美国数据隐私政策展望
2018年5月实施的欧盟GDPR及2018年6月通过的《加利福尼亚消费者隐私法案》（CCPA）（将于2020年实施）将有关美国联邦综合性隐私法的讨论带入了新阶段。在越来越多的联邦和国际监管下，大型科技公司也呼吁进行法制改革：“2018年11月，在对NTIA的联邦隐私法进行意见征集的过程中，众多公司纷纷表示其现在赞成通过联邦隐私法”[96]
此时，一些关键的不确定因素可能在不久的将来影响美国联邦隐私法的结果：鉴于目前国会的僵局和即将到来的选举，各州和联邦政府隐私法间的紧张局势如何解决？取代各州立法的联邦政府立法会否成为无效的一般隐私法，将产生何种意外后果？联邦贸易委员会的职责是否有可能扩大？隐私盾诉讼、其他GDRP执法以及针对大型科技公司的待决反垄断诉讼将出现怎样的结果？
许多专家认为，鉴于国会和科技界重新表现出兴趣，形成的联邦隐私法与严格的CCPA相类似的可能性日益增大[97]。2020年生效的CCPA被视为国会采取行动的最后期限。出于隐私相关问题的复杂性，其他人士则持更为怀疑的态度[98]，包括“个人信息的定义、法律的范围、删除权、数据便携权、厂商管理、从设计着手保护隐私、联邦法取代州立法、补救措施、私人行动权等。对几乎已经无法妥协的国会而言，哪怕只解决其中一个问题都很困难”[99]。
联邦贸易委员会委员克里斯蒂·威尔逊（Christine Wilson）将正在讨论过程中的众多州政府隐私法称作“不可行的东拼西凑”[100]并主张加以取代。Swire警告称，联邦立法取代各州法律可能对多个行业的诸多州政府规定产生严重后果：“简言之，为避免对其他法律领域产生意外后果，联邦隐私优先条款需要考虑的法律影响范围远比许多人认为的范围要广泛得多”[101]。此外，如加州、纽约州等人口众多且颇具影响力的各州的代表可能不愿意由联邦政府接管解决此问题，尤其因为出现的任何联邦法可能都远不如CCPA和其他州政府立法严格。
Solove建议国会授予联邦贸易委员会特别的规则制定权，制定全面的隐私法规。这将扩大委员会的权力范围，不再属于特定行业法下的规则制定机构。目前，委员会的规则制定能力“有限而烦琐”——因此，国会需要赋予委员会这一权力。[102]
【注释】
[1]Solove，D.J.（2010）.Understanding privacy.Cambridge，MA：Harvard University Press.
[2]Acquisti，A.，Brandimarte，L.，and G.Loewenstein.2015.Privacy and human behavior in the age of information.Science 347（6221）：509-514.
[3]Igo，S.E.（2018）.The known citizen：A history of privacy in modern America.Cambridge，Ma.：Harvard University Press.
[4]Solove，D.J.（2006）.A taxonomy of privacy.University of Pennsylvania Law Review，154（3），477.
[5]Solove，D.J.（2006）.A taxonomy of privacy.University of Pennsylvania Law Review，154（3），477.
[6]Solove，D.J.（2006）.A taxonomy of privacy.University of Pennsylvania Law Review，154（3），477.
[7]Solove，D.J.（2006）.A taxonomy of privacy.University of Pennsylvania Law Review，154（3），477.
[8]Solove，D.J.（2006）.A taxonomy of privacy.University of Pennsylvania Law Review，154（3），477.
[9]Nissenbaum，H.2010.Privacy in context：Technology，policy，and the integrity of social life.Stanford，CA：Stanford University Press.
[10]Boyd，d.：Networked privacy.Surveillance&Society 10（3/4），348-350（2012）.
[11]Mai，J.E.（2016）.Big data privacy：The datafication of personal information.The Information Society，32（3），192-199.
