Aggregation

Aggregation is a form of INFORMATION PROCESSING privacy harm under the Solove taxonomy. Aggregation is defined as "combining various pieces of personal information."

A credit bureau combining an individual's payment history from multiple creditors.

Occurrences

• Advertising Agency Uses Geofencing to Target Women Near Abortion Centers (2017)
• Allstate’s Insurance Pricing Algorithm Based on Non-Risk Factors (2013)
• Amazon Extending Prime into Whole Foods (2017)
• Amazon's Alexa Asking Questions (July 2020)
• Anthem Data Breach (2014)
• Apps Sending Personal Information to Facebook (December 2018)
• Apps With Eavesdropping Software (December 2017)
• Automated Tenants Background Checks (May 2020)
• Baltimore Police Flies Planes With Cameras (July 2019)
• Bolsa Familia Social Welfare Program in Brazil (October 2020)
• Brainwave Tracking of Students in Class (2017)
• Cambridge Analytica and Facebook Scandal (2016)
• Cashier in the Supermarket Asking for Postal Code (October 2020)
• Child Safety Smartwatches Easy to Hack (2017)
• China Keeping Records on Muslims (February 2020)
• Chinese Database With Details on More Than Two Million People (September 2020)
• Clearview's Facial Recognition App (2020)
• Contact Tracing Apps (July 2020)
• Contact Tracing Software Sells People’s Information (July 2020)
• DHS Buys Cellphone Location Data (October 2020)
• DNA Testing Companies Share Data with Third Parties (November 2017)
• Equifax Data Breach (2017)
• FBI Using Travel Company Data to Track People (July 2020)
• Facebook Acquires GIPHY
• Facebook Allowed Third Parties Read Users’ Messages (December 2019)
• Facebook Asking Users to Complete Their Profiles (2013)
• Facebook's "People You May Know" Feature (November 2017)
• Facebook's “Pseudoscience” Ad Category (April 2020)
• Ford's GPS Tracking Speed (January 2014)
• Geofencing Technology To Target Catholics At Mass (February 2020)
• Geofencing Used To Monitor Antiracism Protesters (August 2020)
• Glitch in India's Biometric Welfare System (October 2019)
• Google Acquires Fitbit (2019)
• Google Analyzes Credit Card Transactions (May 2017)
• Google Collects Australian User Data Without Consent (July 2020)
• Google Combining Search and Location Data (2016)
• Google Gets Access to Health Records from Ascension (November 2019)
• Google People Cards Feature (August 2020)
• Google Tracks User Purchasers via Gmail (May 2019)
• IBMs Weather Channel App Sharing User Location Data (2018)
• Idaho Medical System Algorithm (2011)
• Identity Theft of Deceased People for Fraud (October 2020)
• Keyless “Smart Access” Technologies (December 2019)
• LEDS Mega Database in Great Britain (October 2020)
• LinkNYC Kiosks in New York (2019)
• Login to Oculus Only Possible With Facebook Account (August 2020)
• Los Angeles Police Uses Powerful Data Analytics Software (September 2020)
• Man Wrongfully Accused by Facial Recognition (June 2020)
• Medical Algorithm with a Racial Bias (October 2019)
• Microsoft Facial Recognition Data Base (2016)

... further results

Laws and Regulations

The following laws and regulations address the Aggregation harm.

• 44 U.S.C. Chapter 33 (United States)
• 5 U.S.C. §552a (United States)
• 653-13.2(148, 272C). Standards of practice—appropriate pain management. (United States, Iowa)
• Alabama Data Breach Notification Act of (2018) (United States, Alabama)
• Americans with Disabilities Act of 1990 (United States)
• CH. 48.1. Consumer Privacy Protection Act. (United States, Rhode Island)
• CH. 62. Protection of Personal Information. (United States, Vermont)
• CH. 70.02. Medical Records—Health Care Information Access and Disclosure. (United States, Washington)
• CH. 90. Medical Records. (United States, North Carolina)
• Cable Communications Policy Act of 1984 (United States)
• California Consumer Privacy Act of (2018) (United States, California)
• California Privacy Rights Act (United States, California)
• Children's Online Privacy Protection Rule (2000) (United States)
• Clinical Laboratory Improvement Amendments (United States)
• Communications Act of 1934 (United States)
• Cybersecurity Information Sharing Act of 2015 (United States)
• Do-Not-Call Implementation Act (United States)
• FLA. HB 1189 (United States, Florida)
• Foreign Intelligence Surveillance Act of 1978 (United States)
• Health Insurance Portability and Accountability Act of 1996 (United States)
• Identity Theft and Assumption Deterrence Act of 1998 (United States)
• Individuals with Disabilities Education Improvement Act of 2004 (United States)
• MD. HB 901 (2019) (United States, Maryland)
• MD. SB 613. Consumer Personal Information Privacy. (United States, Maryland)
• NH. HB 1262. Student Assessment Data Privacy. (United States, New Hampshire)
• NH. SB 316. Protection of Personal Information. (United States, New Hampshire)
• NV. SB 220. Internet Privacy. (United States, Nevada)
• NV. SB 538. Internet Privacy. (United States, Nevada)
• Patient Safety and Quality Improvement Act (United States)
• Personal Data Protection Law (KVKK) (Turkey)
• Privacy Act of 1974 (United States)
• Rachel's Test (United States, California)
• Video Privacy Protection Act (United States)
• §1201C-§1206C. Online and Personal Privacy Protection. (United States, Delaware)
• §1203. Civil actions for false claims. (United States, Delaware)
• §1205C. Posting of privacy policy by operators of commercial online sites and services. (United States, Delaware)
• §144.192. Treatment of Biological Specimens and Health Data held by The Department of Health and Health Boards. (United States, Minnesota)
• §275:74. Use of Social Media and Electronic Mail. (United States, New Hampshire)
• §49-1-702. Data Accessibility, Transparency and Accountability Act; Part Definitions. (United States, Tennessee)
• §603A.340. Notice regarding covered information collected by operator: Operator required to make available to consumers; contents; period to remedy failure to comply with requirements; exception. (United States, Nevada)
• §62V.06. Data Practices. (United States, Minnesota)
• §72A.492-§72A.505. Insurance. (United States, Minnesota)