections have been debated. In Privacy at the Margins, law professor Scott Skinner-Thompson argues that marginalized and vulnerable groups are disproportionately affected both because they are more likely to be required to share personal information and because they experience more severe harm when their privacy is breached.^[61]

As technology has advanced, the way in which privacy is protected and violated has changed with it. In the case of some technologies, such as the printing press or the Internet, the increased ability to share information can lead to new ways in which privacy can be breached. It is generally agreed that the first publication advocating privacy in the United States was the 1890 article by Samuel Warren and Louis Brandeis, "The Right to Privacy",^[86] and that it was written mainly in response to the increase in newspapers and photographs made possible by printing technologies.^[87]

In 1948, 1984, written by George Orwell, was published. A classic dystopian novel, 1984 describes the life of Winston Smith in 1984, located in Oceania, a totalitarian state. The all-controlling Party, the party in power led by Big Brother, is able to control power through mass surveillance and limited freedom of speech and thought. George Orwell provides commentary on the negative effects of totalitarianism, particularly on privacy and censorship.^[88] Parallels have been drawn between 1984 and modern censorship and privacy, a notable example being that large social media companies, rather than the government, are able to monitor a user's data and decide what is allowed to be said online through their censorship policies, ultimately for monetary purposes.^[89]

In the 1960s, people began to consider how changes in technology were bringing changes in the concept of privacy.^[90] Vance Packard's The Naked Society was a popular book on privacy from that era and led US discourse on privacy at that time.^[90] In addition, Alan Westin's Privacy and Freedom shifted the debate regarding privacy from a physical sense, how the government controls a person's body (i.e. Roe v. Wade) and other activities such as wiretapping and photography. As important records became digitized, Westin argued that personal data was becoming too accessible and that a person should have complete jurisdiction over their data, laying the foundation for the modern discussion of privacy.^[91]

New technologies can also create new ways to gather private information. In 2001, the legal case Kyllo v. United States (533 U.S. 27) determined that the use of thermal imaging devices that can reveal previously unknown information without a warrant constitutes a violation of privacy. In 2019, after developing a corporate rivalry in competing voice-recognition software, Apple and Amazon required employees to listen to intimate moments and faithfully transcribe the contents.^[92]

Article 12 of the Universal Declaration of Human Rights provides that "No one shall be subjected to arbitrary interference with his privacy, family, home or correspondence, nor to attacks upon his honour and reputation."^[8] Article 17 of the International Covenant on Civil and Political Rights gives the guarantee binding force, prohibiting "arbitrary or unlawful interference" with privacy.^[9] In 2013 the General Assembly affirmed that the rights people have offline must also be protected online, including the right to privacy;^[93] the Human Rights Council subsequently created the mandate of Special Rapporteur on the right to privacy.^[94]

Article 8 of the European Convention on Human Rights guarantees "the right to respect for [one's] private and family life, [one's] home and [one's] correspondence", subject to interferences that are in accordance with the law and necessary in a democratic society for specified purposes.^[10] The European Court of Human Rights has interpreted it broadly to cover, among other things, the retention of DNA profiles and the bulk interception of communications.^[95][96] The Charter of Fundamental Rights of the European Union distinguishes respect for private and family life (Article 7) from a separate right to the protection of personal data (Article 8).^[97]

Other regional frameworks include the APEC Privacy Framework of the Asia-Pacific Economic Cooperation, endorsed in 2004,^[98] and the African Union's Convention on Cyber Security and Personal Data Protection (the Malabo Convention), adopted in 2014.^[99]

Comparative lawyers commonly distinguish between omnibus data protection laws, which apply general principles to the public and private sectors alike, and sectoral regimes, which regulate particular industries or types of data. The European Union exemplifies the first model and the United States the second.^[7][12] James Q. Whitman attributes the difference to "two Western cultures of privacy": a continental European tradition rooted in personal dignity and honour, and an American tradition centred on liberty against the state, particularly within the home.^[12] A related policy debate opposes market-based approaches, which rely on notice and individual choice, to consumer-protection approaches, which doubt that individuals have the time or expertise to make informed choices; empirical studies have found, for example, that many online privacy policies demand a reading level beyond that of much of the population.^[100]

