A growing chorus of scholars, privacy professionals, and policymakers think that individual rights of control—rights to access, correct, and delete data, as well as rights to opt out of tracking and to have humans in the loop of automated decision-making—are effective means of regulating the data-extractive economy. Indeed, the argument for individual rights is so pervasive and hegemonic that individual rights form the backbone of every piece of privacy legislation introduced in the United States in the last several years.
This Essay offers a comprehensive critique of that argument. Individual rights fail to address the social harms of the information economy. They shift the burden of privacy regulation to individuals mostly incapable of exercising that responsibility while simultaneously giving technology companies the power to define the practical reach of the law. Individual rights cannot place limits on technology companies when the law has already immunized their business models from accountability. Individual rights also set the wrong norms: they normalize the notion that privacy should be an individual responsibility rather than a core obligation of corporate actors. And the history of using individual rights to solve structural problems proves how rights crowd out necessary reform. If individual rights of control are what pass for privacy legislation in the United States, the problems of informational capitalism will get worse, not better.
Author
Professor of Law and Computer Science, Northeastern University; Faculty Director, Center for Law, Information, and Creativity, Northeastern University School of Law; Affiliated Fellow, Information Society Project at Yale Law School. Ph.D., Columbia University; J.D., Harvard Law School. Special thanks to Danielle Citron, Julie Cohen, Woodrow Hartzog, Margot Kaminski, Neil Richards, and Salome Viljoen. I have the individual right to make the mistakes in this Essay. But I also have the obligation to take responsibility for them.
Copyright 2022 by Ari Ezra Waldman
Cite as: Ari Ezra Waldman, Privacy’s Rights Trap, 117 Nw. U. L. Rev. Online 88 (2022), https://scholarlycommons.law.northwestern.edu/cgi/viewcontent.cgi?article=1326&context=nulr_online.