Digital Privacy

This paper explores how growing up with financial privilege influences personal development, digital identity construction, and social mobility. By drawing from both academic literature and personal experiences in Waukesha, Wisconsin, and Chattanooga, Tennessee, the study examines how wealth impacts self-presentation online, the ability to rebrand and reinvent, and risk-taking in career and personal identity. The findings suggest that financial security provides individuals with greater control over their digital narratives, allowing for strategic identity management and enhanced social capital. This research contributes to the broader discussion on socioeconomic privilege, personal branding, and digital self-construction in the modern era.

As generative AI (GenAI) technologies proliferate, ensuring trust and transparency in digital ecosystems becomes increasingly critical, particularly within democratic frameworks. This article examines decentralized Web3 mechanisms—blockchain, decentralized autonomous organizations (DAOs), and data cooperatives—as foundational tools for enhancing trust in GenAI. These mechanisms are analyzed within the framework of the EU’s AI Act and the Draghi Report, focusing on their potential to support content authenticity, community-driven verification, and data sovereignty. Based on a systematic policy analysis, this article proposes a multi-layered framework to mitigate the risks of AI-generated misinformation. Specifically, as a result of this analysis, it identifies and evaluates seven detection techniques of trust stemming from the action research conducted in the Horizon Europe Lighthouse project called ENFIELD: (i) federated learning for decentralized AI detection, (ii) blockchain-based provenance tracking, (iii) zero-knowledge proofs for content authentication, (iv) DAOs for crowdsourced verification, (v) AI-powered digital watermarking, (vi) explainable AI (XAI) for content detection, and (vii) privacy-preserving machine learning (PPML). By leveraging these approaches, the framework strengthens AI governance through peer-to-peer (P2P) structures while addressing the socio-political challenges of AI-driven misinformation. Ultimately, this research contributes to the development of resilient democratic systems in an era of increasing technopolitical polarization.

The Internet has enabled malware to progress to a much broader distribution model and is experiencing a huge explosion of individual threats. There are automated tools that find vulnerable sites, attack them, and turn them into distribution sites. As commerce and the business of daily living migrate online, attacks to leverage information assets for ill-gotten benefit have increased dramatically. Security professionals are seeing more sophisticated and innovative profit models on par with business models seen in the legitimate world. Often a machine's infection signature is unique and completely different from any other, making effective defense all the more difficult to achieve. Some studies have shown that 12 percent of all PCs on the Internet are malware infected, while the infection rate of the consumer-facing PC sector is closer to 25 percent. This difference reflects successful security efforts by IT professionals to secure the nonconsumer PC sector and shows that there are mechanisms to reduce overall infection risk. Though not intended to replace the in-depth discussion of malware defense by the ACM CTO Roundtable, the following overview should help readers understand the basic scope of the threats in play today and provide a framework to address them and minimize the overall risk of compromise. Many types of malware and payloads exist, but two types in particular cause concern in the consumer and enterprise space. Both capture personal information; some are opportunistic in nature, do not target any specific individual, and are designed to go after anyone who happens to be ensnared, while others focus on specific "high-value" targets. By far the majority of common security issues for end users are the former, and these types of threats typically try to make money by stealing information or resources from the end-user machine. Standard practices such as patching, an up-todate security suite, and strong passwords go a long way toward protecting against these threats.

The incredible advances of the digital age have completely changed our lives, from the way we communicate and work to the way we shop and learn. However, as our reliance on technology grows, so does the necessity to protect the private data that passes through our digital ecosystems. Our connected society has become dependent on data more and more, yet this rising reliance raises serious questions about security, privacy, and the moral use of information. With an emphasis on Indian legal frameworks, this book offers a thorough grasp of data protection and privacy regulations. It also makes general comparisons with laws from other countries. India is blazing its own trail in the global regulatory landscape by enacting unique laws targeted at protecting personal information. India’s dedication to resolving privacy in a society that is becoming more and more digital is reflected in the Personal Data Protection Bill and new legal frameworks. Notwithstanding, the legal terrain persists in its complexity, posing a multitude of obstacles for individuals, corporations, and policymakers to attain compliance, mitigate risks, and preserve privacy rights. International laws that set the bar for privacy standards globally, like the California Consumer Privacy Act (CCPA) in the US and the General Data Protection Regulation (GDPR) in Europe, emphasize the importance of data protection. In light of this, India’s regulatory strategy is changing, making it essential to comprehend how national laws relate to and deviate from international standards. For stakeholders in various industries, navigating this complex web of international, national, and regional rules is essential. In this book, we not only examine the legislative foundations for privacy and data protection in India, but we also look at the real world applications for businesses, governments, and private citizens. Comprehensive analyses are conducted on important ideas such data ownership, consent management, cybersecurity protocols, cross border data transfers, and data subjects’ rights. We also talk about how ethics, technology, and law interact, highlighting the problems that come up when innovation takes precedence over regulation. This book, written by Amaresh Patel and Dr. Radha Ranjan and published by Into Legal World, is intended for legal professionals, compliance officials, company executives, and anybody else with an interest in learning about privacy and data protection in the Indian setting. Our objective is to provide understandable and helpful information while placing India’s developing legal system inside a larger international context. Our goal is to give readers the skills and information they need to succeed in this ever-changing industry while also helping them understand the importance of privacy in the digital era. It is critical to acknowledge the responsibility that comes with safeguarding personal data as India embraces new technological breakthroughs and takes on new problems. This book is a step in realizing that obligation and making a positive impact in creating a more courteous, safe, and secure digital world where people’s right to privacy are respected.