The relationship between police powers and privacy has been a central subject of constitutional litigation, particularly as new technologies have enabled forms of monitoring that do not involve physical entry. In Kyllo v. United States (2001), the United States Supreme Court held that using a thermal imaging device to detect heat inside a home was a search requiring a warrant.^[101] In United States v. Jones (2012), the Court unanimously held that attaching a GPS tracker to a suspect's vehicle and monitoring its movements for 28 days was a search under the Fourth Amendment; the majority relied on the physical trespass involved, while five Justices indicated in concurring opinions that long-term location monitoring would infringe a reasonable expectation of privacy in any event.^[102] The Court did not decide whether a warrant was required, because the government had not argued that the search was reasonable without one.^[102]

The European Court of Human Rights reached a different result on comparable facts in Uzun v. Germany (2010). It held that GPS surveillance of a suspect in a series of bomb attacks, lasting about three months, interfered with his private life under Article 8, but that the interference had a sufficient legal basis and was proportionate given the gravity of the offences under investigation; it found no violation.^[103] The Court regarded GPS tracking as interfering less with private life than visual or acoustic surveillance or telephone interception.^[104]

In Riley v. California (2014) the United States Supreme Court unanimously held that police generally may not search the digital contents of a mobile phone seized at arrest without a warrant, observing that modern phones hold "the privacies of life".^[105] In Carpenter v. United States (2018) a majority of five to four held that obtaining historical cell-site location records from a mobile operator is a search that generally requires a warrant, limiting the "third-party doctrine" under which information voluntarily disclosed to businesses had been treated as unprotected.^[106]

Bulk surveillance by intelligence agencies has raised analogous questions. Following the Snowden disclosures, the United States Court of Appeals for the Second Circuit held in 2015 that the NSA's bulk collection of telephone records exceeded its statutory authority, and Congress ended the programme in its existing form through the USA Freedom Act later that year.^[107] In Big Brother Watch v United Kingdom (2021), the Grand Chamber of the European Court of Human Rights accepted that bulk interception regimes are not in themselves incompatible with the Convention, but found that the British regime lacked adequate "end-to-end safeguards" and violated Article 8.^[96]

In the context of harming privacy, information collection means gathering whatever information can be obtained by doing something to obtain it.^[150] Examples include surveillance and interrogation.^[150] Another example is how consumers and marketers also collect information in the business context through facial recognition which has recently caused a concern for things such as privacy. There is currently research being done related to this topic.^[151]

Companies like Google and Meta collect vast amounts of personal data from their users through various services and platforms. This data includes browsing habits, search history, location information, and even personal communications. These companies then analyse and aggregate this data to create detailed user profiles, which are sold to advertisers and other third parties. This practice is often done without explicit user consent, leading to an invasion of privacy as individuals have little control over how their information is used. The sale of personal data can result in targeted advertising, manipulation, and even potential security risks, as sensitive information can be exploited by malicious actors. This commercial exploitation of personal data undermines user trust and raises significant ethical and legal concerns regarding data protection and privacy rights.^[152]

It can happen that privacy is not harmed when information is available, but that the harm can come when that information is collected as a set, then processed together in such a way that the collective reporting of pieces of information encroaches on privacy.^[153] Actions in this category which can lessen privacy include the following:^[153]

1. data aggregation, which is connecting many related but unconnected pieces of information
2. identification, which can mean breaking the de-identification of items of data by putting it through a de-anonymization process, thus making facts which were intended to not name particular people to become associated with those people
3. insecurity, such as lack of data security, which includes when an organization is supposed to be responsible for protecting data instead suffers a data breach which harms the people whose data it held
4. secondary use, which is when people agree to share their data for a certain purpose, but then the data is used in ways without the data donors' informed consent
5. exclusion, which is the use of a person's data without any attempt to give the person an opportunity to manage the data or participate in its usage

Count not him among your friends who will retail your privacies to the world.

