Why Privacy Matters

1. Privacy: A Battleground for Power, Not a Relic of Secrecy.

We live in a society in which information is power, and “privacy” is the word we use to talk about the struggles over personal information, personal power, and personal control.

The "Privacy Is Dead" myth. Many commentators declare privacy dead or dying, citing vast data collection by corporations and governments, from ad networks monitoring web surfing to the NSA screening emails. This fatalistic view, however, is a self-serving narrative promoted by entities that benefit from unchecked data exploitation. It masks the true stakes: control over our increasingly digital society.

Information as power. The core of the privacy debate is the immense power conferred by human information. Companies like Target use data science to predict and influence consumer behavior, such as identifying pregnant women to target them with specific ads. This isn't just about data as "the new oil" fueling technology; it's about leveraging information to exert social, economic, and political control over individuals.

Struggles over rules. The ongoing "Privacy Conversation" is fundamentally a battle over the rules governing how human information is detected, collected, used, shared, and stored. These rules determine who holds power in our information society. If we surrender to the myth of privacy's demise, we cede our responsibility to establish reasonable regulations, leaving the digitally disempowered even more vulnerable.

2. Defining Privacy: The Degree to Which Human Information is Neither Known Nor Used.

Privacy is the degree to which human information is neither known nor used.

Beyond simple definitions. Privacy is a complex concept, often defined in various ways—spatial, decisional, or informational. The quest for a single, universally accepted definition is often futile, as technology and social norms constantly evolve. Instead of getting bogged down in philosophical niceties, a practical working definition is needed to address the pressing issues of our digital age.

Four key elements. This working definition emphasizes four crucial aspects:

• Information: The focus is on "information privacy," concerning what others learn, know, or use about us, rather than spatial or decisional privacy.
• Human: It specifically pertains to "human information"—data about individuals like you and me—highlighting the human impact of data technologies.
• Use, not just knowing: Privacy extends beyond mere collection to encompass how information is processed, from detection and storage to disclosure and analysis. The "secrecy paradigm," which suggests privacy ends once information is shared, is a dangerous fallacy.
• Matter of degree: Privacy exists on a continuum, not as a binary "public" or "private" state. Most information resides in intermediate states, known to some but not all, allowing for nuanced regulation.

Practical implications. Understanding privacy as a matter of degree allows for more principled legal solutions, such as recognizing "limited privacy" where information shared in one context doesn't waive privacy in all others. This nuanced view is crucial for addressing modern challenges like smartphone location tracking or the "upskirt photography" problem, where common sense dictates a right to privacy even in public spaces.

3. Debunking Privacy Myths: Beyond Secrets, Creepiness, and Illusory Control.

Arguing that you don’t care about the right to privacy because you have nothing to hide is no different than saying you don’t care about free speech because you have nothing to say.

The "nothing to hide" fallacy. The pervasive argument that "if you have nothing to hide, you have nothing to fear" is a dangerous myth. Everyone has aspects of their lives they wish to keep private, from intimate bodily activities to intellectual explorations. The unwanted disclosure of such information can be psychologically and professionally devastating, as seen in cases of nonconsensual pornography or the FBI's attempt to blackmail Martin Luther King Jr. Privacy is not just about hiding "dark secrets"; it's a fundamental need for all individuals and a vital social value.

Creepiness: A misleading signal. The "creepy" reaction to new technologies is a common but unreliable indicator of privacy threats. Creepiness is:

• Overinclusive: Many initially "creepy" technologies (like early steam trains or Facebook's News Feed) become normalized and even beneficial.
• Underinclusive: Many truly harmful practices (e.g., secret mass surveillance, opaque algorithmic discrimination) go unnoticed and thus don't trigger a "creepy" reaction.
• Malleable: Companies like Google and Facebook actively manipulate social norms and desensitize users to invasive practices, blurring the "creepy line" to serve their business interests.
  Focusing on creepiness distracts from the underlying power dynamics and manipulation at play.

The illusion of control. The idea that privacy is about individuals controlling their data is a seductive but ultimately flawed illusion. "Privacy as Control" leads to "privacy self-management," which is:

• Overwhelming: Consumers face a "dizzying array of switches, delete buttons, and privacy settings" and incomprehensible privacy policies, making meaningful control impossible.
• Illusory: Companies design interfaces and set defaults to nudge users toward desired behaviors (e.g., sharing more data), effectively controlling choices rather than empowering users.
• Insufficient: Privacy is a social good, not just an individual preference. Even superhuman efforts at personal control cannot protect against the collective impact of others' data disclosures or systemic surveillance. This illusion completes the "creepy trap" by shifting blame to consumers for failing to navigate a rigged system.

4. Privacy Isn't Dying: It's a Deeply Valued, Yet Manipulated, Human Concern.

The claim that people don’t care about privacy is simply and undeniably false.

