Aggregation

Aggregation is a form of INFORMATION PROCESSING privacy harm under the Solove taxonomy. Aggregation is defined as "combining various pieces of personal information."

A credit bureau combining an individual's payment history from multiple creditors.

Occurrences

• AI Impersonation Through Deepfakes Troubles Bollywood (November 2023)
• Advertising Agency Uses Geofencing to Target Women Near Abortion Centers (2017)
• Allstate’s Insurance Pricing Algorithm Based on Non-Risk Factors (2013)
• Amazon Extending Prime into Whole Foods (2017)
• Amazon Violates Child Privacy Law (1 June 2023)
• Amazon to Pay $25 Million to Settle Children’s Privacy Charges (May 2023)
• Amazon's Alexa Asking Questions (July 2020)
• Anthem Data Breach (2014)
• Apple Faces Lawsuit Over AirTag Stalking Dangers (6 December 2022)
• Apps Sending Personal Information to Facebook (December 2018)
• Apps With Eavesdropping Software (December 2017)
• Automated Tenants Background Checks (May 2020)
• B.C. Canadian Tire stores broke privacy laws with facial ID technology (20 April 2023)
• Baltimore Police Flies Planes With Cameras (July 2019)
• Barred From Grocery Stores by Facial Recognition British merchants (June 2023)
• BetterHelp Privacy Harm (3 March 2023)
• Bolsa Familia Social Welfare Program in Brazil (October 2020)
• Brainwave Tracking of Students in Class (2017)
• California Can Share Gun Owners' Personal Information With Researchers (September 2021)
• Cambridge Analytica and Facebook Scandal (2016)
• Cashier in the Supermarket Asking for Postal Code (October 2020)
• Child Safety Smartwatches Easy to Hack (2017)
• China Keeping Records on Muslims (February 2020)
• Chinese Database With Details on More Than Two Million People (September 2020)
• Chinese facial recognition company exposes the database of people's locations (13 February 2019)
• Clearview AI Settles Lawsuit and Limits the Sales of Facial Recognition Database (May 2020)
• Clearview's Facial Recognition App (2020)
• Condo Board's Illegal Cameras (26 August 2023)
• Contact Tracing Apps (July 2020)
• Contact Tracing Software Sells People’s Information (July 2020)
• DHS Buys Cellphone Location Data (October 2020)
• DNA Testing Companies Share Data with Third Parties (November 2017)
• Data Analytical Services (DAS) Program, Formerly Known as Hemisphere, (November 2023)
• Don't Believe Everything you Hear: How Cybercriminals Are Exploiting AI Voice Cloning (April 2023)
• Equifax Data Breach (2017)
• Exploring the Perceptions of Location Sharing: Privacy vs. Affection (2023)
• FBI Using Travel Company Data to Track People (July 2020)
• Face Search Engine PimEyes Blocks Searches of Children’s Faces (October 2023)
• Facebook Acquires GIPHY
• Facebook Allowed Third Parties Read Users’ Messages (December 2019)
• Facebook Asking Users to Complete Their Profiles (2013)
• Facebook and Cambridge Analytica Privacy Scandal (2016)
• Facebook loses Belgian privacy case, faces fine of up to $125 million (16 February 2018)
• Facebook's "People You May Know" Feature (November 2017)
• Facebook's “Pseudoscience” Ad Category (April 2020)
• Ford's GPS Tracking Speed (January 2014)
• Geofencing Technology To Target Catholics At Mass (February 2020)
• Geofencing Used To Monitor Antiracism Protesters (August 2020)
• Glitch in India's Biometric Welfare System (October 2019)
• Google Acquires Fitbit (2019)

... further results

Laws and Regulations

The following laws and regulations address the Aggregation harm.

• 44 U.S.C. Chapter 33 (United States)
• 5 U.S.C. §552a (United States)
• 653-13.2(148, 272C). Standards of practice—appropriate pain management. (United States, Iowa)
• Alabama Data Breach Notification Act of (2018) (United States, Alabama)
• Americans with Disabilities Act of 1990 (United States)
• CH. 48.1. Consumer Privacy Protection Act. (United States, Rhode Island)
• CH. 62. Protection of Personal Information. (United States, Vermont)
• CH. 70.02. Medical Records—Health Care Information Access and Disclosure. (United States, Washington)
• CH. 90. Medical Records. (United States, North Carolina)
• Cable Communications Policy Act of 1984 (United States)
• California Consumer Privacy Act of (2018) (United States, California)
• California Privacy Rights Act (United States, California)
• Children's Online Privacy Protection Rule (2000) (United States)
• Clinical Laboratory Improvement Amendments (United States)
• Communications Act of 1934 (United States)
• Cybersecurity Information Sharing Act of 2015 (United States)
• Do-Not-Call Implementation Act (United States)
• FLA. HB 1189 (United States, Florida)
• Foreign Intelligence Surveillance Act of 1978 (United States)
• Health Insurance Portability and Accountability Act of 1996 (United States)
• Identity Theft and Assumption Deterrence Act of 1998 (United States)
• Individuals with Disabilities Education Improvement Act of 2004 (United States)
• MD. HB 901 (2019) (United States, Maryland)
• MD. SB 613. Consumer Personal Information Privacy. (United States, Maryland)
• NH. HB 1262. Student Assessment Data Privacy. (United States, New Hampshire)
• NH. SB 316. Protection of Personal Information. (United States, New Hampshire)
• NV. SB 220. Internet Privacy. (United States, Nevada)
• NV. SB 538. Internet Privacy. (United States, Nevada)
• Patient Safety and Quality Improvement Act (United States)
• Personal Data Protection Law (KVKK) (Turkey)
• Privacy Act of 1974 (United States)
• Rachel's Test (United States, California)
• Video Privacy Protection Act (United States)
• §1201C-§1206C. Online and Personal Privacy Protection. (United States, Delaware)
• §1203. Civil actions for false claims. (United States, Delaware)
• §1205C. Posting of privacy policy by operators of commercial online sites and services. (United States, Delaware)
• §144.192. Treatment of Biological Specimens and Health Data held by The Department of Health and Health Boards. (United States, Minnesota)
• §275:74. Use of Social Media and Electronic Mail. (United States, New Hampshire)
• §49-1-702. Data Accessibility, Transparency and Accountability Act; Part Definitions. (United States, Tennessee)
• §603A.340. Notice regarding covered information collected by operator: Operator required to make available to consumers; contents; period to remedy failure to comply with requirements; exception. (United States, Nevada)
• §62V.06. Data Practices. (United States, Minnesota)
• §72A.492-§72A.505. Insurance. (United States, Minnesota)