Information dissemination is an attack on privacy when information which was shared in confidence is shared or threatened to be shared in a way that harms the subject of the information.^[153] There are various examples of this. Breach of confidentiality is when one entity promises to keep a person's information private, then breaks that promise.^[153] Disclosure is making information about a person more accessible in a way that harms the subject of the information, regardless of how the information was collected or the intent of making it available.^[153] Exposure is a special type of disclosure in which the information disclosed is emotional to the subject or taboo to share, such as revealing their private life experiences, their nudity, or perhaps private body functions.^[153] Increased accessibility means advertising the availability of information without actually distributing it, as in the case of doxxing.^[153] Blackmail is making a threat to share information, perhaps as part of an effort to coerce someone.^[153] Appropriation is an attack on the personhood of someone, and can include using the value of someone's reputation or likeness to advance interests which are not those of the person being appropriated.^[153] Distortion is the creation of misleading information or lies about a person.^[153]

Invasion of privacy, a subset of expectation of privacy, is a different concept from the collecting, aggregating, and disseminating information because those three are a misuse of available data, whereas invasion is an attack on the right of individuals to keep personal secrets.^[153] An invasion is an attack in which information, whether intended to be public or not, is captured in a way that insults the personal dignity and right to private space of the person whose data is taken.^[153]

Invasion may further distinguished into two branches. An intrusion is any unwanted entry into a person's private personal space and solitude for any reason, regardless of whether data is taken during that breach of space.^[153] Decisional interference is when an entity somehow injects itself into the personal decision-making process of another person, perhaps to influence that person's private decisions but in any case doing so in a way that disrupts the private personal thoughts that a person has.^[153]

In 2019, contract workers for Apple and Amazon reported being forced to continue listening to "intimate moments" captured on the companies' smart speakers in order to improve the quality of their automated speech recognition software.^[92]

Several online social network sites (OSNs) are among the top 10 most visited websites globally. Facebook for example, as of August 2015, was the largest social-networking site, with nearly 2.7 billion^[165] members, who upload over 4.75 billion pieces of content daily. While Twitter is significantly smaller with 316 million registered users, the US Library of Congress recently announced that it will be acquiring and permanently storing the entire archive of public Twitter posts since 2006.^[157]

A review and evaluation of scholarly work regarding the current state of the value of individuals' privacy of online social networking show the following results: "first, adults seem to be more concerned about potential privacy threats than younger users; second, policy makers should be alarmed by a large part of users who underestimate risks of their information privacy on OSNs; third, in the case of using OSNs and its services, traditional one-dimensional privacy approaches fall short".^[166] This is exacerbated by deanonymization research indicating that personal traits such as sexual orientation, race, religious and political views, personality, or intelligence can be inferred based on a wide variety of digital footprints, such as samples of text, browsing logs, or Facebook Likes.^[167]

Intrusions of social media privacy are known to affect employment in the United States. Microsoft reports that 75 percent of U.S. recruiters and human-resource professionals now do online research about candidates, often using information provided by search engines, social-networking sites, photo/video-sharing sites, personal web sites and blogs, and Twitter. They also report that 70 percent of U.S. recruiters have rejected candidates based on internet information. This has created a need by many candidates to control various online privacy settings in addition to controlling their online reputations, the conjunction of which has led to legal suits against both social media sites and US employers.^[157]

Increasingly, mobile devices facilitate location tracking. This creates user privacy problems. A user's location and preferences constitute personal information, and their improper use violates that user's privacy. A recent MIT study by de Montjoye et al. showed that four spatio-temporal points constituting approximate places and times are enough to uniquely identify 95% of 1.5M people in a mobility database. The study further shows that these constraints hold even when the resolution of the dataset is low. Therefore, even coarse or blurred datasets confer little privacy protection.^[178]

Several methods to protect user privacy in location-based services have been proposed, including the use of anonymizing servers and blurring of information. Methods to quantify privacy have also been proposed, to calculate the equilibrium between the benefit of obtaining accurate location information and the risks of breaching an individual's privacy.^[179]

The Internet has become a major advertising medium; digital advertising accounted for roughly half of global advertising expenditure in 2019.^[185] Although websites can sell advertising space without tracking users, for example through contextual advertising, advertising intermediaries such as Facebook and Google have promoted behavioural advertising, supplying code that website owners embed to track visitors through HTTP cookies and similar techniques. Tracking data are also traded among third parties as part of the mass surveillance industry, and with the spread of smartphones, software development kits from data brokers have been embedded in mobile applications, contributing to a digital advertising industry worth some US$350 billion.^[186]

