[comp.society] Ownership of information about yourself

hunter-larry@YALE.ARPA (Larry Hunter) (03/01/88)

In discussing Private Agreements to Restrict Information, Guthery at
asc.sdr.slb.com writes:

   All information about Mr. Hanly's person is his property and he can
   do with it as he pleases....

I'm not a lawyer, but I write a lot on privacy and technology issues.
Although this position seems to be clearly desirable to me, it is NOT
the law.

Information has occasionally been treated as intangible property, but
you have no property interests whatsoever in information about yourself.
If someone who has information about you decides to sell it or give it
away, you have absolutely nothing to say about it.   The only exceptions
to this are explicit prohibitions in contracts you enter into and the
few laws like the Fair Credit Reporting Act or libel law that proscribe
activity around particular uses of information.   If the phone company
wants to sell your long distance records to someone, they can.  If your
employer wants to disclose your income, he can.  If your bank or creditors
wants to sell your account information they can.   Recordkeepers may
even be forced to keep information about you that they do not want to,
and then forced to turn it over to the government on demand.  There is
no legislative or constitutional prohibition on disclosing or selling
information about individuals.  This was annunciated quite clearly in
the US Supreme court's single most important case of the information
age, California Banker's Association v. Schultz (416 US 21, 39 L Ed 2nd 812,
94 S Ct 1494, decided April 1974).   I think it is worth describing
this case in some detail because it is not well known and its implications
are so important:

 The Bank Secrecy Act of 1970... authorizes the Secretary of the Treasury
 to prescribe by regulation certain bank recordkeeping and reporting
 requirements....  The Act is designed to obtain financial information
 having a 'high degree of usefulness in criminal, tax or regulatory
 investigations or proceedings.'  Title I of the Act requires financial
 institutions to maintain records of their customers' identities, to
 make microfilm copies of checks and similar instruments, and to keep
 records of certain other items.  Title II of the act requires the
 reporting to the Federal Government of certain foreign and domestic
 financial transactions.... Suits were brought by various plantiffs
 challenging the constitutionality of the Act, principly on the ground
 that it violated the Fourth Amendment, because when the bank makes and
 keeps records under compulsion of the Secretary's regulations it acts
 as a Government agent and thereby engages in the seizure of its customers'
 records.... [The ACLU, a plantiff, also attacked] on Fifth Amendment
 grounds, as violating the priviledge against self-incrimination....

 [The Supreme Court, in a decision authored by Rehnquist, held:] There
 is a sufficient nexus between the evil Congress sought to address and
 the recordkeeping procedure to meet the requirements of the Due Process
 Clause of the Fifth Amendment...  The regulations for the reporting
 by financial institutions of domestic financial transactions are
 reasonable and abridge no Fourth Amendment rights of such institutions,
 which are themselves parties to the transactions involved, since neither
 `incorporated nor unincorporated associations [have] an unqualified
 right to conduct their affairs in secret.'...  The depositor plantiffs...
 lack standing to challenge the domestic reporting regulations.  It is
 therefore unnecessary to consider contentions made by the bank and
 depositor plantiffs that the regulations are constitutionally defective
 because they do not require the financial institution to notify the
 customer that a report will be filed....  The bank plantiffs cannot
 vicariously assert Fifth Amendment claims on behalf of their depositors
 under the circumstances present here, since the depositors cannot assert
 those claims themselves....  [Quoting a previous tax case:] 'It is
 difficult to see how the summoning of a third party or the records of
 a third party can violate the rights of the taxpayer, even if criminal
 prosecution is contemplated or in progress.'

One very important thing to note here is that the depositors (the people
about whom the information is kept) DO NOT EVEN HAVE STANDING.  That
means they cannot bring action in a court of law about this issue.  The
disposition of third party records about you is none of your business.
You have NO property right in information that others have about you.
Sorry.

                                       Larry Hunter

norm@ontenv.uucp (Norman S. Soley) (03/07/88)

The Province of Ontario's new law on "Freedom of Information and
Protection of Individual Privacy" lays out some interesting concepts 
in this area. 

	1)	No government agency may collect information about 
		a citizen without his/her knowledge (except in the
		pursuit of a criminal investigation)

	2)	information about you may not be collected from third 
		parties without your express written consent. 

	3)	When information is collected it must be stated for 
		what purpose it will be used and uses outside of the 
		original intent are not permitted. 

	4) 	Any citizen has the right to examine government
		records regarding themself. And apply for corrections
		if the information is inaccurate (arbited by a
		quasi-judicial panel). 

This is not the letter of the law but certianly the spirit as it is
being conveyed to the provinces civil servants. 

It also raises some complicated issues about electronic record
keeping. The act requires civil servants to interpret any information
which is stored in a coded form but there is no specification of
interpret to what. English, French, or some other language, or on diskette 
or by telecommunications link. How can I as a citizen be certian that
computerized records about me are accurate? Should I accept a printed
transcript provided by a civil servant? or demand to be allowed to log
in to the Government mainframe and run searches myself? That of course
comprimises the privacy of other citizens records. It will be
interesting to see what comes out of this over the next couple of
years. 

"Definitely speaking for myself on this one, in no way should anything
in this posting be considered as other than the opinion of a private
citizen"

Norman Soley