Shared under a CC-BY-NC-ND 4.0 (Creative Commons By Attribution Non Commercial No Derivatives 4.0 International) license. Presented at Jan 28, 2025 SoDa | ASA Symposium: In Celebration of Privacy Week. Abstract Generative AI and large language models are unleashing unprecedented capabilities in data processing, but they also raise serious questions about protecting the individuals and organizations whose data fuel these models. In this talk, I will bridge ethical frameworks from statistics, computing, and mathematics to illustrate how statisticians can help ensure privacy is more than a buzzword. As large language models (LLMs) blur the boundaries between data, dialogue, and personal expression, statisticians play a pivotal role in shaping responsible AI practices. This talk explores how principles from statistics, computing, and mathematics can help safeguard privacy in language-based systems and cultivate deeper public trust. Rather than prescribing a one-size-fits-all formula, we will reflect on the key question: How can we balance transparency, accountability, and intellectual freedom in an environment where AI may inadvertently expose sensitive information? Drawing on ethical frameworks and real-world examples, we’ll highlight the potential for statisticians to steer LLM developments in ways that honor human autonomy, encourage fairness, and uphold the spirit of confidentiality—ultimately fostering more trustworthy AI. By combining methodological rigor with ethical deliberation, statisticians have a unique role to play in defending privacy norms, cultivating transparency, and embedding responsible AI practices across research and industry.

Imagine a bank in France. The bank uses AI to choose who gets a loan. After 5 years, the AI is so good that only 1 percent of its borrowers end up defaulting. At the same time, because it’s real AI, the bank has no idea how its lending decisions are being made.

An Eastern European man living in Paris keeps getting rejected by the AI. Under GDPR, he demands to know why he is being rejected. Simultaneously, he files suit for ethnic discrimination along with several other Eastern Europeans, who have also been rejected for loans by the same AI.

Giorni orsono un amico mi chiedeva conferma del fatto che per la liceità del trattamento delle categorie particolari di dati personali – ma il tema riguarda anche i dati “giudiziari” dell’articolo 10 – fosse effettivamente necessario individuare anche una specifica base giuridica, in aggiunta alla disciplina propria di tali tipologie di dati: cioè, adempiere alle prescrizioni dell’articolo 6, oltre che a quelle indicate negli articoli 9 e 10 del regolamento.

La richiesta di conferma mi veniva sollecitata in quanto altri interlocutori, intervistati sul punto, avrebbero espresso la tesi opposta della sufficienza degli articoli 9 e 10, come fonte (alternativa all’art. 6) per la disciplina della liceità dei trattamenti, rispettivamente, delle categorie particolari di dati personali e dei dati relativi a condanne penali e reati.

Già durante la vigenza della direttiva 95/46/CE ci si era posti il problema della relazione esistente tra i principi di legittimazione del trattamento e le regole per il trattamento di categorie particolari di dati personali; cioè tra quelle che, secondo l’attuale GDPR, sono le basi giuridiche dell’articolo 6 e le regole dell’articolo 9, in deroga al divieto di trattamento dei cosiddetti dati sensibili.

LGPD: responsabilidade de todos. Coordenação geral de Valéria Reani Rodrigues Garcia e Manuel David Rodrigues Masseno. Comissão de Direito à Privacidade e Proteção de Dados da Seção de Campinas da Ordem dos Advogados do Brasil, 2024. ISBN 978-65-984342-0-5.

Cybercrime has emerged as a critical threat to individuals, organizations, and governments worldwide, with Canadian agencies struggling to address the growing challenges effectively. A report by Canada's auditor general highlights significant gaps in the capacity and coordination of agencies such as the RCMP, the Communications Security Establishment (CSE), and the Canadian Radio-television and Telecommunications Commission (CRTC). These gaps include deficiencies in case tracking, staffing shortages, and fragmented reporting systems, which hinder comprehensive responses to cybercrime. While some high-priority cases receive adequate attention, systemic inefficiencies threaten Canada's ability to protect its citizens and infrastructure. The report underscores the urgent need for a unified cybercrime strategy and better inter-agency collaboration to mitigate the rising tide of cyber threats.

In the digital age, personal cybersecurity has become critical to safeguarding one's online presence. This self-assessment reflects on the author’s current cybersecurity practices, evaluating strengths and identifying areas for improvement. Key elements of digital safety, including password management, two-factor authentication, malware protection, and data privacy, are examined in detail. The author’s practices in managing devices, recognizing phishing attempts, and ensuring secure internet connections are also discussed. Additionally, the paper highlights the importance of continuous education and proactive strategies to mitigate digital threats. The findings emphasize the need for ongoing vigilance and a comprehensive approach to personal cybersecurity, with actionable steps for enhancing overall digital safety.