[12]Kitchin，R.，&Lauriault，T.P.（2016），Towards critical data studies：charting and unpacking data assemblages and their work.Retrieved from：http：//www.nuim.ie/progcity/.
[13]Winter，J.S.（2013）.Surveillance in ubiquitous network societies：normative conflicts related to the consumer in-store supermarket experience in the context of the Internet of Things.Ethics and Information Technology.DOI：10.1007/s10676-013-9332-3.
[14]Winter，J.S.（2017）.Big data and information/power asymmetries：What role for scholars？In C.George（Ed）.，Communicating with Power（pp.85-98）.ICA Annual Conference Book Series.Bern：Peter Lang.
[15]Angwin，J.（2015，November 9）.Own a Vizio smart TV？It's watching you.”ProPublica.Retrieved from：https：//www.propublica.org/article/own-a-vizio-smart-tv-itswatchingyou.
[16]Herbert，D.G.（2016）.This company has built a profile on every American adult.Bloomberg Businessweek，August 5.Retrieved from：https：//www.bloomberg.com/news/articles/2016-08-05/this-company-has-built-a-profileonevery-american-adult.
[17]Schwartz，P.M.，&Solove，D.（2011）.The PII problem：Privacy and a new concept of personally identifiable information.New York University Law Review，86，1814-1894.
[18]Williams，B.A.，Brooks，C.F.，&Shmargad，Y.（2018）.How algorithms discriminate based on data they lack：Challenges，solutions，and policy implications.Journal of Information Policy，8，78-115.
[19]Chen，X.W.，&Lin，X.（2014）.Big data deep learning：Challenges and perspectives.IEEE Access，2，514-525.
[20]Jordan，M.I.，&Mitchell，T.M.（2015）.Machine learning：trends，perspectives，and prospects.Science，349（6245），255-260.
[21]Chen，X.W.，&Lin，X.（2014）.Big data deep learning：Challenges and perspectives.IEEE Access，2，514-525.
[22]Jordan，M.I.，&Mitchell，T.M.（2015）.Machine learning：trends，perspectives，and prospects.Science，349（6245），255-260.
[23]Bates，D.W.，Saria，S.，Ohno-Machado，L.，Shah，A.and Escobar，G.（2014）.Big data in health care：using analytics to identify and manage high-risk and high-cost patients.Health Affairs，33（7），1123-1131.
[24]Siegel，E.（2016）.Predictive analytics：The power to predict who will click，buy，lie，or die Hoboken，NJ：John Wiley&Sons.
[25]Montgomery，K.，Chester，J.，&Kopp，K.（2018）.Health wearables：Ensuring fairness，preventing discrimination，and promoting equity in an emerging Internet-of-Things environment.Journal of Information Policy，8，34-77.
[26]Pasquale，F.（2015）.The black box society：The secret algorithms that control money and information.Harvard University Press，Cambridge.
[27]Abdul，A.，Vermeulen，J.，Wang，D.，Lim，B.Y.and Kankanhalli，M.（2017），“Trends and trajectories for explainable，accountable，and intelligible systems：an HCI research agenda”，CHI 2018，April 21-26，Montreal.
[28]Burrell，J.（2016）.How the machine‘thinks'：Understanding opacity in machine learning algorithms.Big Data&Society January-June，1-12.
[29]Faraj，S.，Pachidi，S.，&Sayegh，K.（2018）.Working and organizing in the age of the learning algorithm.Information and Organization，28（1），62-70.
[30]Barocas，S.，&Selbst，A.D.（2016）.Big data's disparate impact.California Law Review，104.
[31]Jordan，M.I.，&Mitchell，T.M.（2015）.Machine learning：trends，perspectives，and prospects.Science，349（6245），255-260.
[32]European Parliament and Council of the European Union.（2017）.General data protection regulation.Retrieved from：https：//gdpr-info.eu/.