Privacy scandals such as the Facebook–Cambridge Analytica data scandal, in which a political consultancy obtained data on Facebook users through a third-party application, made digital privacy a central concern for many users and formed part of the conduct addressed by the Federal Trade Commission's 2019 penalty.^[186][140] In 2021 Apple began requiring applications to ask users' permission before tracking them across other companies' applications, a change that reshaped the mobile advertising market;^[186] competition lawyers have argued that the policy may also entrench Apple's own position, and it became the subject of complaints to competition authorities in France and Germany.^[187] Google proposed to replace third-party cookies with "Federated Learning of Cohorts" (FLoC), which grouped users by browsing interests and which Google presented as less harmful to privacy. Critics argued that it would itself facilitate fingerprinting and discrimination, and the proposal attracted regulatory scrutiny; in 2022 Google replaced it with a "Topics" interface.^{[188][189][190][191]}

The ability to search for and compile information about individuals online has expanded dramatically. Directly observed behaviour, such as browsing logs, search queries or the contents of a public Facebook profile, can be processed automatically to infer secondary information about a person, such as sexual orientation, political and religious views, ethnicity, substance use, intelligence and personality.^[192] Communications metadata, information about who communicated with whom, when, where and for how long, as distinct from the content of the communication, can be similarly revealing. A study of telephone metadata contributed by volunteers found that it allowed researchers to infer sensitive information, including medical conditions, and to re-identify individuals with relative ease.^[193] Such findings undermine the distinction between "personal" and "anonymous" data, and between content and metadata, on which many legal regimes, including data-retention laws, have relied.^[178][125]

The "privacy paradox" refers to the observed discrepancy between people's stated concern for privacy and their apparently careless disclosure of personal information, particularly online.^[194] While this term was coined as early as 1998,^[195] it was not used in its current popular sense until the year 2000.^[196][197]

Users of applications generally have little knowledge about their personal data usage. When deciding which app to download, users are often unable to effectively interpret the information provided by app providers regarding the collection and use of personal data.^[198] Susan B. Barnes used the term in 2006 to describe young people's extensive self-disclosure on social networking sites despite their expressed concerns.^[199] The evidence is mixed. Some studies have found little relationship between concern and behaviour;^[200] however a meta-analysis of 166 studies found a small but significant relationship between privacy concerns and both information sharing and the use of protective measures,^[201] a structural equation modelling on online survey with 661 respondents at times even quite strong—correlation between privacy concerns and information-sharing behaviour,^[202] and a systematic review concluded that the paradox is better understood as a set of distinct phenomena than as a general law.^[203]

Proposed explanations include limited awareness of risks and of the audiences to which information is exposed,^[175] the cognitive burden of evaluating complex privacy notices and permissions,^[204] and the design of services that make disclosure easy and protection difficult.^[205] Others question whether the behaviour is paradoxical at all, arguing that people disclose information because participation in contemporary social and economic life requires it, and that the term obscures the structural conditions under which choices are made.^[14]

Mobile applications in particular are often designed to prompt users to make rapid and automatic decisions without assessing risk factors. Protection measures against these unconscious mechanisms are often difficult to access while downloading and installing apps. Even with mechanisms in place to protect user privacy, users may not have the knowledge or experience to enable these mechanisms. When downloading and installing applications, safeguards against these unconscious mechanisms are often difficult to access. Even where mechanisms to protect user privacy are in place, users may lack the relevant knowledge or experience to activate them.^[204]

The "privacy calculus" model holds that disclosure decisions reflect a weighing of perceived risks against expected benefits.^[206][207] The model has been extended to electronic commerce, where trust and perceived benefits were found to offset privacy concerns in decisions to transact online.^[208] Critics note that the model assumes a degree of information and rationality that users frequently lack, and that it may legitimise practices in which privacy is traded for small or illusory benefits.^[205]