CBDCs create tension between the needs of individuals to have their privacy protected and the
needs of governments to monitor transactions (crimes, tax evasion, money laundering). Through
the exploration of the meaning of privacy and the CBDC ecosystem and architecture we posit
that cash-like privacy in digital currencies is not technically possible as ultimately the authors of
transactions are digitally findable. We explore several CBDC design models and advance that the
most appropriate model should enable what we refer to as “technical privacy”, in other words
a cryptographically layered CBDC where piercing of the digital veil could only occur by court
order. We conduct this examination through the lens of the eNaira, Nigeria’s CBDC, which,
despite legislatively enshrined privacy rights, has been programmed on software that can override
such rights and concentrate control. Finally, we offer 5 preliminary recommendations that any
government exploring CBDC initiatives should consider so that development principles of privacy
are respected and protected.

This paper questions the legitimacy of the term 'cash-like' privacy in relation to CBDCs. We offered, rather, the term 'technical privacy' because ultimately and despite technological layering all transactions and transacting parties leave a digital trail and are digitally findable.

At best, design models for CBDCs should ensure technical privacy allowing piercing of the technical veil only when the regulatory framework permits, by court order for example. This allows the various concerns regarding AML, tax evasion, fraud etc to be appeased, whilst still (at least on the surface) protecting citizens privacy when paying for goods with digital fiat.

The landmark case of Mohtarma Benazir Bhutto v. President of Pakistan  examined privacy within state surveillance, specifically phone call interception among public officials. Here, the Court broadened the definition of “home” to protect an individual’s privacy beyond literal home spaces, drawing from the US Supreme Court’s Katz v. United States ruling . Justice Saleem Akhtar emphasized that privacy extends beyond the home, warning that a violation of personal privacy also impedes freedom of speech, closely tying privacy to expression in the digital context. The Court’s decision integrated multiple constitutional rights with Article 14, underscoring privacy’s significance within fundamental rights. This case set an important precedent that was referenced in subsequent rulings, including Kh. Ahmad Tariq Raheem v. Federation of Pakistan.
In the Mohtarma Benazir Bhutto case, the Court deemed surveillance unconstitutional and contrary to Islamic teachings as outlined in Surah Al-Hujurat. Article 227 of the Constitution mandates that all laws align with Islamic principles, reinforcing that privacy violations breach not only constitutional but also religious principles, thus making any future encroachment unconstitutional under Article 227.

Digital Decentralization: Ethical Democracy via Blockchain and AI This work is licensed under the CC BY-NC-ND 4.0 public license. Dario de Oliveira Rodrigues (CC) 2024. VIDEO SERIES LEGAL DISCLAIMER This book is provided for informational purposes only and should not be construed as financial, legal, or professional advice. The references to projects and applications of blockchain technology and artificial intelligence merely illustrate the ideas and reflections presented and do not constitute an investment recommendation. The author declines any responsibility for losses or damages resulting from using the information and opinions in this book.

Our research aims to highlight and alleviate the complex tensions around online safety, privacy, and smartphone usage in families so that parents and teens can work together to better manage mobile privacy and security-related risks. We developed a mobile application ("app") for Community Oversight of Privacy and Security ("CO-oPS") and had parents and teens assess whether it would be applicable for use with their families. CO-oPS is an Android app that allows a group of users to co-monitor the apps installed on one another's devices and the privacy permissions granted to those apps. We conducted a study with 19 parent-teen (ages 13-17) pairs to understand how they currently managed mobile safety and app privacy within their family and then had them install, use, and evaluate the CO-oPS app. We found that both parents and teens gave little consideration to online safety and privacy before installing new apps or granting privacy permissions. When using CO-oPS,...

Intimate image abuse is a recent, endemic phenomenon which raises multiple legal issues and presents a significant challenge for the traditional institutions of law and criminal justice. The nature of this phenomenon requires considering the traditional complexities of regulating privacy, sexual offences, and cybercrimes, alongside the social and cultural issue of what may be considered ‘intimate’, ‘private’, or indeed ‘sexual’. Since the harm experienced by victims of intimate image abuse is particularly serious and involves disparate legal interests, criminal law has been invoked as one of the solutions, but it is unclear what its role and limits should be. The law’s approach should avoid any moralistic attitude, trying to achieve a balance between sexual autonomy and the protection of sexual privacy. At the same time, the needs of criminalization must be balanced with the traditional principles of criminal law. Criminalizing Intimate Image Abuse strives primarily to generate new conceptual and theoretical frameworks to address the legal responses to this phenomenon, by bringing together a number of scholars involved in the study of intimate image abuse over recent years. This volume compares the solutions developed in different legal systems. The perspective is mainly focused on the comparison between the Anglo-American criminalization model and that of continental Europe, but there are also overviews of the criminalization trends in Asian and Latin American countries. Once the criminalization of intimate image abuse, as well as its theoretical and practical limits, have been established, the analysis focuses on possible new legal strategies, complementary or alternative to traditional criminal justice, such as restorative justice. Finally, in order to achieve an effective safeguard for victim-survivors, the book deals with the role of Internet Service Providers and bystanders in preventing intimate image abuse.

מדוע יש לפקח על רשויות המדינה כשאלה בולשות אחרי הפעילות המקוונת שלנו;
כיצד ניתן לפקח על מעקב מקוון של גופי מודיעין ואכיפת חוק; מיהם האחראים
בישראל על פיקוח זה; האם המצב הקיים נותן מענה ראוי למאפיינים הייחודיים של
פעילות סיגינטית; האם ישנם מודלים עדכניים בדין הזר שרצוי להכיר וללמוד מהם?