[33]Kuner，C.，Svantesson，D.J.B.，Cate，F.H.，Lynskey，O.，&Millard，C.（2017）.Machine learning with personal data：is data protection law smart enough to meet the challenge？International Data Privacy Law，7（1），1-2.
[34]Winter，J.S.，&Davidson，E.（2019）.Governance of artificial intelligence and personal health information.Digital Policy，Regulation and Governance（DPRG）.Special issue on“Artificial Intelligence：Beyond the hype？”Doi：10.1108/DPRG-08-2018-0048.
[35]Winter，J.S.，&Davidson，E.（2019）.“Big data governance of personal health information and challenges to contextual integrity.”The Information Society，35（1），36-51.Doi：10.1080/01972243.2018.1542648.
[36]Kuner，C.，Svantesson，D.J.B.，Cate，F.H.，Lynskey，O.，&Millard，C.（2017）.Machine learning with personal data：is data protection law smart enough to meet the challenge？International Data Privacy Law，7（1），1-2.
[37]Xiao，C.，Choi，E.，&Sun，J.（2018）.Opportunities and challenges in developing deep learning models using electronic health records data：a systematic review.Journal of the American Medical Informatics Association，25（10），1419-1428.
[38]Berners-Lee，T.（2000）.Weaving the Web：The past，present and future of the World Wide Web by its inventor.London：Texere.
[39]Breslin，J.，Passant，A.，&Decker，S.（2009）.The Social Semantic Web.Heidelberg：Springer-Verlag.
[40]Heath，T.，&Bizer，C.（2011）.Linked data：Evolving the Web into a global data space.Synthesis lectures on the Semantic Web：Theory and technology，1（1），1-136.
[41]Taylor，R.D.（2017）.The next stage of U.S.communications policy：The emerging Embedded Infosphere.Telecommunication Policy，41（10），1039-1055.
[42]Winter，J.S.（2017）.Big data and information/power asymmetries：What role for scholars？In C.George（Ed）.，Communicating with Power（pp.85-98）.ICA Annual Conference Book Series.Bern：Peter Lang.
[43]Lipman，R.（2016）.Online privacy and the invisible market for our data（January 18，2016）.Penn State Law Review 777（2016）.Retrieved from：https：//ssrn.com/abstract=2717581.
[44]Singer，N.，&Rao，P.S.（2018，May 20）.U.K.vs.U.S.：How much of your personal data can you get？The New York Times.Retrieved from：https：//www.nytimes.com/interactive/2018/05/20/technology/what-data-companies-have-on-you.html.
[45]Davenport，T.H.，Barth，P.，&Bean，R.（2012）.“How‘big data'is different.”Retrieved from http：//sloanreview.mit.edu/article/how-big-data-is-different/.
[46]Gangadharan，S.（Ed.）（2014）.Data and discrimination：Collected essays.Washington，DC：Open Technology Institute-New America Foundation.
[47]Federal Trade Commission.（2016a）.Big data：A tool for inclusion or exclusion？Understanding the issues.Retrieved from：https：//www.ftc.gov/system/files/documents/reports/big-datatool-inclusion-or-exclusion-understandingissues/160106big-data-rpt.pdf.
[48]Pasquale，F.（2017，November 29）.Algorithms：How companies'decisions about data and content impact consumers.”Written testimony of Professor Frank Pasquale，University of Maryland before the United States House of Representatives Committee on Energy and Commerce Subcommittee on Digital Commerce and Consumer Protection.
[49]Smith，L.（2017）.Unfairness by algorithm：Distilling the harms of automated decision-making.Washington，DC：Future of Privacy Forum.Retrieved from：https：//fpf.org/wpcontent/uploads/2017/12/FPF-Automated-Decision-Making-Harmsand-Mitigation-Charts.pdf.
[50]McFarland，M.（2016，June 10）.What Happens When Your Search Engine is First to Know You Have Cancer？The Washington Post.Retrieved from https：//www.washingtonpost.com/news/innovations/wp/2016/06/10/what-happens-when-your-search-engine-is-first-toknow-you-have-cancer/.