Persistent concern. Despite claims from figures like Mark Zuckerberg that "the age of privacy is over," empirical evidence overwhelmingly shows that people care deeply about privacy. Numerous surveys, including those by the Pew Research Center, consistently reveal that substantial majorities support enhanced privacy measures and are concerned about online data collection. The very institutions that propagate the "privacy is dying" myth, such as the NSA and tech giants, often employ extensive secrecy and non-disclosure agreements to protect their own information.

Youth and privacy. The notion that young people are "digital natives" who don't care about privacy is also a misconception. While they may share information differently, teens exhibit sophisticated "privacy work" strategies, such as using "finstagrams" or verbal codes, to manage boundaries with various audiences (parents, peers, college admissions). Their seemingly risky online behaviors are often a function of limited options and the "public-by-default, private-through-effort" design of social media platforms.

The "privacy paradox" explained. The apparent contradiction between people expressing privacy concerns and then engaging in behaviors that undermine it (the "privacy paradox") is not due to apathy. Instead, it's a consequence of:

• Manipulation: Behavioral science and data-enhanced choice architecture nudge users toward disclosure.
• Overwhelm: The sheer volume and complexity of privacy settings make informed choices impractical.
• Limited options: Users often face a "take it or leave it" choice, where opting out means forfeiting essential digital services.
  The "privacy is dying" narrative is a self-serving framing that deflects responsibility from powerful entities and normalizes pervasive surveillance.

5. Identity's Shield: How Privacy Nurtures Authentic Self-Development.

Privacy gives us the breathing space we need to figure out who we are and what we believe as humans.

Space for self-discovery. Privacy is fundamental because it provides the necessary "breathing space" for individuals to determine and express their identities on their own terms. This includes both personal and political identities, allowing for introspection, experimentation, and the development of beliefs free from constant scrutiny. Just as Virginia Woolf advocated for a "room of one's own" for creative thought, privacy offers a metaphorical shield for identity formation.

Rejecting unitary selves. Social media policies, like Facebook's "Real Name Policy," often force individuals into a singular, unchanging, "authentic" identity, which is at odds with human nature. Identities are:

• Messy and fluid: We contain multitudes, playing different roles (parent, friend, worker) and code-switching for various audiences.
• Evolving: Identity is a dynamic process of "play" and experimentation throughout life, influenced by social interactions but not rigidly determined.
  Privacy enables this complexity, allowing individuals to maintain multiple, sometimes conflicting, identities without fear of exposure or judgment.

Threats to identity. Current information practices can undermine identity development through:

• Forcing: Digital systems impose rigid identity models, like binary gender classifications or "real name" mandates, that don't reflect human fluidity.
• Filtering: Algorithmic "filter bubbles" and "echo chambers" homogenize perspectives, limiting exposure to diverse ideas and hindering critical thought.
• Exposure: Constant surveillance normalizes behavior, stifling eccentricity, dissent, and the exploration of unpopular ideas. This "searing heat of selective, forced exposure" can drive individuals toward mainstream conformity, hindering the development of unique, critical selves.

6. Freedom's Foundation: Privacy as a Bulwark Against State and Corporate Surveillance.

The power that surveillance gives to watchers creates risks of blackmail and discrediting, discrimination, and coercive persuasion.

Beyond Big Brother. While George Orwell's "Big Brother" metaphor vividly portrays totalitarian surveillance, modern surveillance is more complex. It is focused, systematic, routine, and purposeful, extending beyond government to include pervasive private-sector monitoring. This "liquid surveillance" often transcends the public-private divide, creating unique challenges for constitutional protections that primarily target state action.

Threats to intellectual privacy. Surveillance directly menaces intellectual privacy, the freedom to think, read, and communicate unpopular ideas without fear of scrutiny. Studies show that awareness of surveillance leads to a "chilling effect," causing individuals to self-censor their online searches and reading habits, particularly on controversial topics. This stifles the development of new political ideas and informed, engaged citizens, undermining democratic self-governance.

Surveillance as power. Even secret surveillance is dangerous because it fundamentally alters power dynamics, giving watchers immense influence over the watched. This power manifests in three critical ways:

• Blackmailing and discrediting: Covertly collected information can be used to coerce or publicly shame individuals, as seen in the FBI's attempt to force Martin Luther King Jr. to commit suicide or the political downfall of Representative Katie Hill due to nonconsensual image disclosure.
• Persuasion: Data-driven microtargeting allows political campaigns to precisely influence voter behavior, from encouraging supporters to vote to suppressing turnout among opponents, threatening the integrity of democratic elections.
• Discrimination: Surveillance enables "panoptic sorting," where individuals are categorized and treated unequally based on their profiles, exacerbating existing societal inequalities along lines of race, gender, and socioeconomic status.

