Privacy-Invading Technologies and Privacy by Design: Safeguarding Privacy, Liberty and Security in the 21st Century (Information Technology and Law Series Book 25)

"Privacy-invading technologies (PITs) such as Body scanners; Public space CCTV microphones; Public space CCTV loudspeakers and Human-implantable microchips (RFID implants/GPS implants) are dealt with in this book. The book shows how and why laws that regulate the design and development of privacy-invading technologies (PITs) may more effectively ensure the protection of privacy than laws that only regulate data controllers and the use of such technologies. The premise is supported and demonstrated through a discussion on these four specific PITs as case studies. In doing so, the book overall attempts to explain how laws/regulations that mandate the implementation of Privacy by Design (PBD) could potentially serve as a viable approach for collectively safeguarding privacy, liberty and security in the 21st Century. This book will be of interest to academic researchers, law practitioners, policy makers and technology researchers."--Publisher's description Preface 6 Contents 9 Acronyms 15 1 Introduction 18 Abstract 18 1.1 Escalating Technological Threats to Privacy 18 1.2 Core Theme of the Book 20 1.3 Rationale for the Case Studies Selection 22 1.4 Key Questions of Interest 24 1.5 Added Value 25 1.6 Structure and Overview of Chapters 26 References 27 Part I Principles of Privacy 28 2 Privacy, Liberty and Security 29 Abstract 29 2.1 Introduction 29 2.2 The Concept of Privacy 30 2.3 Privacy as an International Human Right 33 2.4 The Merits of Privacy 34 2.5 The Concept of Liberty 35 2.6 Privacy and Liberty 36 2.7 The Concept of Security 37 2.8 Privacy, Liberty and Security 38 References 41 3 Assessing the Adequacy of a Privacy Legal Framework 42 Abstract 42 3.1 Introduction 43 3.2 An Adequate Privacy Legal Framework? 43 3.3 International Consensus in Principle 44 3.4 Purpose and Meaning of Each Principle 46 3.4.1 ChoiceConsent 47 3.4.2 AccessParticipation 48 3.4.3 NoticeAwareness 49 3.4.4 IntegritySecurity 50 3.4.5 EnforcementRedress 51 3.4.6 Purpose Specification 52 3.4.7 Use Limitation 53 3.4.8 Proportionality 53 3.5 The EU Approach Versus the US Approach 54 3.6 Required Legal Characteristics 56 3.7 Basic Pre-measures 57 3.8 Legal Criteria Specific to the US and UK 58 3.9 Applying the Privacy Principles of the Twentieth Century to the Technological Advancements of the Twenty-First Century 58 References 59 Part II Technological Threats to Privacy 61 4 Privacy-Invading Technologies 62 Abstract 62 4.1 Introduction 62 4.2 A Definition of PITs 63 4.3 The Growing Deployment and Threat of PITs 63 4.4 PITs and the Human Body 64 4.5 PITs and the Public Space 66 4.6 Other PITs that May Pose Serious Threats to Privacy and Liberty 71 4.6.1 Neurotechnology 73 4.6.2 Unmanned Aerial Vehicles 74 4.6.3 Lexid 76 4.6.4 DNA Analysis 77 4.6.5 Automatic License Plate Recognition 81 References 81 5 Body Scanners: A Strip Search by Other Means? 83 Abstract 83 5.1 Introduction 84 5.2 A Strip Search by Other Means? 84 5.3 How Backscatter Body Scanners Work 86 5.4 Security Benefits and Drawbacks 87 5.5 The Plausibility of the Threat Posed by Plastic Guns, Ceramic Knives, and LiquidChemical and Plastic Explosives 89 5.6 Alternatives to Backscatter Body Scanners 91 5.7 Scope of Deployment in the US 96 5.8 Laws, Codes, Decisions and Other Legal Instruments of Special Relevance in the US 98 5.9 Deficiencies and Dilemmas of the US Legal Framework 103 5.10 Policy-Relevant Recommendations 111 5.10.1 Focus on Manufacturer-Level RegulationsLaws 111 5.10.2 Focus on User-Level RegulationsLaws 114 5.11 Manufacturer-Level or User-Level Regulation? 