[51]Barocas，S.，&Selbst，A.D.（2016）.Big data's disparate impact.California Law Review，104.
[52]Barocas，S.，&Selbst，A.D.（2016）.Big data's disparate impact.California Law Review，104.
[53]Angwin，J.，Larson，J.，Mattu，S.，&Kirchner，L.（2016）.Machine bias.ProPublica.Retrieved from https：//www.propublica.org/article/machine-bias-risk-assessments-in-criminalsentencing.
[54]Barocas，S.，&Selbst，A.D.（2016）.Big data's disparate impact.California Law Review，104.
[55]Solove，D.J.（2016）.The virtues of anonymity.The New York Times.Retrieved from：https：//www.nytimes.com/roomfordebate/2011/06/21/youre-mad-youre-on-youtube/the-virtues-of-anonymity.
[56]Gellman，R.，&Dixon，P.（2011）.Many failures：A brief history of privacy self-regulation in the United States.World Privacy Forum.Retrieved from：http：//www.worldprivacyforum.org/www/wprivacyforum/pdf/WPFselfregulationhistory.pdf.
[57]Solove，D.J.（2019，April 22）.Will the United States finally enact a federal comprehensive privacy law？Tech-Privacy.Retrieved from：https：//teachprivacy.com/will-us-finallyenact-federal-comprehensive-privacy-law/.
[58]Federal Trade Commission Act of 1914（incorporating U.S.SAFE WEB amendments of 2006）.Retrieved from：Federal Trade Commission Act Incorporating U.S.SAFE WEB Act amendments of 2006.
[59]United States Department of Justice.（2019，April 23）.Electronic Communications Privacy Act 1986.Retrieved from：https：//it.ojp.gov/Privacy Liberty/authorities/statutes/1285.
[60]Freeman，J.（2017，October 2）.Computer Fraud and Abuse Act（CFAA）.Retrieved from：https：//freemanlaw-pllc.com/computer-fraud-abuse-act-cfaa/）.
[61]United States Department of Health and Human Services.（nd）.HIPAA for professionals.Retrieved from：https：//www.hhs.gov/hipaa/for-professionals/index.html.
[62]Financial Services Modernization Act of 1999.United States Congress.Retrieved from：https：//www.congress.gov/bill/106th-congress/senate-bill/900.
[63]Heath，J.C.（2019）.What is the Fair Credit Reporting Act？Retrieved from：https：//www.lexingtonlaw.com/credit-education/fair-credit-reporting-act.
[64]Children's Online Protection Act of 1998.United States Congress.Retrieved from：http：//uscode.house.gov/view.xhtml？req=granuleid%3AUSC-prelim-title15-section6501&edition=prelim.
[65]Federal Trade Commission.（nd）.Protecting consumer privacy and security.Retrieved from：https：//www.ftc.gov/news-events/media-resources/protecting-consumer-privacy-security.
[66]Federal Trade Commission.（2016b）.Privacy&data security update：2016.https：//www.ftc.gov/system/files/documents/reports/privacy-data-security-update-2016/privacy_and_data_security_update_2016_web.pdf.
[67]Federal Trade Commission.（2017）.Privacy&data security update：2017.Retrieved from：https：//www.ftc.gov/system/files/documents/reports/privacy-data-security-update-2017-overview-commissions-enforcement-policy-initiativesconsumer/privacy_and_data_security_update_2017.pdf.
[68]Federal Trade Commission.（2016b）.Privacy&data security update：2016.https：//www.ftc.gov/system/files/documents/reports/privacy-data-security-update-2016/privacy_and_data_security_update_2016_web.pdf.
[69]Federal Trade Commission.（2017）.Privacy&data security update：2017.Retrieved from：https：//www.ftc.gov/system/files/documents/reports/privacy-data-security-update-2017-overview-commissions-enforcement-policy-initiativesconsumer/privacy_and_data_security_update_2017.pdf.