בהמשך למחקר "רגולציה של מעקב מקוון בדין הישראלי ובדין המשווה", שתיאר את ההיבטים החסרים בדין הישראלי החל על פעילות מעקב מקוון של רשויות המדינה, ואת אלו שנדרש בהם תיקון והשלמה, מטרתו של המחקר המובא כאן היא לבחון את טיבו של הפיקוח בישראל על פעילות זו. המחקר סוקר את נקודות החולשה במערך הפיקוח
הישראלי על פעילות סיגינטית וממליץ על הקמת גוף ייעודי לפיקוח על פעילות
זו, בדומה לנעשה בדמוקרטיות אחרות.

In the periods of traditional media we saw the limited effects of television, newspaper or magazines. But with the new media, people began to have possibilities to interact with the others without being in the same place. This is a kind of revolution in the media history. Many people agree that the most important aspect of the new media is social media. For more than ten years, social sharing websites like Facebook, Twitter and Instagram have changed main perspectives of the persons and societies. Because social media is not only a simple media tool, but also it has powerful sophisticated aspects related to surveillance and consumption. Jeremy Bentham's conception of "panopticon prison" was developed by Foucault as an indicator of modern bureaucratic system. In the modern age, the panopticon has become an allegory for a loss of privacy, particularly with modern conveniences like the internet and evolving technology has given rise to even new forms of surveillance and the panopticon. So in this paper we will investigate how surveillance and consumption will become fluid on social media.

The advancement in Internet of Things (IoT) technology has been having a huge societal and economic impact, effectively changing the paradigms in doing business including the healthcare industry. While citizens now can enjoy the convenience brought up by healthcare IoT systems, such as wearable healthcare IoT devices, the privacy risks incurred by these systems and devices are not well understood, let alone adequately addressed. In this paper we systematically characterize the privacy risks in healthcare IoT systems, by considering a range of privacy attack vectors such as those that can be imposed by healthcare IoT device fingerprinting and semi-honest Internet Service Providers. Then, we leverage these characteristics to guide us in exploring countermeasures for mitigating privacy risks in healthcare IoT systems. We hope the present study will serve as a baseline for designing a systematic solution to protect citizen's privacy in healthcare IoT systems.

The growing trend of collecting data about individuals to track past actions and infer future attitudes and behaviors has fueled popular and scholarly interest in the erosion of privacy. Recent shifts in technologies around machine learning and artificial intelligence have intensified these concerns. This editorial introduces the articles in the special theme on digital resignation and privacy cynicism: concepts developed in the past decade to explain the growing powerlessness individuals feel in relation to their digital privacy even as they continue to experience consternation over the collection and use of their personal information. The papers in this special theme engage and extend existing research on these topics. The original articles and commentaries pose theoretical and practical questions related to the ways people confront the powerful institutional forces that increasingly shape many aspects of the information environment. They employ several methodologies and theoretical perspectives and extend the range of geographic, political, cultural, and institutional contexts in which privacy cynicism and digital resignation can be identified and examined. In addition to contextualizing these contributions, this editorial maps a range of related concepts including digital resignation, privacy cynicism, privacy apathy, surveillance realism, privacy fatigue, and privacy helplessness. It concludes by identifying key themes across the papers in this collection and provides directions for future research.

Artificial intelligence and the protection of personal data: methodological and procedural problems.

The constitutional challenges posed by AI systems implicate a range of rights and interests (from personal freedom, equality and non-discrimination, health protection, to the proper functioning of democratic institutions). At the core of all these issues lies the protection of personal data as a fundamental right, and at least two other fundamental values of general importance shared by all the Western constitutional tradition: individual identity and personal freedom. The aim of this paper is to summarise and analyse, in a comparative perspective, how the different strategies for the AI governance implemented by the European Union and by some key-US states affect these constitutional interests and are consistent with the goals they seek to achieve.

This book contains information obtained from authentic and highly regarded sources. Reprinted material is quoted with permission, and sources are indicated. A wide variety of references are listed. Reasonable efforts have been made to publish reliable data and information, but the author and the publisher cannot assume responsibility for the validity of all materials or for the consequences of their use.

The controversy on the border control system based on biometric information and deep learning in Incheon airport raised thorny questions on conflicts between public data utilization. This paper first lays out the detailed issues against the Korean discursive landscape of privacy and emerging technology policies. Then I will argue that the Ministry of Justice’s Korea Immigration Service, the Ministry of Science and ICT, and the Ministry of the Interior and Safety formulated and maintained conflicting policy principles. This paper also posits that the potential conflict exists between the policy for public data utilization toward intelligent information society and digital platform government on the one hand and the personal information protection policy that guarantees the right to informational self-determination on the other hand. This paper ends with an inquiry into possibilities of public data policy that resonates with the democratic principle that does not stop at the border and human rights policies for less discrimination.

PurposeBig data and analytics are being increasingly used by tourism and hospitality organisations (THOs) to provide insights and to inform critical business decisions. Particularly in times of crisis and uncertainty data analytics supports THOs to acquire the knowledge needed to ensure business continuity and the rebuild of tourism and hospitality sectors. Despite being recognised as an important source of value creation, big data and digital technologies raise ethical, privacy and security concerns. This paper aims to suggest a framework for ethical data management in tourism and hospitality designed to facilitate and promote effective data governance practices.Design/methodology/approachThe paper adopts an organisational and stakeholder perspective through a scoping review of the literature to provide an overview of an under-researched topic and to guide further research in data ethics and data governance.FindingsThe proposed framework integrates an ethical-based approach which e...