However, the relationship between concerns and behaviour is likely only small, and there are several arguments that can explain why that is the case. According to the attitude-behaviour gap, attitudes and behaviors are in general and in most cases not closely related.^[209] A main explanation for the partial mismatch in the context of privacy specifically is that users lack awareness of the risks and the degree of protection.^[175] Users may underestimate the harm of disclosing information online.^[14] On the other hand, some researchers argue that the mismatch comes from lack of technology literacy and from the design of sites.^[210] For example, users may not know how to change their default settings even though they care about their privacy. Psychologists Sonja Utz and Nicole C. Krämer particularly pointed out that the privacy paradox can occur when users must trade-off between their privacy concerns and impression management.^[211]

The willingness to incur a privacy risk is suspected to be driven by a complex array of factors including risk attitudes, personal value for private information, and general attitudes to privacy (which are typically measured using surveys).^[212] One experiment aiming to determine the monetary value of several types of personal information indicated relatively low evaluations of personal information.^[205] Providing personal data does not only regard monetary value, but also increased ease of use in voluntary interactions in government processes.^[213] Despite claims that ascertaining the value of data requires a "stock-market for personal information",^[214] surveillance capitalism and the mass surveillance industry regularly place price tags on this form of data as it is shared between corporations and governments.

Users are not always given the tools to live up to their professed privacy concerns, and they are sometimes willing to trade private information for convenience, functionality, or financial gain, even when the gains are very small.^[215] One study suggests that people think their browser history is worth the equivalent of a cheap meal.^[216] Another finds that attitudes to privacy risk do not appear to depend on whether it is already under threat or not.^[212] The methodology of user empowerment describes how to provide users with sufficient context to make privacy-informed decisions.

It is suggested by Andréa Belliger and David J. Krieger that the privacy paradox should not be considered a paradox, but more of a privacy dilemma, for services that cannot exist without the user sharing private data.^[216] However, the general public is typically not given the choice whether to share private data or not,^[213][184] making it difficult to verify any claim that a service truly cannot exist without sharing private data.

Lack of privacy in public spaces, caused by overcrowding, increases health issues in animals, including heart disease and high blood pressure. Also, the stress from overcrowding is connected to an increase in infant mortality rates and maternal stress. The lack of privacy that comes with overcrowding is connected to other issues in animals, which causes their relationships with others to diminish. How they present themselves to others of their species is a necessity in their life, and overcrowding causes the relationships to become disordered.^[217]

Some philosophers have argued that non-human animals, too, have interests in privacy. Angie Pepper contends that animals kept in zoos are wronged by constant exposure to observation, because it deprives them of control over how and when they are seen by others.^[218] The naturalist David Attenborough suggested in 2016 that zoos should allow visitors to view gorillas through peepholes rather than glass panels because the animals "value their privacy".^[219] Studies of the "visitor effect" have reported that the presence of human audiences can be associated with changes in behaviour, including increased aggression and reduced social interaction, in a number of primate species.^[220]

Encryption protects the confidentiality of communications and stored data. End-to-end encryption, in which only the communicating parties hold the keys, is now widely used in messaging services; proposals to require "exceptional access" for law enforcement have been criticised by security researchers on the ground that any such mechanism would create vulnerabilities exploitable by others.^[221] Anonymity networks such as Tor route traffic through several relays so that no single relay can link a user to the destination of his or her communications.^[222] Differential privacy provides a mathematical guarantee that the output of a statistical analysis reveals little about any individual in the dataset, and has been adopted by statistical agencies and technology companies.^[223]

"Privacy by design", a concept developed by the Ontario Information and Privacy Commissioner Ann Cavoukian, holds that privacy should be built into systems as a default setting rather than added afterwards.^[224] The GDPR gives the idea legal force by requiring controllers to implement "data protection by design and by default".^[225] Some underlying principles of this concept imply the proactive protections, anticipating privacy-invasive scenarios and defensing properly against them.^[226]

Individuals can reduce their exposure by limiting what they disclose, adjusting privacy settings and using protective tools, but researchers have stressed the limits of individual self-help where services are designed to encourage disclosure and where consent processes are complex.^[194][14] Civil-society organisations such as the Electronic Frontier Foundation and Privacy International therefore combine technical advocacy with litigation and campaigns for legal reform.