[70]Hoofnagle，C.J.（2016）.Federal Trade Commission privacy law and policy.New York：Cambridge University Press.
[71]Council on Foreign Relations.（2018）.Reforming the U.S.approach to data protection and privacy.Retrieved from：https：//www.cfr.org/report/reforming-us-approach-dataprotection.
[72]Kang，C.（2019）.F.T.C.approves Facebook fine of about$5 billion.New York Times.Retrieved from：https：//www.nytimes.com/2019/07/12/technology/facebook-ftc-fine.html.
[73]Federal Communication Commission.（nd）.What we do.Retrieved from：https：//www.fcc.gov/about-fcc/what-we-do.
[74]Federal Communication Commission.（2016，October 27）.FCC adopts broadband consumer privacy rules.Retrieved from：https：//www.fcc.gov/document/fcc-adopts-broadbandconsumer-privacy-rules.
[75]Fung，B.（2017）.Trump has signed repeal of the FCC privacy rules.Here's what happens next.Retrieved from https：//www.washingtonpost.com/news/the-switch/wp/2017/04/04/trumphas-signed-repeal-of-the-fcc-privacy-rulesheres-what-happens-next/.
[76]Feld，H.，Gilbert，D.，&Lewis，C.（2017）.Broadband privacy.Retrieved from：https：//www.publicknowledge.org/issues/broadband-privacy.
[77]Federal Trade Commission.（2015）.Trans-Atlantic privacy protection.Retrieved from：https：//www.ftc.gov/news-events/blogs/business-blog/2015/03/trans-atlantic-privacyprotection.
[78]Gibbs，S.（2015，October 6）.What is‘Safe Harbour’and why did the EUCJ just declare it invalid？The Guardian.Retrieved from：https：//www.theguardian.com/technology/2015/oct/06/safe-harbour-european-courtdeclare-invalid-data-protection.
[79]Lomas，N.（2019，May 28）.EU-US Privacy Shield complaint to be heard by Europe's top court in July.Tech-Crunch.Retrieved from：https：//techcrunch.com/2019/05/28/eu-us-privacyshield-complaint-to-be-heard-by-europestop-court-in-july/.
[80]Federal Trade Commission.（2015）.Trans-Atlantic privacy protection.Retrieved from：https：//www.ftc.gov/news-events/blogs/business-blog/2015/03/trans-atlantic-privacyprotection.
[81]Lomas，N.（2019，May 28）.EU-US Privacy Shield complaint to be heard by Europe's top court in July.Tech-Crunch.Retrieved from：https：//techcrunch.com/2019/05/28/eu-us-privacyshield-complaint-to-be-heard-by-europestop-court-in-july/.
[82]Meyer，D.（2018，November 29）.In the wake of GDPR，will the U.S.embrace data privacy？Fortune.Retrieved from：http：//fortune.com/2018/11/29/federal-data-privacy-law/.
[83]Meyer，D.（2018，November 29）.In the wake of GDPR，will the U.S.embrace data privacy？Fortune.Retrieved from：http：//fortune.com/2018/11/29/federal-data-privacy-law/.
[84]Meyer，D.（2018，November 29）.In the wake of GDPR，will the U.S.embrace data privacy？Fortune.Retrieved from：http：//fortune.com/2018/11/29/federal-data-privacy-law/.
[85]Lashinsky，A.（2019，March 1）.Data privacy legislation is coming for Big Tech.Retrieved from：http：//fortune.com/2019/03/01/data-privacy-legislation-us/.
[86]Solove，D.J.（2019，April 22）.Will the United States finally enact a federal comprehensive privacy law？Tech-Privacy.Retrieved from：https：//teachprivacy.com/will-us-finallyenact-federal-comprehensive-privacy-law/.