116 5.12 International Deployment, Developments and Responses 117 5.13 Concluding Remarks 120 References 121 6 Public Space CCTV Microphones and Loudspeakers: The Ears and Mouth of “Big Brother” 124 Abstract 124 6.1 Introduction 125 6.2 The Privacy-Intrusive Evolution of CCTV Surveillance Technology 125 6.3 The Ears and Mouth of “Big Brother” 127 6.3.1 The Ears (CCTV Microphones) 129 6.3.2 The Mouth (CCTV Loudspeakers) 131 6.4 Scope of Deployment in the UK 132 6.4.1 CCTV Microphones 132 6.4.2 CCTV Loudspeakers 133 6.5 Security Gains 136 6.5.1 CCTV Microphones 136 6.5.2 CCTV Loudspeakers 138 6.6 Alternatives to CCTV Microphones and Loudspeakers 139 6.6.1 Alternatives to CCTV Microphones 139 6.6.2 Alternatives to CCTV Loudspeakers 140 6.7 Laws, Codes, Decisions and other Legal Instruments of Special Relevance in the UK 141 6.7.1 CCTV Microphones 146 6.7.2 CCTV Loudspeakers 147 6.8 Deficiencies and Dilemmas of the UK Legal Framework 148 6.8.1 CCTV Microphones 148 6.8.2 CCTV Loudspeakers 155 6.9 Policy-Relevant Recommendations 157 6.9.1 CCTV Microphones 158 6.9.2 CCTV Loudspeakers 160 6.10 Concluding Remarks 165 References 165 7 Human-Implantable Microchips: Location-Awareness and the Dawn of an “Internet of Persons” 167 Abstract 167 7.1 Introduction 168 7.2 RFIDGPS Implants and the Technology Behind Them 170 7.2.1 RFID Implants 170 7.2.2 GPS Implants 172 7.3 Location-Awareness and the Dawn of an “Internet of Persons” 174 7.3.1 The Capabilities of HIMs 174 7.3.2 Location Information 178 7.3.3 Social and Privacy Implications 180 7.3.4 A Means of Control 181 7.3.5 An “Internet of Persons”: A Possible Dystopian Future? 182 7.3.6 Are We Nearly There? 188 7.4 Potential Security and Well-Being Benefits 190 7.5 Security Risks and Drawbacks 193 7.6 Scope of Deployment 197 7.6.1 Actual Deployment in the US 197 7.6.2 Potential Deployment 200 7.6.3 Actual and Potential International Deployment 208 7.7 Alternatives to HIMs 209 7.8 Laws, Codes, Decisions and Other Legal Instruments of Special Relevance in the US 211 7.8.1 Constitutionally Protected Rights 211 7.8.2 Federal Statutory Laws 211 7.8.3 Tort Law 214 7.8.4 Case Law 214 7.8.5 State Statutory Laws 216 7.8.6 Administrative Decisions 217 7.8.7 Standards, Guidelines and Self-regulations 218 7.9 Deficiencies and Dilemmas of the US Legal Framework 219 7.10 Policy-Relevant Recommendations 236 7.10.1 Consent 239 7.10.2 Proportionality 241 7.10.3 Purpose Specification 242 7.10.4 Use Limitation 245 7.10.5 Enforcement, Accountability and Redress 246 7.10.6 Access and Participation 248 7.10.7 Notice and Awareness 249 7.10.8 Security 251 7.10.9 Privacy Impact Assessment 252 7.10.10 Definitions 253 7.10.11 Constitutional and Case Law Considerations 254 7.10.12 The International Dimension 255 7.11 Concluding Remarks 256 References 256 8 New Privacy Threats, Old Legal Approaches: Conclusions of Part II 260 Abstract 260 8.1 The New Threats to Privacy 260 8.2 Beyond Privacy and Data Protection 262 8.3 Deficiencies of the Existing Privacy Legal Frameworks 264 Reference 265 Part III New Approach to Protecting Privacy 266 9 The Value, Role and Challenges of Privacy by Design 267 Abstract 267 9.1 Introduction 268 9.2 Concept, Theory and Origins of PBD 268 9.3 PBD Methodology 274 9.4 PBD Solutions for: Body Scanners, HIMs, CCTV Microphones and Loudspeakers 276 9.5 PBD Versus PETs 278 9.6 PBD in the Current US and UKEU Legal Frameworks 280 9.6.1 US Legal Framework 280 