Privacy: The new generations

International Data Privacy Law

Volumn 1, Issue 1, 2011, Pages 15-27

  Tene, Omer ^a  

^a School of Law ^*  (Israel)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 85071033167     PISSN: 20443994     EISSN: 20444001     Source Type: Journal    
DOI: 10.1093/idpl/ipq003     Document Type: Article

References (129)

1. Samuel D. Warren and Louis D. Brandeis, 'The Right to Privacy' (1890) 4 Harvard Law Review 193.
2. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, 1995 O.J. (L 281) 31.
3. For a brief exposition of the technological landscape setting the stage for the Current Framework see Viktor Mayer-Schönberger, 'Generational Development of Data Protection in Europe' in Philip Agre and Marc Rotenberg (eds), Technology and Privacy: The New Landscape (MIT Press, Cambridge, MA 1997) 219-41.
4. See European Commission, Consultation on the legal framework for the fundamental right to protection of personal data, 31 December 2009, available at,http://ec.europa.eu/justice_home/news/consulting_public/ news_consulting_0003_en.htm.; Article 29 Working Party
5. 'The Future of Privacy: Joint contribution to the Consultation of the European Commission on the legal framework for the fundamental right to protection of personal data' (WP 168), 1 December 2009, available at,http://ec.europa.eu/justice_home/fsj/privacy/docs/wpdocs/2009/ wp168_en.pdf..
6. See OECD, 'The 30th Anniversary of the OECD Privacy Guidelines', 2010 (Roundtable Series and Report), available at,www.oecd.org/ document/35/0,3343,en_2649_34255_44488739_1_1_1_1,00.html..
7. FTC, 'Exploring Privacy: A Roundtable Series', 2009-2010, available at,www.ftc.gov/bcp/workshops/privacyroundtables..
8. John Palfrey and Urs Gasser, Born Digital: Understanding the First Generation of Digital Natives (Basic Books, New York 2008).
9. Tim Berners-Lee, Weaving the Web: The Original Design and Ultimate Destiny of the World Wide Web (Harper Collins, New York 2000).
10. Bodil Lindqvist (Case C-101/01) [2003] ECR I-12971.
11. For a good exposition, see Let it rise: A survey of corporate IT, The Economist, 23 October 2008, available at,www.economist.com/node/ 12411882. (registration may be needed);
12. Tim Mather, Subra Kumaraswamy and Shahed Latif, Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance (Theory in Practice) (O'Reilly Media, Sebastopol, CA 2009).
13. See, e.g., Ann Cavoukian, 'Privacy in the Clouds: A White Paper on Privacy and Digital Identity-Implications for the Internet', 28 May 2008, available at,www.ipc.on.ca/images/Resources/privacyintheclouds. pdf.;
14. Office of the Privacy Commissioner of Canada, 'Reaching for the Cloud(s): Privacy Issues related to Cloud Computing', 29 March 2010, available at,http://priv.gc.ca/information/pub/cc_201003_e.cfm.;
15. William Robison, 'Free at What Cost?: Cloud Computing Privacy Under the Stored Communications Act' (2010) 98 Georgetown Law Journal 1195.
16. See Article 29 Working Party, 'Opinion 2/2010 on online behavioral advertising' (WP 171), 22 June 2010, available at,http://ec.europa.eu/ justice_home/fsj/privacy/docs/wpdocs/2010/wp171_en.pdf.;
17. FTC Staff Report, 'Self-Regulatory Principles for Online Behavioral Advertising', February 2009, available at,www.ftc.gov/os/2009/02/ P085400behavadreport.pdf..
18. See informative graphic: 'Before You Even Click', Future of Privacy Forum Blog, 29 April 2010, available at,www.futureofprivacy.org/2010/ 04/29/before-you-even-click/..
19. Eric Pfanner, 'Internet providers get a piece of ad income', NY Times, 15 February 2008, available at,www.nytimes.com/2008/02/15/business/ worldbusiness/15iht-AD18.html..
20. Comments of the Center for Democracy & Technology to the European Commission in the matter of the Consultation on the Legal Framework for the Fundamental Right to Protection of Personal Data, 31 December 2009, available at,http://ec.europa.eu/justice_home/news/ consulting_public/0003/contributions/organisations_not_registered/ center_for_democary_technology_en.pdf..
