Secondary Use
Jump to navigation
Jump to search
Secondary Use is a form of INFORMATION PROCESSING privacy harm under the Solove taxonomy.
Secondary Use is defined as "using personal information for a purpose other than the purpose for which it was collected."
- In the 1940's the U.S. Government used census data, collected originally for the purpose of apportioning congressional districts, to identify and intern those of Japanese descent during the war.[1]
Additional comments
Occurrences
- A Photo of a Woman Crying After Florida School Shooting (February 2018)
- AI now has the ability to identify passwords based on the sounds of the keys being pressed (8 August 2023)
- Access to Face Recognition Search of Moscow Cameras System Is For Sale (November 2020)
- AccuWeather App Stealing Location Data (August 2017)
- Amazon heavily fined for invasion of privacy and insecurity (1 June 2023)
- Amazon’s Ring Security Camera (2020)
- Amazon’s ‘Just Walk Out’ Tech Is a Privacy Nightmare (2023)
- B.C. Canadian Tire stores broke privacy laws with facial ID technology (20 April 2023)
- Bluetooth Low Energy Data Transfer Technology (2010)
- California hits Google for $93M over deceptive location data options (14 September 2023)
- Cambridge Analytica and Facebook Scandal (2016)
- ChatGPT Has a Big Privacy Problem (31 March 2023)
- ChatGPT Privacy Issues (31 March 2023)
- Chrome Collects User Data Regardless of Consent
- Clearview's Facial Recognition App (2020)
- Contact Tracing Software Sells People’s Information (July 2020)
- DNA Testing Companies Share Data with Third Parties (November 2017)
- Data Вroker LexisNexis Selling DMV Data (November 2020)
- Dataminr Helps Police Track Protesters (July 2020)
- Departments of Motor Vehicles Sell Personal Information of Drivers (2019)
- Don't Believe Everything you Hear: How Cybercriminals Are Exploiting AI Voice Cloning (April 2023)
- Exploring the Perceptions of Location Sharing: Privacy vs. Affection (2023)
- Facebook's “Pseudoscience” Ad Category (April 2020)
- Facial Recognition in Public Places by Israeli Government (September 2023)
- FamilyTreeDNA Share Its Genealogy Database With the FBI (January 2019)
- Google Gets Access to Health Records from Ascension (November 2019)
- Hidden Cameras in Canadian Mall (October 2020)
- IBMs Weather Channel App Sharing User Location Data (2018)
- IOS Apps Access to Camera (October 2017)
- IRobot's Data Collection Leaks Sensitive Photos (2020)
- Instagram Sliders (2019)
- Member of Parliament Leaks COVID Patients Information to Press (July 2020)
- Mental Health Charities in the UK Hand Facebook Sensitive Data (3 June 2023)
- Messaging App ToTok (December 2019)
- Meta sued for collecting sensitive information on North Carolina DMV website (15 September 2023)
- Microsoft Facial Recognition Data Base (2016)
- Microsoft Fined for COPPA Violation (6 June 2023)
- Motel 6 Provided ICE with Guest Data (April 2019)
- Ontario Police Used COVID-19 Database Illegally (September 2020)
- People’s Actual Info Used in Training Videos for Employees (July 2020)
- Peruvian Wachitaxi App (May 2017)
- Police Investigate Protesters Through Smart Streetlight (June 2020)
- Police Spying on Connected Cars (January 2017)
- Policemen Abuse Driver's License Database (2012)
- Politicians Using Smart-TV Data for Ads (2019)
- Restaurant Worker Uses Contact Tracing Details to Personally Contact a Woman (May 2020)
- Ring's Privacy Failures - Spying and Harassing Through Home Cameras (May 2023)
- School-Based Software Monitors Kids’ Online Searches (March 2016)
- Secret Sharing App Whisper (October 2014)
- Shopify Support Team Abused Access to Company Network (October 2020)
Laws and Regulations
The following laws and regulations address the Secondary Use harm.
- (410 ILCS § 50/). Medical Patient Rights Act. (United States, Illinois)
- (410 ILCS § 513/). Genetic Information Privacy Act (United States, Illinois)
- 201 CMR 17.00. Standards For The Protection of Personal Information of Residents of The Commonwealth. (United States, Massachusetts)
- 42 U.S.C. Subchapter VII (United States)
- 5 U.S.C. §552a (United States)
- Bank Secrecy Act (United States)
- CH. 19.255. Personal Information—Notice of Security Breaches. (United States, Washington)
- CH. 217. Genetic Testing. (United States, Vermont)
- CH. 48.1. Consumer Privacy Protection Act. (United States, Rhode Island)
- CH. 482-1-122. Alabama Insurance Regulation. (United States, Alabama)
- CH. 70.02. Medical Records—Health Care Information Access and Disclosure. (United States, Washington)
- CO. HB 09-1338. (United States, Colorado)
- Cable Communications Policy Act of 1984 (United States)
- California Consumer Credit Reporting Agencies Act (United States, California)
- California Consumer Privacy Act of (2018) (United States, California)
- Children's Online Privacy Protection Act of 1998 (United States)
- Communications Act of 1934 (United States)
- Confidential Information Protection and Statistical Efficiency Act of 2002 (United States)
- Cybersecurity Enhancement Act of 2014 (United States)
- Driver's Privacy Protection Act of 1994 (United States)
- Electronic Communications Privacy Act (United States)
- Fair Credit Reporting Act of 1970 (United States)
- Family Educational Rights and Privacy Act (United States)
- Genetic Information Nondiscrimination Act of 2008 (United States)
- Health Insurance Portability and Accountability Act of 1996 (United States)
- ILL. SB 0318. Use of genetic testing information by employers. (United States, Illinois)
- ILL. SB 1307. The Genetic Information Privacy Act. (United States, Illinois)
- KY. HB 5. The Safety and Security of Personal Information held by Public Agencies. (United States, Kentucky)
- MD. HB 1127. Maryland Financial Consumer Protection Commission. (United States, Maryland)
- MD. SB 613. Consumer Personal Information Privacy. (United States, Maryland)
- MN. H.F. 112. The use of Genetic Information by Government Entities; creating new Consumer Protection Law regarding use of Genetic Information. (United States, Minnesota)
- NH. HB 1586. Student and Teacher Information Protection and Privacy. (United States, New Hampshire)
- NH. HB 536. Biometric Information to The Consumer Protection Act. (United States, New Hampshire)
- NM. HB 369. Genetic Information Privacy Act. (United States, New Mexico)
- NY GBS § 399-DDD Confidentiality of Social Security Account Number (United States, New York)
- OR. STAT. § 807.750 (2009)
- Oregon Consumer Information Protection Act. (United States, Oregon)
- Patient Safety and Quality Improvement Act (United States)
- Personal Data Protection Law (KVKK) (Turkey)
- Personal Responsibility and Work Opportunity Reconciliation Act (United States)
- Privacy Act of 1974 (United States)
- Protection of Pupil Rights Amendment (United States)
- Rhode Island Identity Theft Protection Act of 2015. (United States, Rhode Island)
- Section 308(d) of the Public Health Service Act (United States)
- VT. REG. B-2018-01 (2018) (United States, Vermont)
- VT. REG. IH-2001-01 (United States, Vermont)
- Video Privacy Protection Act (United States)
- WA. HB 2213 (2017) (United States, Washington)
- §10-3-1104.6. Genetic information -limitations on disclosure of information -liability definitions -legislative declaration. (United States, Colorado)
- §13.386. Treatment of Genetic Information held by Government Entities and other persons. (United States, Minnesota)