في القرن الحادي والعشرين، ارتفعت معدلات التلوث، وازدادت أخطار المشكلات البيئية، وأصبح هناك حاجة كبيرة لنشر الوعي بقضايا البيئة، والاهتمام بالتشجير ورعاية البيئة الخضراء، ولمواقع التواصل الاجتماعي دور مهم لإيجاد وعي بيئي بقضايا البيئة، والوصول إلى نشر ثقافة خضراء تحافظ على البيئة، وتهدف الدراسة إلى التعرف على طبيعة هذا الدور، من ناحية نوع التأثير الذي تتركه مواقع التواصل في الجمهور فيما يتعلق بالوعي البيئي، ومعرفة العوامل التي تؤثر في حجم تفاعل الجمهور مع قضايا الوعي البيئي، واستخدمت الدراسة المنهج المسحي، بالتطبيق على عدد (402) مبحوث، من طلاب وطالبات جامعة الملك سعود، خلال الفصل الدراسي الأول لعام 2022م، وقد توصلت الدراسة لعدد من النتائج، أهمها:

ارتفاع مستوى الوعي البيئي لدى أفراد العينة (متوسط حسابي 3.76).
وجود تأثير مرتفع لمواقع التواصل الاجتماعي في نشر الوعي البيئي إجمالاً (متوسط 3.98)
التأثير الوجداني لمواقع التواصل الاجتماعي كان أعلى أنواع التأثير، يليه التأثير المعرفي، ثم السلوكي.
وجود اتجاه سلبي من أفراد العينة نحو نشر الموضوعات المتعلقة بالبيئة (متوسط 2.22)
وجود عديد من العوامل المؤثرة في تفاعل أفراد العينة مع القضايا البيئية في مواقع التواصل، وفي مقدمتها: استخدام الصور المقارنة (قبل/ بعد)، وتوثيق تجربة شخص، ووجود مقطع فيديو، والرسوم التوضيحية (إنفوجرافيك)، بينما كان الطرح من قبل شخص مشهور واستخدام الهاشتاق أقل العوامل تأثيرًا.

As smart devices are becoming commonplace in the home, people have begun sharing access to these devices with people beyond the home. However, the "all-or-nothing" approach to access control taken by most smart home applications may be insufficient for use cases that involve others outside of the home. Therefore, we developed "MiSu" an Android and iOS app that allows smart home homeowners to share their devices (e.g., Ring doorbell, security alarm, smart door lock, smart light bulb) with people outside of their home to control what, when, and how they can engage with the smart devices. MiSu provides options for fine-grain access control, the ability for guests to control smart homes using their own device and login, and provides homeowners real-time logs where they can view all actions taken by guests invited to interact with their smart homes. CCS CONCEPTS • Human-centered computing → User interface programming; Interactive systems and tools.

In this modern technological era, due to the technology advancement, antivirus plays a vital role in electronics devices such as desktop, laptop and smartphone. Android is an open source mobile operating system, the nature of open source has further cultivated an exponential proliferation of devices running the Android OS into different sectors of the economy. Open source antivirus application is hardly found on internet and those readily antivirus requires subscription. The main purpose of this project is to create a free android based mobile antivirus application with the idea of malware detection. Furthermore, the project will also provide some other functionalities such as parental control, anti-theft, cloud backup and more. The project will be done with prototyping method using Android Studio.

In cloud computing for optimized workflow scheduling, it is crucial to meet user deadlines while minimizing the cost of resources. This paper is a novel approach that compares Ant Colony Optimization (ACO) with the Buddy System in reducing the cost of the resources used for scheduling those workflows. Ant Colony Optimization was inspired by the behavior of ants in their search for food using pheromone chemicals released by them. Thus, the ACO algorithm is employed to find the solution space and then explore it to find the near-optimal solution among them. Meanwhile, Buddy System algorithms efficiently handle the allocation and deallocation of resources in the cloud. In the cloud system, the Buddy System can be used to allocate and deallocate VM (virtual machine) instances.

The European Data Protection Board (EDPB) has released a GDPR compliance guide for small and mediumsized enterprises. In it, the table of the scope of application of privacy rights in relation to the legal bases of personal data processing is worth highlighting for summary clarity. The table highlights how from the perspective of this report, privacy rights can be grouped into three different categories:
- Exercisable rights in full at all times, whatever the legal basis
- Not applicable rights for some legal bases
- Partially applicable rights for some legal bases.

This summary covers only the interaction between rights and legal bases, as rights may be subject to additional limitations not closely related to legal bases, which are not considered here.

In the twenty-first century, human attention has become the object of interest of entrepreneurs, making it an object of supply. The development of technology related to attracting the attention of recipients is becoming more and more aggravating and increasingly important in the implementation of decision-making processes. Attention, which has so far been of interest to the economy of attention, becomes the subject of a legal analysis of the protection of an individual against unauthorized interference. The subject of the article is to define what the privacy of attention is and why its conceptualization is necessary for the proper protection of individual rights.