21. See sources at Electronic Privacy Information Center, Deep Packet Inspection and Privacy, available at,http://epic.org/privacy/dpi/..
22. See, eg, Solon Barocas and Helen Nissenbaum, 'On Notice: The Trouble with Notice and Consent', in Proceedings of the Engaging Data Forum: The First International Forum on the Application and Management of Personal Electronic Information, October 2009, available at,www.nyu. edu/projects/nissenbaum/papers/ED_SII_On_Notice.pdf..
23. The Economist recently reported that 'the amount of digital information increases tenfold every five years.' 'A special report on managing information: Data, data everywhere' (27 February 2010) The Economist, available at,www.economist.com/node/15557443. (registration may be needed);
24. see discussion of government and private sector data mining in Ira Rubinstein, Ronald Lee, and Paul Schwartz, 'Data Mining and Internet Profiling: Emerging Regulatory and Technological Approaches' (2008) 75 University of Chicago Law Review 261.
25. See, eg, Henry T. Greely, 'The Uneasy Ethical and Legal Underpinnings of Large-Scale Genomic Biobanks', (2007) 8 Annual Review of Genomics and Human Genetics 343.
26. Paul Ohm, 'Broken Promises of Privacy: Responding to the Surprising Failure of Anonymization' (forthcoming 2010) 57 UCLA Law Review.
27. Latanya Sweeney, 'Uniqueness of Simple Demographics in the U.S. Population' (2000) Laboratory for International Data Privacy Working Paper, LIDAP-WP4.
28. Arvind Narayanan and Vitaly Shmatikov, 'Robust De-anonymization of Large Sparse Datasets' (2008) IEEE Symposium on Security and Privacy 111.
29. Michael Barbaro and Tom Zeller, Jr., 'A Face is Exposed for AOL Searcher No. 4417749' (9 August 2006) NY Times.
30. See, eg, Foursquare,,http://foursquare.com.;
31. Gowalla, , http://gowalla.com.;
32. Loopt,,http://www.loopt.com..
33. Article 29 Data Protection Working Party, 'Opinion 3/2006 on the Directive 2006/24/EC of the European Parliament and of the Council on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC', 25 March 2006, available at,http://ec.europa.eu/justice_home/fsj/privacy/docs/wpdocs/2006/ wp119_en.pdf..
34. see Article 29 Data Protection Working Party, 'Opinion on the use of location data with a view to providing value-added services' (WP115), 25 November 2005, available at,http://ec.europa.eu/justice_home/fsj/ privacy/docs/wpdocs/2005/wp115_en.pdf..
35. See, eg, Center for Democracy & Technology Policy Post, 'The Dawn of the Location-Enabled Web', 6 July 2009, available at,http://www.cdt. org/policy/dawn-location-enabled-web.
36. Electronic Frontier Foundation, 'On Locational Privacy, and How to Avoid Losing it Forever', August 2009, available at ,www.eff.org/files/eff-locational-privacy.pdf..
37. But cf.,https://whatapp.org/., a project by Stanford law professor Ryan Calo, allowing users and experts to review online and mobile apps and platforms for privacy, security, and openness.
38. Marisa Anne Pagnattaro, 'Getting Under Your Skin-Literally: RFID in the Employment Context', (2008) University of Illinois Journal of Law, Technology and Policy 237.
39. See Article 29 Data Protection Working Party, 'Opinion 5/2010 on the Industry Proposal for a Privacy and Data Protection Impact Assessment Framework for RFID Applications' (WP 175), 13 July 2010, available at,http://ec.europa.eu/justice_home/fsj/privacy/docs/wpdocs/2010/ wp175_en.pdf.;
40. Article 29 Data Protection Working Party, 'Working document on data protection issues related to RFID technology' (WP 105), 19 January 2005, available at,http://ec.europa.eu/justice_home/ fsj/privacy/docs/wpdocs/2005/wp105_en.pdf..
41. See Elias Leake Quinn and Adam Reed, 'Envisioning the Smart Grid: Network Architecture, Information Control, and the Public Policy Balancing Act' (2010) 81 University of Colorado Law Review 833.
42. Ann Cavoukian, 'SmartPrivacy for the Smart Grid: Embedding Privacy into the Design of Electricity Conservation' (November 2009), available at,www.ipc.on.ca/images/resources/pbd-smartpriv-smartgrid.pdf..