9.6.2 EU Legal Framework 281 9.7 Growing Widespread Recognition 282 9.8 Potentially Growing Application 286 9.9 A Unique Selling Point and Source of Value Creation 287 9.10 The Growing Lack of Trust 289 9.11 Potential Criticism 290 9.12 Practical Challenges of Implementing PBD 291 9.13 Concluding Remarks 293 References 294 Part IV Research Results 297 10 Conclusions and Policy Implications 298 Abstract 298 10.1 Introduction 299 10.2 Keeping Up with the Technology 299 10.3 PBD: Critical Combination of Technology and Law 300 10.4 Not a Substitute for Law 306 10.5 Flexibility vs. Specificity 307 10.6 Radical Changes for Radical Capabilities 308 10.7 Implementation, Enforcement, Monitoring and Evaluation 313 10.8 Accountability, Sanctions and Recalls 314 10.9 Certified Privacy-Friendly 316 10.10 Designing for Privacy 318 10.11 Adequate PBD Solutions 319 10.12 Avoiding Overregulation 320 10.13 Furthering Deployment and Innovation 323 10.14 Safeguarding Privacy, Liberty and Security 325 10.15 Using Privacy-Friendly Alternatives 327 10.16 Countering Potential Criticism of PBD 327 10.17 Overcoming Some of the Challenges 328 10.18 Engaging Relevant Stakeholders 329 10.19 Not a Panacea: The Limitations and Constraints of PBD 330 10.20 Final Conclusions 335 References 336 Appendix A A3-Report 338 Appendix B Summary Table 339 Index 342 Challenged by rapidly developing privacy-invading technologies (PITs), this book provides a convincing set of potential policy recommendations and practical solutions for safeguarding both privacy and security. It shows that benefits such as public security do not necessarily come at the expense of privacy and liberty overall. Backed up by comprehensive study of four specific PITs -- Body scanners; Public space CCTV microphones; Public space CCTV loudspeakers; and Human-implantable microchips (RFID implants/GPS implants) -- the author shows how laws that regulate the design and development of PITs may more effectively protect privacy than laws that only regulate data controllers and the use of such technologies. New rules and regulations should therefore incorporate fundamental privacy principles through what is known as 'Privacy by Design'. The numerous sources explored by the author provide a workable overview of the positions of academia, industry, government and relevant international organizations and NGOs. Demetrius Klitou has a Ph. D. in Law from Leiden University. He carried out his research under the auspices of the Centre for Law in the Information Society (eLaw@Leiden), Leiden, The Netherlands. He is currently serving as a consultant, specialized in the non-technological aspects of technology policies, innovation activities/policies, policy development processes and project management Front Matter....Pages i-xix Introduction....Pages 1-10 Front Matter....Pages 11-11 Privacy, Liberty and Security....Pages 13-25 Assessing the Adequacy of a Privacy Legal Framework....Pages 27-45 Front Matter....Pages 47-47 Privacy-Invading Technologies....Pages 49-69 Body Scanners: A Strip Search by Other Means?....Pages 71-111 Public Space CCTV Microphones and Loudspeakers: The Ears and Mouth of “Big Brother”....Pages 113-155 Human-Implantable Microchips: Location-Awareness and the Dawn of an “Internet of Persons”....Pages 157-249 New Privacy Threats, Old Legal Approaches: Conclusions of Part II....Pages 251-256 Front Matter....Pages 257-257 The Value, Role and Challenges of Privacy by Design....Pages 259-288 Front Matter....Pages 289-289 Conclusions and Policy Implications....Pages 291-330 Back Matter....Pages 331-338