This paper presents a systematic bibliometric analysis of the artificial intelligence (AI) domain to explore privacy protection research as AI technologies integrate and data privacy concerns rise. Understanding evolutionary patterns and current trends in this research is crucial. Leveraging bibliometric techniques, the authors analyze 8,322 papers from the Web of Science (WoS) database, spanning 1990 to 2023. The analysis highlights IEEE Transactions on Knowledge and Data Engineering and IEEE Access journals as highly influential, the former being an early contributor and the latter emerging as a pivotal source. The study demonstrates substantial disparities in scientific productivity across countries. Specifically, the top 10 countries collectively accounted for 74.8% of the articles, with China and the USA making up nearly half of the total contribution (46.1%). In contrast, regions in Africa and South America exhibited lower scientific production. The evolution of privacy preservation research is reflected, shifting from an algorithm-oriented approach to a focus on data orientation, and subsequently, to privacy solutions centered around Cloud Computing. In recent years, there has been a shift towards embracing Federated Learning and Differential Privacy. The analysis brings to light emerging themes and identifies research gaps, notably a global disparity in research output and a lag in ethical and legal inquiry. It asserts that enhanced interdisciplinary collaboration is imperative to formulate comprehensive privacy solutions for AI. Specifically, the paper imparts invaluable insights that are pivotal for effectively addressing the evolving privacy concerns in the era of AI and big data.

The use of dating app data to expose a gay priest by The Pillar poses important questions for the right to privacy in the era of big data. This paper addresses the lack of engagement with privacy within the Catholic theological ethical tradition. Using insights from philosophical and legal discussions of privacy, this essay argues for privacy as an integral part of human dignity as outlined in magisterial teaching, connected to personal reputation, family life, and conscience. However, privacy is limited when what is done in private violates justice.

This research explores the pivotal role of technology in various aspects of people's lives, highlighting the dominance of technological features in the present century. It emphasizes the nature of communication, knowledge sharing, and idea generation within a digital environment. Major technology and communication companies play a crucial role in this landscape by relying on algorithmic mechanisms to track user actions and behaviors, as well as to record data.

Due to the exchange of data among various entities involved in building user’s profiles and the challenges in assigning data protection solely to laws and regulations in the virtual space, the study aims to understanding how users understand and manage their digital footprint, as well as their perception of potential impacts and their level of management of their digital footprints in this digital environment.

The findings presented evidence to support the consideration of individuals' awareness as a supportive tool for controlling their digital impacts, especially given the sensitivity of various information for users, such as financial information, personal images, and videos.
Since not all personal information carries the same level of importance, some information can be disclosed or concealed based on the anticipated consequences of such disclosure and data availability. Therefore, the importance of decision-making and individuals developing privacy norms that align with their needs becomes apparent.
The findings also indicated the users' belief in the time frames during which data collectors can retain their information. Additionally, the findings showed a reasonable level of awareness among the participants regarding their digital footprint and their understanding of the activities that shape it.

=================================================

According to Statista's data for the second quarter of 2023, the global number of Internet users has reached 5.18 billion users. The diverse uses of the Internet, from web browsing to search engine queries, email communication, and the pivotal role of social networks in empowering individuals to create and share information, have led to a massive influx of user-generated content online. This daily deluge of billions of data points has elevated the digital realm to an unprecedented level of importance, where every click by a user holds significant value, turning their data into a form of personal digital currency. User activities are meticulously tracked and stored, including their real-time location, device usage, visited web pages, time spent online, social connections, interests, searches, uploaded/downloaded media, preferences, emotions, and feedback. The inevitable data collection mechanisms stem from the integral role of current apps and platforms in daily routines, making the data reflecting an individual's online footprint a crucial aspect of their digital presence. Shoshana Zuboff coined the term "Surveillance Capitalism" to illustrate how tech giants utilize our data as a commodity to predict and influence our behavior, emphasizing the monopolization of digital data processing for predictive analytics by these corporate entities...

In the "Human Rights Guide for Internet Users," the ministerial committee of the Council of Europe highlighted the importance of data protection and the confidentiality of online communications. When we use services like browsers, email, social media, search engines, cloud storage, instant messaging, and internet calling, our data is regularly processed. The guide emphasizes that data should only be processed when required by law or with the user's consent. Users need to be informed about what data is being processed or shared with third parties, for what purpose, and by whom. They should also have control over their data, being able to verify its accuracy, request corrections, deletions, or limit data retention by third parties. Despite these measures, they do not guarantee full control over user data. The complexity and variety of technology and communication companies' policies may lead users to blindly accept terms and conditions, turning the consent process into a mere formality rather than a true reflection of data control. Additionally, willingly sharing data can also expose individuals to digital tracking and surveillance.

Research Problem:
The rise of technological innovations has flooded the consumer market with smart devices, wearables, and the Internet of Things, all aimed at enhancing quality of life and personal well-being. This surge is a result of global tech companies' efforts to create captivating online environments, enticing users to spend extensive time with their various applications. Consequently, users have become deeply engrossed in communication, leisure, endless content consumption, interaction, and data sharing, leading to the creation of a digital record of individual online activities known as the digital footprint.