43. I address the privacy risks inherent in robotics without expanding the discussion to the world of artificial intelligence, which presents an additional set of ethical issues. For the seminal exposition see Joseph Weizenbaum, Computers Power and Human Reason: From Judgment to Calculation (W.H. Freeman and Company, 1976).
44. Bill Gates, 'A robot in every home' (January 2007) Scientific American 58-65.
45. M. Ryan Calo, 'Robots and Privacy', in Patrick Lin, George Bekey, and Keith Abney (eds), Robot Ethics: The Ethical and Social Implications of Robotics ((MIT Press, Cambridge, MA forthcoming 2011).
46. See, eg, Rafe Needleman, 'Flying surveillance robots coming soon from Aeryon' (29 July 2009) Cnet News, available at http://news.cnet.com/ 8301-19882_3-10299166-250.html; also
47. see Noah Shachtman, 'Petagon's Cyborg Beetle Spies Take Off' (28 January 2009) Wired, available at www.wired.com/dangerroom/2009/01/pentagons-cybor/ (reporting on a Pentagon plan to inject surveillance technology into live insects making them remotely controllable audio devices-essentially 'bugging the bugs').
48. See generally Isaac Asimov and Karen A. Frenkel, Robots: Machines in Man's Image (Harmony Books, 1985);
49. Mary Shelley, Frankenstein (Bantam Classic, 2003), first published in 1818.
50. Calo, see n 36 above, at pp. 10-14; also see M. Ryan Calo, 'People Can Be So Fake: A New Dimension to Privacy and Technology Scholarship' (2010) 114 Penn State Law Review 809;
51. Ian Kerr, 'Bots, Babes, and the Californication of Commerce' (2004) 1 University of Ottawa Law & Technology Journal 285.
52. David Levy, Love þ Sex with Robots: The Evolution of Human-Robot Relationships (Harper Perennial, 2008).
53. More accurately, Asimov's first law reads: 'A robot may not injure a human being or, through inaction, allow a human being to come to harm'. Isaac Asimov, Runaround in I, Robot (Gnome Press, 1950);
54. see Roger Clarke, 'Asimov's Laws of Robotics: Implications for Information Technology', (December 1993) 26 IEEE Computer 53-61
55. (Part I) and (January 1994) 27 IEEE Computer 57-66 (Part II), available at,www.rogerclarke.com/SOS/Asimov.html..
56. S. and Marper v The United Kingdom 30562/04 [2008] ECHR 1581 (4 December 2008).
57. Teresa Kelton, 'Pharmacogenomics: The Re-Discovery of the Concept of Tailored Drug Therapy and Personalized Medicine' (2007) 19(3) Health Lawyer 1.
58. Berrie Rebecca Goldman, 'Pharmacogenomics: Privacy in the Era of Personalized Medicine' (2005) 4 Northwestern Journal of Technology and Intellectual Property 83;
59. Jennifer Gniady, 'Regulating Direct to Consumer Genetic Testing' (2008) 76 Fordham Law Review 2429.
60. Center for Democracy & Technology, 'Encouraging the Use of, and Rethinking Protections for De-Identified (and “Anonymized”) Health Data', June 2009, available at,www.cdt.org/files/pdfs/ 20090625_deidentify.pdf..
61. See, eg, Amy Harmon, 'Indian Tribe Wins Fight to Limit Research of Its DNA' (21 April 2010) NY Times, available at,www.nytimes.com/2010/ 04/22/us/22dna.html.
62. See, eg, Ting Shan, Shaokang Chen, Conrad Sanderson, and Brian Lovell, 'Towards Robust Face Recognition for Intelligent-CCTV based Surveillance using One Gallery Image' (2007) IEEE Conference on Advanced Video and Signal Based Surveillance 470-75.
63. Roi Carthy, 'Face.com Brings Facial Recognition To Facebook Photos' (24 March 2009) Techcrunch available at,http://techcrunch.com/2009/ 03/24/facecom-brings-facial-recognition-to-facebook-photos-we-have-invites..