[87]Kang，C.，&Frenkel，S.（2018）.Facebook says Cambridge Analytica harvested data of up to 87 million users.New York Times.Retrieved from：https：//www.nytimes.com/2018/04/04/technology/mark-zuckerberg-testify-congress.html.
[88]Serrato，J.K.，Cwalina，C.，Rudawski，A.，Coughlin，T，&Fardelmann，K.（2018）.US states pass data protection laws on heels of the GDPR.Retrieved from：https：//www.dataprotectionreport.com/2018/07/u-s-statespass-data-protection-laws-onthe-heels-of-the-gdpr/.
[89]Meyer，D.（2018，November 29）.In the wake of GDPR，will the U.S.embrace data privacy？Fortune.Retrieved from：http：//fortune.com/2018/11/29/federal-data-privacy-law/.
[90]Rashid，F.Y.（2019，May 30）.New York considers its own GPDR-style data law.Decipher.Retrieved from：https：//duo.com/decipher/new-york-considers-its-own-gdpr-style-datalaw.
[91]Lima，C.，&Hendel，J.（2019，February 21）.California Democrats to Congress：Don't bulldoze our privacy law.Retrieved from：https：//www.politico.com/story/2019/02/21/congressdata-privacy-california-1185943.
[92]Langheinrich，M.（2001）.Privacy by design：Principles of privacy-aware ubiquitous systems.In Proceedings of the 3rd International Conference on Ubiquitous Computing（pp.273-291）.London：Springer-Verlag.
[93]Cavoukian，A.，&Kursawe，K.（2012）.Implementing privacy by design：The smart meter case.Proceedings of the 2012 IEEE International Conference on Smart Grid Engineering（pp.1-8）.Piscataway，NJ：IEEE.
[94]Deloitte.（nd）.Privacy by Design：Setting a new standard for privacy certification.Retrieved from：https：//www2.deloitte.com/content/dam/Deloitte/ca/Documents/risk/ca-en-ersprivacy-by-design-brochure.PDF.
[95]Deloitte.（nd）.Privacy by Design：Setting a new standard for privacy certification.Retrieved from：https：//www2.deloitte.com/content/dam/Deloitte/ca/Documents/risk/ca-en-ersprivacy-by-design-brochure.PDF.
[96]Solove，D.J.（2019，April 22）.Will the United States finally enact a federal comprehensive privacy law？Tech-Privacy.Retrieved from：https：//teachprivacy.com/will-us-finallyenact-federal-comprehensive-privacy-law/.
[97]Rayome，A.D.（2019，March 8）.Will we see a federal privacy law in the US？TechRepublic.Retrieved from：https：//www.techrepublic.com/article/will-we-see-a-federal-privacy-lawin-the-us/.
[98]Blumenthal，P.（2018，July 27）.The last time Congress threatened to enact digital privacy laws，it didn't go so well.HuffPost.Retrieved from：https：//www.huffingtonpost.com/entry/congress-digitalprivacylaws_us_5af0c587e4b0ab5c3d68b98b.
[99]Solove，D.J.（2019，April 22）.Will the United States finally enact a federal comprehensive privacy law？Tech-Privacy.Retrieved from：https：//teachprivacy.com/will-us-finallyenact-federal-comprehensive-privacy-law/.
[100]Patrick，K.（2019，April 5）.FTC says fed privacy law should preempt all state laws.InsideSources.Retrieved from：https：//www.insidesources.com/ftc-says-fed-privacy-lawshould-preempt-all-state-laws/.
[101]Swire，P.（2019，January 10）.US federal privacy preemption part 2：Examining preemption proposals.Retrieved from：https：//iapp.org/news/a/us-federal-privacy-preemption-part-2-examining-preemption-proposals/.
[102]Solove，D.J.（2019，April 22）.Will the United States finally enact a federal comprehensive privacy law？Tech-Privacy.Retrieved from：https：//teachprivacy.com/will-us-finallyenact-federal-comprehensive-privacy-law/.