7. Consumer's Safeguard: Privacy as Essential Protection in the Information Economy.

The information revolution has created massive conceptual and practical challenges for consumers navigating the digital economy.

Lessons from industrialization. Just as the Industrial Revolution necessitated new consumer protection laws to mitigate its excesses (e.g., workplace safety, product standards), the Information Revolution demands a similar "protective countermovement." Consumers today face unprecedented challenges in understanding and managing complex digital products and services, which often operate as "black boxes" of algorithms and data exploitation. The old legal frameworks, like the "Lochner era" resistance to worker protections, are inadequate for this new landscape.

Rethinking consumer language. The language used by tech companies—"users" making "choices" in an "ecosystem of innovation"—is often self-serving and misleading. "Users" are rarely treated as valued customers with reciprocal duties. "Choice" is often an illusion, overwhelming consumers with options designed to benefit the company. "Innovation" is selectively vague, portraying technology as universally good while ignoring its harmful applications and fragility when faced with regulation. This rhetoric obscures the power imbalances inherent in digital commerce.

The "situated consumer." A new consumer protection framework must recognize the "situated consumer"—real people who are:

• Not rational actors: Behavioral science shows consumers are predictably irrational, susceptible to manipulation, and poor at assessing future risks.
• Overwhelmed: Modern life, compounded by digital tasks, leaves consumers with limited time, mental bandwidth, and legal expertise to manage complex privacy settings or understand dense policies.
• Vulnerable: Companies exploit cognitive biases and decision fatigue through "dark patterns" and manipulative design, making "consent" unwitting or coerced.
  This approach demands substantive rules that protect consumers from exploitation, rather than relying on the fiction of individual self-management.

8. Building Digital Trust: Privacy Rules as the Bedrock of Sustainable Relationships.

Trust is beautiful. The willingness to accept vulnerability to the actions of others is the essential ingredient for friendship, commerce, transportation, and virtually every other activity that involves other people.

Trust in information relationships. Trust is the indispensable foundation for all human interactions, including the myriad "information relationships" that define our digital lives. From sharing data with internet providers and banks to using social media and health apps, we constantly entrust sensitive information to others. Without trust, our modern systems of government, commerce, and society itself would crumble, and our digital future would be unsustainable.

Four pillars of trust. To foster trust in the digital realm, institutions (companies and governments) must adhere to four principles:

• Discretion: Institutions must limit their own ability to disclose or sell human information without knowledge or consent.
• Honesty: They must be transparent about their data practices, going beyond vague privacy policies to ensure genuine understanding.
• Protection: They must safeguard data against hostile third parties (e.g., hackers) through robust security measures and minimize breach damages.
• Loyalty: Institutions should act in the best interests of individuals, prioritizing their well-being over short-term financial gain from data exploitation, and avoiding manipulation.

Privacy as a value-creator. When privacy rules embody these principles, they transform from mere obstacles to powerful enablers of trust. This trust creates value for both individuals and companies, fostering long-term, sustainable commercial relationships. For example, in precision medicine, robust privacy rules are essential for individuals to trust doctors and genomic labs with their most sensitive genetic data, enabling life-saving treatments while preventing misuse.

9. Privacy as a Fundamental Right: Indispensable for a Just Digital Future.

Privacy is a fundamental right, and we should recognize it—and broadly protect it—as such.

A fundamental human right. Privacy is not a quaint, outdated value but a fundamental human right, akin to free speech, essential for a thriving digital society. Europe already recognizes privacy as such, with robust protections in the European Convention on Human Rights and the GDPR. The U.S. Congress, in the Privacy Act of 1974, also declared privacy a "personal and fundamental right," though its application to the private sector remains tragically incomplete.

Beyond balancing. While privacy must often be reconciled with other competing values like security or innovation, this "balancing" must be done with intellectual honesty. We must first fully understand privacy's inherent value and the human benefits it provides, rather than allowing its importance to be diminished by self-serving rhetoric or immediate fears. The current "choice architecture" often rigs the scales against privacy from the outset.

Building a protective future. Protecting privacy as a fundamental right requires:

• Updating laws: Modernizing outdated statutes (e.g., wiretapping laws from the 1980s) to address contemporary digital threats.
• Comprehensive regulation: Implementing a general commercial privacy law with robust agency oversight and private rights of action.
• Addressing new technologies: Regulating data brokers, facial recognition, AI, and the flow of information between private and government entities.
• Protecting the vulnerable: Ensuring privacy rules are sensitive to the needs of marginalized groups, who are disproportionately targeted by surveillance.
  Privacy is indispensable for developing authentic identities, safeguarding political freedom, protecting consumers from manipulation, and building trust in our digital future. It is the "whole ball game" for determining the kind of society we will inhabit.