64. The Economist, 'Inside the Googleplex', 30 August 2007, available at,www.economist.com/node/9719610..
65. Omer Tene, 'What Google Knows: Privacy and Internet Search Engines' (2008) Utah Law Review 1433;
66. Article 29 Data Protection Working Party, 'Opinion 1/2008 on data protection issues related to search engines', (WP 148),4 April 2008, available at,http://ec.europa.eu/ justice_home/fsj/privacy/docs/wpdocs/2008/wp148_en.pdf..
67. See, eg, Daniel Solove, 'Justice Scalia's Dossier: Interesting Issues about Privacy and Ethics', Concurring Opinions Blog, 29 April 2009, available at,www.concurringopinions.com/archives/2009/04/justice_scalias_2. html..
68. Jeffrey Rosen, 'The Web Means the End of Forgetting' (21 July 2010) NY Times, available at ,www.nytimes.com/2010/07/25/magazine/25privacy-t2.html.;
69. Michael Fertik and David Thompson, Wild West 2.0: How to Protect and Restore Your Online Reputation on the Untamed Social Frontier (American Management Association, 2010).
70. Daniel Solove, 'Justice Scalia's Dossier: Interesting Issues about Privacy and Ethics' (29 April 2009) Concurring Opinion Blog, available at,www.concurringopinions.com/archives/2009/04/justice_scalias_2. html..
71. Viktor Mayer-Schönberger, Delete: The Virtue of Forgetting in the Digital Age (Princeton University Press, 2009).
72. See Gonzales v Google, Inc., 234 F.R.D. 674 (N.D.Cal. 2006)
73. Cohen v Google, Inc., No. 100012/09, 2009 WL 2883410 (N.Y. Sup. Ct. 17 August 2009)
74. Civ. App. 1622/09 Google Israel v Brokertov (1 July 2010) (Israeli Supreme Court refuses to order Google to unmask anonymous defendant).
75. John Battelle, The Search: How Google and its Rivals Rewrote the Rules of Business and Transformed our Culture ((Portfolio, 2005).
76. See, eg, Google Flu Trends, available at,www.google.org/flutrends/.;
77. David Brin, The transparent society: will technology force us to choose between privacy and freedom? (Perseus Books, 1998).
78. 'Social graphs' are defined by Brad Fitzpatrick as 'the global mapping of everybody and how they're related'. Brad Fitzpatrick, 'Thoughts on the Social Graph' (17 August 2007) Bradfitz Blog, available at,http:// bradfitz.com/social-graph-problem/.;
79. see 'Untangling the social web' (2 September 2010) The Economist, available at,www.economist.com/ node/16910031. (registration may be required).
80. Caroline McCarthy, 'Facebook's half-billion milestone is official' (21 July 2010) CNET News, available at,http://news.cnet.com/8301-13577_3-20011227-36.html?tag=nl.e496..
81. Mary Madden and Aaron Smith, Reputation Management Online: How people monitor and maintain their identity through search and social media, (26 May 2010) Pew Internet & American Life Project,available at,www.pewinternet.org/Reports/2010/Reputation-Management.aspx. (hereinafter Pew Report).
82. Louise Story, 'Facebook Is Marketing Your Brand Preferences (With Your Permission)', NY Times, 7 November 2007, available at,http:// www.nytimes.com/2007/11/07/technology/07adco.html..
83. Louise Story, 'Apologetic, Facebook Changes Ad Program' (6 December 2007) NY Times, available at,www.nytimes.com/2007/12/06/ technology/06facebook.html..
84. Lane v Facebook, Inc., Case No. 5:08-CV-03845-RS (N.D. Cal. 12 August 2008).
85. Available at,http://swipely.com/..
86. Available at,http://blippy.com/..
87. Brad Stone, 'For Web's New Wave, Sharing Details Is the Point' (22 April 2010) NY Times, available at,http://dealbook.blogs.nytimes.com/ 2010/04/23/for-webs-new-wave-sharing-details-is-the-point..
88. See, eg, Chatroulette, available at,http://chatroulette.com/.;
89. Brad Stone, 'Chatroulette's Creator, 17, Introduces Himself' (13 February 2010) NY Times, available at,http://bits.blogs.nytimes.com/2010/02/ 13/chatroulettes-founder-17-introduces-himself/..
90. See Foursquare, available at,http://foursquare.com.;
91. Gowalla, available at,http://gowalla.com.;
92. Loopt, available at,http://www. loopt.com..
93. Maggie Shiels, 'Facebook launches Places location based service' (19 August 2010) BBC available at,www.bbc.co.uk/news/ technology-11020795..
