<?xml version="1.0" encoding="UTF-8"?>
<modsCollection xmlns="http://www.loc.gov/mods/v3">
<mods ID="dipersio-2024-selling">
    <titleInfo>
        <title>Selling Personal Information: Data Brokers and the Limits of US Regulation</title>
    </titleInfo>
    <name type="personal">
        <namePart type="given">Denise</namePart>
        <namePart type="family">DiPersio</namePart>
        <role>
            <roleTerm authority="marcrelator" type="text">author</roleTerm>
        </role>
    </name>
    <originInfo>
        <dateIssued>2024-05</dateIssued>
    </originInfo>
    <typeOfResource>text</typeOfResource>
    <relatedItem type="host">
        <titleInfo>
            <title>Proceedings of the Workshop on Legal and Ethical Issues in Human Language Technologies @ LREC-COLING 2024</title>
        </titleInfo>
        <name type="personal">
            <namePart type="given">Ingo</namePart>
            <namePart type="family">Siegert</namePart>
            <role>
                <roleTerm authority="marcrelator" type="text">editor</roleTerm>
            </role>
        </name>
        <name type="personal">
            <namePart type="given">Khalid</namePart>
            <namePart type="family">Choukri</namePart>
            <role>
                <roleTerm authority="marcrelator" type="text">editor</roleTerm>
            </role>
        </name>
        <originInfo>
            <publisher>ELRA and ICCL</publisher>
            <place>
                <placeTerm type="text">Torino, Italia</placeTerm>
            </place>
        </originInfo>
        <genre authority="marcgt">conference publication</genre>
    </relatedItem>
    <abstract>A principal pillar of the US Blueprint for an AI Bill of Rights is data privacy, specifically, that individuals should be protected from abusive practices by data collectors and data aggregators, and that users should have control over how their personal information is collected and used. An area that spotlights the need for such protections is found in the common practices of data brokers who scrape, purchase, process and reassemble personal information in bulk and sell it for a variety of downstream uses. Such activities almost always occur in the absence of users’ knowledge or meaningful consent, yet they are legal under US law. This paper examines how data brokers operate, provides some examples of recent US regulatory actions taken against them, summarizes federal efforts to redress data broker practices and concludes that as long as there continues to be no comprehensive federal data protection and privacy scheme, efforts to control such behavior will have only a limited effect. This paper also addresses the limits of informed consent on the use of personal information in language resources and suggests a solution in an holistic approach to data protection and privacy across the data/development life cycle.</abstract>
    <identifier type="citekey">dipersio-2024-selling</identifier>
    <location>
        <url>https://aclanthology.org/2024.legal-1.7</url>
    </location>
    <part>
        <date>2024-05</date>
        <extent unit="page">
            <start>39</start>
            <end>46</end>
        </extent>
    </part>
</mods>
</modsCollection>

%0 Conference Proceedings
%T Selling Personal Information: Data Brokers and the Limits of US Regulation
%A DiPersio, Denise
%Y Siegert, Ingo
%Y Choukri, Khalid
%S Proceedings of the Workshop on Legal and Ethical Issues in Human Language Technologies @ LREC-COLING 2024
%D 2024
%8 May
%I ELRA and ICCL
%C Torino, Italia
%F dipersio-2024-selling
%X A principal pillar of the US Blueprint for an AI Bill of Rights is data privacy, specifically, that individuals should be protected from abusive practices by data collectors and data aggregators, and that users should have control over how their personal information is collected and used. An area that spotlights the need for such protections is found in the common practices of data brokers who scrape, purchase, process and reassemble personal information in bulk and sell it for a variety of downstream uses. Such activities almost always occur in the absence of users’ knowledge or meaningful consent, yet they are legal under US law. This paper examines how data brokers operate, provides some examples of recent US regulatory actions taken against them, summarizes federal efforts to redress data broker practices and concludes that as long as there continues to be no comprehensive federal data protection and privacy scheme, efforts to control such behavior will have only a limited effect. This paper also addresses the limits of informed consent on the use of personal information in language resources and suggests a solution in an holistic approach to data protection and privacy across the data/development life cycle.
%U https://aclanthology.org/2024.legal-1.7
%P 39-46

Markdown (Informal)

[Selling Personal Information: Data Brokers and the Limits of US Regulation](https://aclanthology.org/2024.legal-1.7) (DiPersio, LEGAL-WS 2024)

• Selling Personal Information: Data Brokers and the Limits of US Regulation (DiPersio, LEGAL-WS 2024)

ACL

• Denise DiPersio. 2024. Selling Personal Information: Data Brokers and the Limits of US Regulation. In Proceedings of the Workshop on Legal and Ethical Issues in Human Language Technologies @ LREC-COLING 2024, pages 39–46, Torino, Italia. ELRA and ICCL.