The study defines the digital footprint as the digital traces or data users leave behind due to their diverse online activities (websites, apps, social media platforms, search engines, messaging apps, online games, etc.) across different devices. This data can be deliberately shared (explicit footprint), termed as active or positive footprint, representing the active content users create and share themselves, like status updates, sharing media on social platforms, sending emails, commenting on web pages, and other self-disclosed information visible to other internet users. Alternatively, data may be unintentionally left (implicit), known as negative or inactive footprint, encompassing information inadvertently left behind, such as geographic location through IP addresses, browser types, search histories, website visit durations, and more; although invisible to other users, this data is monitored by platform operators.

In addition to the information shared by other individuals about the user, referred to as digital shadows, massive inferential data is formed through explicit and implicit data. This process generates independent additional information and creates individual profiles that can be used to understand, predict, and influence user trends. The key entities in user tracking are those capable of accessing inactive fingerprints that the user did not share personally.

Analyzing user data may serve the purpose of perpetuating the reinforcement of echo chambers, tailoring content to align with user trends and preferences, or enhancing user experience by improving the quality of services and introducing new ones. This raises questions about individual ownership of their data and the level of control they have over it.

The research problem revolves around understanding how users manage their digital footprint. This involves investigating their knowledge of digital fingerprints, the digital activities contributing to its formation, the sensitivity of certain data to them, their perception of its potential effects, and their level of control over it.

Trademarked names, logos, and images may appear in this book. Rather than use a trademark symbol with every occurrence of a trademarked name, logo, or image we use the names, logos, and images only in an editorial fashion and to the benefit of the trademark owner, with no intention of infringement of the trademark. The use in this publication of trade names, trademarks, service marks, and similar terms, even if they are not identified as such, is not to be taken as an expression of opinion as to whether or not they are subject to proprietary rights.

There is an abundance of digital sexual and reproductive health technologies that present concern regarding their potential sensitive data breaches. We analyzed 15 Internet of Things (IoT) devices with sexual and reproductive tracking services and found this ever-extending collection of data implicates many beyond the individual including partner, child, and family. Results suggest that digital sexual and reproductive health data privacy is both an individual and collective endeavor.

In the modern digital era, cybercrime has become a global menace that poses serious difficulties for governments, corporations, and individuals alike. Information and communication technology's rapid advancement has transformed many facets of society and revealed cyberspace's weaknesses, which has drawn malevolent actors to the area. This essay explores the global reaction to cybercrime, emphasizing crucial concerns that must be addressed in order to successfully counter this worldwide threat. The study identifies crucial areas for improvement, such as the definition of cybercrimes, the establishment of sanctions, improved cooperation among domestic authorities, and harmonized jurisdictional criteria, through an analysis of current legal frameworks and international cooperation mechanisms. The study also emphasizes how crucial it is to include the private sector—especially technology companies—in initiatives to effectively combat cyberthreats. In view of the interconnectedness of the 21st century, this research emphasizes the need for international cooperation and law as a means of combating cybercrime and preserving the integrity of cyberspace.

Mobile privacy and security can be a collaborative process where individuals seek advice and help from their trusted communities. To support such collective privacy and security management, we developed a mobile app for Community Oversight of Privacy and Security ("CO-oPS") that allows community members to review one another's apps installed and permissions granted to provide feedback. We conducted a four-week-long field study with 22 communities (101 participants) of friends, families, or co-workers who installed the COoPS app on their phones. Measures of transparency, trust, and awareness of one another's mobile privacy and security behaviors, along with individual and community participation in mobile privacy and security co-management, increased from pre-to post-study. Interview findings confirmed that the app features supported collective considerations of apps and permissions. However, participants expressed a range of concerns regarding having community members with different levels of technical expertise and knowledge regarding mobile privacy and security that can impact motivation to participate and perform oversight. Our study demonstrates the potential and challenges of community oversight mechanisms to support communities to co-manage mobile privacy and security. 1 Introduction The majority of U.S. adults own smartphones [50], and nearly half of them have reported downloading various third-party apps [8]. These mobile apps often require access to users' sensitive information, such as contacts, emails, location, photos,

Our research aims to highlight and alleviate the complex tensions around online safety, privacy, and smartphone usage in families so that parents and teens can work together to better manage mobile privacy and security-related risks. We developed a mobile application ("app") for Community Oversight of Privacy and Security ("CO-oPS") and had parents and teens assess whether it would be applicable for use with their families. CO-oPS is an Android app that allows a group of users to co-monitor the apps installed on one another's devices and the privacy permissions granted to those apps. We conducted a study with 19 parent-teen (ages 13-17) pairs to understand how they currently managed mobile safety and app privacy within their family and then had them install, use, and evaluate the CO-oPS app. We found that both parents and teens gave little consideration to online safety and privacy before installing new apps or granting privacy permissions. When using CO-oPS,...

Managing digital privacy and security is often a collaborative process, where groups of individuals work together to share information and give one another advice. Yet, this collaborative process is not always reciprocal or equally shared. In many cases, individuals with more expertise help others without receiving help in return. Therefore, we studied the phenomenon of "Tech Caregiving" by surveying 20 groups (112 individuals) comprised of friends, family members, and/or co-workers who identified at least one member of their group as a someone who provides informal technical support to the people they know. We found that tech caregivers reported significantly higher levels of power use and self-efficacy for digital privacy and security, compared to tech caregivees. However, caregivers and caregivees did not differ based on their self-reportedcommunity collective-efficacy for collaboratively managing privacy and security together as a group. This finding demonstrates the i...