94. Stephanie Goldberg, 'Young job-seekers hiding their Facebook pages' (29 March 2010) CNN, available at,http://edition.cnn.com/2010/TECH/ 03/29/facebook.job-seekers/index.html..
95. Also see danah boyd and Eszter Hargittai, 'Facebook Privacy Settings: Who Cares?' (2 August 2010) 15(8) First Monday, available at,http:// firstmonday.org/htbin/cgiwrap/bin/ojs/index.php/fm/article/view/3086/ 2589..
96. Chris Hoofnagle, Jennifer King, Su Li, and Joseph Turow, 'How Different are Young Adults from Older Adults When it Comes to Information Privacy Attitudes and Policies?' (14 April 2010), available at,http://papers.ssrn.com/sol3/papers.cfm?abstract_id=1589864..
97. Alessandro Acquisti and Ralph Gross, 'Imagined communities: Awareness, information sharing, and privacy on the Facebook' (2006) Privacy Enhancing Technologies (PET) Workshop, Lecture Notes in Computer Science 4258, Springer, 36-58, available at,www.heinz.cmu. edu/~acquisti/papers/acquisti-gross-facebook-privacy-PET-final.pdf..
98. danah boyd argues that '[i]t's easy to think that “public” and “private” are binaries.... But this binary logic isn't good enough for understanding what people mean when they talk about privacy. What people experience when they talk about privacy is more complicated than what can be instantiated in a byte.' danah boyd, 'Making Sense of Privacy and Publicity' (13 March 2010) SXSW, available at,www. danah.org/papers/talks/2010/SXSW2010.html..
99. Kate Raynes-Goldie, 'Aliases, creeping, and wall cleaning: Understanding privacy in the age of Facebook' (2010) 15 (1) First Monday, available at,http://firstmonday.org/htbin/cgiwrap/bin/ojs/index.php/fm/article/ view/2775/2432..
100. danah boyd, 'Friends, Friendsters, and MySpace Top 8: Writing Community Into Being on Social Network Sites', (December 2006) 11 (12) First Monday, available at,www.firstmonday.org/issues/ issue11_12/boyd/index.html..
101. See Kevin Bankston, 'Facebook's New Privacy Changes: The Good, The Bad, and The Ugly' (9 December 2009) Electronic Frontier Foundation Blog, available at ,www.eff.org/deeplinks/2009/12/facebooks-new-privacy-changes-good-bad-and-ugly.;
102. Michael Zimmer, '“But the Data is Already Public”: On the Ethics of Research in Facebook' (4 June 2010) Ethics and Information Technology.
103. Alice E. Marwick and danah boyd, 'I Tweet Honestly, I Tweet Passionately: Twitter Users, Context Collapse, and the Imagined Audience' (7 July 2010) New Media Society, available at,http://nms. sagepub.com/content/early/2010/06/22/1461444810365313..
104. Clive Thompson, 'The Age of Microcelebrity: Why Everyone's a Little Brad Pitt' (27 November 2007) Wired Magazine, available at,www. wired.com/techbiz/people/magazine/15-12/st_thompson..
105. Theresa M. Senft, Camgirls: Celebrity and Community in the Age of Social Networks (Peter Lang 2008).
106. Helen Nissenbaum, Privacy in Context: Technology, Policy, and the Integrity of Social Life (Stanford University Press 2009).
107. Helen Nissenbaum, 'Privacy as Contextual Integrity' (2004) 79 Washington Law Review 101.
108. Katz v United States, 389 U.S. 347 (1967).
109. Kevin Bankston, 'Facebook's New Privacy Changes: The Good, The Bad, and The Ugly' (9 December 2009) Electronic Frontier Foundation Blog, available at ,www.eff.org/deeplinks/2009/12/facebooks-new-privacy-changes-good-bad-and-ugly.;
110. Miguel Helft, 'Anger Leads to Apology From Google About Buzz' (14 February 2010) NY Times, available at,www.nytimes. com/2010/02/15/technology/internet/15google.html..
111. Jacqui Cheng, 'Facebook reevaluating Beacon after privacy outcry, possible FTC complaint' (29 November 2007) ArsTechnica, available at,http://arstechnica.com/tech-policy/news/2007/11/facebook-reevaluating-beacon-after-privacy-outcry-possible-ftc-complaint.ars..
