Abstract

http://ssrn.com/abstract=699701
 
 

Citations (2)



 
 

Footnotes (148)



 


 



A Model Regime of Privacy Protection (Version 2.0)


Daniel J. Solove


George Washington University Law School

Chris Jay Hoofnagle


University of California, Berkeley - School of Law, Berkeley Center for Law & Technology

April 5, 2005

GWU Law School Public Law Research Paper No. 132; GWU Legal Studies Research Paper No. 132

Abstract:     
This version incorporates and responds to the many comments that we received to Version 1.1, which we released on March 10, 2005.

Privacy protection in the United States has often been criticized, but critics have too infrequently suggested specific proposals for reform. Recently, there has been significant legislative interest at both the federal and state levels in addressing the privacy of personal information. This was sparked when ChoicePoint, one of the largest data brokers in the United States with records on almost every adult American citizen, sold data on about 145,000 people to fraudulent businesses set up by identity thieves. Other companies announced security breaches, including LexisNexis, from which personal information about 32,000 people was improperly accessed. Senator Schumer criticized Westlaw for making available to certain subscribers personal information including Social Security Numbers (SSNs).

In the aftermath of the ChoicePoint debacle and other major information security breaches, both of us have been asked by Congressional legislative staffers, state legislative policymakers, journalists, academics, and others about what specifically should be done to better regulate information privacy. In response to these questions, we believe that it is imperative to have a discussion of concrete legislative solutions to privacy problems.

What appears below is our attempt at such an endeavor. Privacy experts have long suggested that information collection be consistent with Fair Information Practices. This Model Regime incorporates many of those practices and applies them specifically to the context of commercial data brokers such as ChoicePoint. We hope that this will provide useful guidance to legislators and policymakers in crafting laws and regulations. We also intend this to be a work-in-progress in which we collaborate with others. We have welcomed input from other academics, policymakers, journalists, and experts as well as from the industries and businesses that will be subject to the regulations we propose. We have incorporated criticisms and constructive suggestions, and we will continue to update this Model Regime to include the comments we find most helpful and illuminating.

Notice, Consent, Control, and Access

1. Universal Notice
2. Meaningful Informed Consent
3. One-Step Exercise of Rights
4. Individual Credit Management
5. Access to and Accuracy of Personal Information

Security of Personal Information

6. Secure Identification
7. Disclosure of Security Breaches

Business Access to and Use of Personal Information

8. Social Security Number Use Limitation
9. Access and Use Restrictions for Public Records
10. Curbing Excessive Uses of Background Checks
11. Private Investigators

Government Access to and Use of Personal Data

12. Limiting Government Access to Business and Financial Records
13. Government Data Mining
14. Control of Government Maintenance of Personal Information

Privacy Innovation and Enforcement

15. Preserving the Innovative Role of the States
16. Effective Enforcement of Privacy Rights

Commentary

Number of Pages in PDF File: 36

Keywords: Privacy, legislation, regulation, ChoicePoint, information, security, data

JEL Classification: K10, K20

working papers series





Download This Paper

Date posted: April 6, 2005  

Suggested Citation

Solove, Daniel J. and Hoofnagle, Chris Jay, A Model Regime of Privacy Protection (Version 2.0) (April 5, 2005). GWU Law School Public Law Research Paper No. 132; GWU Legal Studies Research Paper No. 132. Available at SSRN: http://ssrn.com/abstract=699701 or http://dx.doi.org/10.2139/ssrn.699701

Contact Information

Daniel J. Solove (Contact Author)
George Washington University Law School ( email )
2000 H Street, N.W.
Washington, DC 20052
United States
202-994-9514 (Phone)
HOME PAGE: http://www.law.gwu.edu/facweb/dsolove/
Chris Jay Hoofnagle
University of California, Berkeley - School of Law, Berkeley Center for Law & Technology ( email )
344 Boalt Hall
Berkeley, CA 94720-7200
United States
510-643-0213 (Phone)
HOME PAGE: http://hoofnagle.berkeley.edu
Feedback to SSRN


Paper statistics
Abstract Views: 33,838
Downloads: 2,080
Download Rank: 3,314
Citations:  2
Footnotes:  148

© 2014 Social Science Electronic Publishing, Inc. All Rights Reserved.  FAQ   Terms of Use   Privacy Policy   Copyright   Contact Us
This page was processed by apollo4 in 0.890 seconds