The CJEU's pronouncements help in a correct reading of regulatory requirements, shedding light on aspects that have raised doubts by national courts in member states. This roundup often offers an interesting insight into data protection regulation on different profiles.

This chapter reflects on how data privacy on third-party for-profit advertising websites geared towards sex workers is managed and which types of vulnerabilities are generated through this corporate model. This chapter begins with the documented and possible further harms of the Rentboy.com data breach as a result of the raid in 2015 and investigates the strategies, or lack thereof, put in place by the owners of Rent.men to prevent similar data breaches as detailed in their “Privacy Policy” and “Terms of Service” statements. Lastly, this chapter turns to the data privacy strategies of online advertising platforms created and managed by sex worker-owned cooperatives like Ottawa Independent Companions (OIC) in Canada. Through an in-person interview with a founding member of the organization, a comparison highlighting the risk mitigation strategies of OIC’s hyper-local, democratic, collaborative, and demonstrably more secure data privacy model can be made in contrast to the faceless revenue-hungry transnational corporations making millions off sex workers with little accountability to the very people they claim to be supporting.

We propose that blockchain technology complemented by secure computation methods can foster implementation of a learning healthcare system (LHCS) by minimizing upfront patient-facing compromises with unsurpassed data security and privacy, and by optimizing the system’s fulfillment of its obligations to respect patients through transparency, engagement, and accountability. We demonstrate how a blockchain-enabled LHCS could foster patient willingness to contribute to learning by providing desired security and control over health data. In addition, secure computation methods could enable meta-analysis without exposing individual-level data, thus allowing the system to protect patients’ privacy while simultaneously learning from their data. The transparency and immutability of blockchain ledgers would also support the public’s trust in the system by allowing patients to audit and oversee which of their data are used, how they are used, and by whom. Furthermore, blockchain communities are community-governed peer-to-peer networks in which sharing builds mutually beneficial value, offering a model for engaging patients as LHCS stakeholders. Smart contracts could be used to ensure accountability of the system by embedding feedback mechanisms by which patients directly and automatically realize benefits of sharing their data

Security challenges are the order of the day in some countries around the globe, Nigeria inclusive. Series of measures were proposed and even implemented, but due to population size, lack of social amenities (i.e. Power) and time factor rendered some of them insufficient enough to tackle the issue. Nigeria, as at February 2014, has recorded total number of cell phone users to be (167,371,945). Therefore, via wiretapping and imagery intelligence, this number or even more will be on surveillance over a period of time so as to pinpoint suspects through location information. To achieve this, there must be a tradeoff between citizen privacy and optimum security.

On July 21, 2021, the Catholic Substack "The Pillar" printed an "expose" on Monsignor Jeffrey Burrill regarding alleged  use of the gay hook-up app Grinder. Responses across Catholic-oriented social media were divided and demonstrated the need for clear Catholic ethics of privacy. This paper advances principles of a Catholic ethic of privacy based in Catholic concepts of dignity and human rights and their place within a broader notion of justice.

In March 2020, the Israeli government decided that its internal security agency may collect, process, and use technological information measures to tackle the spread of COVID-19. This was done by tracking the cellphones of those who may have contracted the virus, along with obtaining details on those who were in proximity for more than fifteen minutes and fourteen days prior to the positive outcome of those traced. The article discusses the

Risk-based authentication (RBA) is an adaptive security measure to strengthen password-based authentication. RBA monitors additional implicit features during password entry such as device or geolocation information, and requests additional authentication factors if a certain risk level is detected. RBA is recommended by the NIST digital identity guidelines, is used by several large online services, and offers protection against security risks such as password database leaks, credential stuffing, insecure passwords and large-scale guessing attacks. Despite its relevance, the procedures used by RBA-instrumented online services are currently not disclosed. Consequently, there is little scientific research about RBA, slowing down progress and deeper understanding, making it harder for end users to understand the security provided by the services they use and trust, and hindering the widespread adoption of RBA. In this paper, with a series of studies on eight popular online services, we (i) analyze which features and combinations/classifiers are used and are useful in practical instances, (ii) develop a framework and a methodology to measure RBA in the wild, and (iii) survey and discuss the differences in the user interface for RBA. Following this, our work provides a first deeper understanding of practical RBA deployments and helps fostering further research in this direction.

Mobile privacy and security can be a collaborative process where individuals seek advice and help from their trusted communities. To support such collective privacy and security management, we developed a mobile app for Community Oversight of Privacy and Security ("CO-oPS") that allows community members to review one another's apps installed and permissions granted to provide feedback. We conducted a four-week-long field study with 22 communities (101 participants) of friends, families, or co-workers who installed the COoPS app on their phones. Measures of transparency, trust, and awareness of one another's mobile privacy and security behaviors, along with individual and community participation in mobile privacy and security co-management, increased from pre-to post-study. Interview findings confirmed that the app features supported collective considerations of apps and permissions. However, participants expressed a range of concerns regarding having community members with different levels of technical expertise and knowledge regarding mobile privacy and security that can impact motivation to participate and perform oversight. Our study demonstrates the potential and challenges of community oversight mechanisms to support communities to co-manage mobile privacy and security. 1 Introduction The majority of U.S. adults own smartphones [50], and nearly half of them have reported downloading various third-party apps [8]. These mobile apps often require access to users' sensitive information, such as contacts, emails, location, photos,