112. Tom Krazit, 'Google settles Buzz lawsuit for $8.5M' (3 September 2010) Cnet News, available at http://news.cnet.com/8301-30684_3-20015620-265.html.
113. Miguel Helft, 'Critics Say Google Invades Privacy with New Service' (12 February 2010) NY Times, available at,http://www.nytimes.com/2010/02/13/ technology/internet/13google.html?_r=1..
114. 'Making Sense of Privacy and Publicity' (13 March 2010) SXSW, available at,http://www.danah.org/papers/talks/2010/SXSW2010. html..
115. See, eg, Michael Zimmer, '41% of Facebook Users Share Personal Information with a Frog' (19 August 2007) Michael Zimmer.org blog, available at,http://michaelzimmer.org/2007/08/19/41-of-facebook-users-share-personal-information-with-a-frog/..
116. See Information Commissioner's Office, A Report on the Surveillance Society (September 2006), available at,www.ico.gov.uk/upload/ documents/library/data_protection/practical_application/ surveillance_society_full_report_2006.pdf..
117. Consider the recent attempt in Germany to limit employers' use of Facebook for screening job applicants. David Jolly, 'Germany Plans Limits on Facebook Use in Hiring' (25 August 2010) NY Times, available at,www.nytimes.com/2010/08/26/business/global/26fbook. html..
118. For a new approach, see Corey Ciocchetti, 'The Future of Privacy Policies: A Privacy Nutrition Label Filled with Fair Information Practices' (2009) 26 John Marshall Journal of Computer and Information Law 1.
119. Laura Brandimarte, Alessandro Acquisti, and George Loewenstein, 'Misplaced Confidences: Privacy and the Control Paradox', in Ninth Annual Workshop on the Economics of Information Security (WEIS), 7-8 June 2010, Harvard University, available at,http://weis2010. econinfosec.org/papers/session2/weis2010_brandimarte.pdf..
120. 'Facebook Privacy: A Bewildering Tangle of Options (Illustration)' (12 May 2010) NY Times, available at,www.nytimes.com/interactive/2010/ 05/12/business/facebook-privacy.html..
121. Article 29 Data Protection Working Party, 'Opinion 1/2010 on the concepts of “controller” and “processor”' (WP 169), 16 February 2010, available at,http://ec.europa.eu/justice_home/fsj/privacy/docs/wpdocs/ 2010/wp169_en.pdf..
122. Article 29 Data Protection Working Party, 'Opinion 10/2006 on the processing of personal data by the Society for Worldwide Interbank Financial Telecommunication (SWIFT)' (WP 128), 22 November 2006, available at,http://ec.europa.eu/justice_home/fsj/privacy/docs/wpdocs/ 2006/wp128_en.pdf..
123. See, eg, Rebecca Wong, 'Social networking: A conceptual analysis of a data controller', (2009) 14 (5) Communications Law 142; Article 29 Data Protection Working Party, 'Opinion 5/2009 on Social Networking' (WP 163), 12 June 2009, available at,http://ec.europa.eu/justice_home/fsj/ privacy/docs/wpdocs/2009/wp163_en.pdf..
124. Article 4(1)(a) of the Directive. See Christopher Kuner, 'Internet Jurisdiction and Data Protection Law: An International Legal Analysis' (2010) 18 (2) International Journal of Law and Information Technology 176.
125. Mayer-Schönberger, see n 54 above; also see David Reid, 'France ponders right-to-forget law' (8 January 2010) BBC, available at,http:// news.bbc.co.uk/2/hi/programmes/click_online/8447742.stm..
126. Christopher Kuner, European Data Protection Law: Corporate Compliance and Regulation (2nd edn Oxford University Press, Oxford 2007) 151-232.
127. See recent discussion in Article 29 Data Protection Working Party, 'Opinion 3/2010 on the principle of accountability' (WP 173), 13 July 2010, paragraphs 55-57, available at,http://ec.europa.eu/justice_home/ fsj/privacy/docs/wpdocs/2010/wp173_en.pdf..
128. M. Ryan Calo, 'The Boundaries of Privacy Harm' (forthcoming, 2011) 86
129. Ruth Gavison, 'Privacy and the Limits of Law' (1980) 89 Yale Law Journal 421.