Some U.S. laws and documents provide a foundation. But is a distinction between “data brokers” and the practice of “data brokerage” the right approach?

In a paper we are making public today, we go beyond private right of action and preemption to consider enforcement frameworks outside the privacy field.

In the U.S. legal framework, there is ample precedent for using an executive order or presidential directive to limit intelligence activities and establish safeguards to protect privacy and civil liberti...

Spurred on by recent quantum computing milestones, a global “quantum race” is underway—but Canada is still without a strategy.

Most current approaches to resolving the EU-U.S. conflict fall short. It’s time for a hybrid approach.

The United States now finds itself forced to consider changes to its foreign surveillance law and practices in order to reestablish a stable basis for transatlantic transfers of personal data. 

The power that tech platforms have over individuals can be legitimized only by rejecting the fraudulent contract of Section 230 and instituting principles of consent, reciprocity, and collective responsi...

The Fourth Amendment government agency problem requires platforms to walk a fine—and sometimes untenable—line in searching for private user content that contains child sex abuse material and other illega...

COVID-19 apps in the United States have been ineffective as public health tools because they are designed primarily to protect privacy. Poor design choices, effectively mandated by Google and Apple, were...