Secondary Use
Jump to navigation
Jump to search
Secondary Use is a form of INFORMATION PROCESSING privacy harm under the Solove taxonomy.
Secondary Use is defined as "using personal information for a purpose other than the purpose for which it was collected."
- In the 1940's the U.S. Government used census data, collected originally for the purpose of apportioning congressional districts, to identify and intern those of Japanese descent during the war.[1]
Additional comments
Occurrences
- A Photo of a Woman Crying After Florida School Shooting (February 2018)
- Access to Face Recognition Search of Moscow Cameras System Is For Sale (November 2020)
- AccuWeather App Stealing Location Data (August 2017)
- Amazon’s Ring Security Camera (2020)
- Bluetooth Low Energy Data Transfer Technology (2010)
- Cambridge Analytica and Facebook Scandal (2016)
- Chrome Collects User Data Regardless of Consent
- Clearview's Facial Recognition App (2020)
- Contact Tracing Software Sells People’s Information (July 2020)
- DNA Testing Companies Share Data with Third Parties (November 2017)
- Data Вroker LexisNexis Selling DMV Data (November 2020)
- Dataminr Helps Police Track Protesters (July 2020)
- Departments of Motor Vehicles Sell Personal Information of Drivers (2019)
- Facebook's “Pseudoscience” Ad Category (April 2020)
- FamilyTreeDNA Share Its Genealogy Database With the FBI (January 2019)
- Google Gets Access to Health Records from Ascension (November 2019)
- Hidden Cameras in Canadian Mall (October 2020)
- IBMs Weather Channel App Sharing User Location Data (2018)
- IOS Apps Access to Camera (October 2017)
- Instagram Sliders (2019)
- Member of Parliament Leaks COVID Patients Information to Press (July 2020)
- Messaging App ToTok (December 2019)
- Microsoft Facial Recognition Data Base (2016)
- Motel 6 Provided ICE with Guest Data (April 2019)
- Ontario Police Used COVID-19 Database Illegally (September 2020)
- People’s Actual Info Used in Training Videos for Employees (July 2020)
- Peruvian Wachitaxi App (May 2017)
- Police Investigate Protesters Through Smart Streetlight (June 2020)
- Police Spying on Connected Cars (January 2017)
- Policemen Abuse Driver's License Database (2012)
- Politicians Using Smart-TV Data for Ads (2019)
- Restaurant Worker Uses Contact Tracing Details to Personally Contact a Woman (May 2020)
- School-Based Software Monitors Kids’ Online Searches (March 2016)
- Secret Sharing App Whisper (October 2014)
- Shopify Support Team Abused Access to Company Network (October 2020)
- Slack's Insufficient Security Measures (July 2019)
- Smart Billboards Used For Targeted Ads (August 2018)
- Sports App TheScore Sharing Location Data with Advertisers (2018)
- Students Health Records Shared With Parents (October 2015)
- Suggestion for Banks to Set New Rules For the Sale of Guns (February 2018)
- Target's Algorithm to Calculate Customer's Pregnancy Likelihood (February 2016)
- Telecom Companies Sell Location Data (January 2019)
- TikTok Data Tracking and Sharing Practices (July 2020)
- Twitter Used User Contact Data Provided for Security to Target Ads (October 2019)
- US Government Purchases Phone Location Data for Immigration Enforcement (2020)
- US Police Abusing Confidential Databases (September 2016)
- Uber Collecting Users Information (2017)
- Vacuum Cleaner's Roomba 900 Home Mapping (July 2017)
- Verkada Emplyees Abuse Access to Company’s Facial Recognition System (October 2020)
- Vizio Collecting User Data (2017)
Laws and Regulations
The following laws and regulations address the Secondary Use harm.
- (410 ILCS § 50/). Medical Patient Rights Act. (United States, Illinois)
- (410 ILCS § 513/). Genetic Information Privacy Act (United States, Illinois)
- 201 CMR 17.00. Standards For The Protection of Personal Information of Residents of The Commonwealth. (United States, Massachusetts)
- 42 U.S.C. Subchapter VII (United States)
- 5 U.S.C. §552a (United States)
- Bank Secrecy Act (United States)
- CH. 19.255. Personal Information—Notice of Security Breaches. (United States, Washington)
- CH. 217. Genetic Testing. (United States, Vermont)
- CH. 48.1. Consumer Privacy Protection Act. (United States, Rhode Island)
- CH. 482-1-122. Alabama Insurance Regulation. (United States, Alabama)
- CH. 70.02. Medical Records—Health Care Information Access and Disclosure. (United States, Washington)
- CO. HB 09-1338. (United States, Colorado)
- Cable Communications Policy Act of 1984 (United States)
- California Consumer Credit Reporting Agencies Act (United States, California)
- California Consumer Privacy Act of (2018) (United States, California)
- Children's Online Privacy Protection Act of 1998 (United States)
- Communications Act of 1934 (United States)
- Confidential Information Protection and Statistical Efficiency Act of 2002 (United States)
- Cybersecurity Enhancement Act of 2014 (United States)
- Driver's Privacy Protection Act of 1994 (United States)
- Electronic Communications Privacy Act (United States)
- Fair Credit Reporting Act of 1970 (United States)
- Family Educational Rights and Privacy Act (United States)
- Genetic Information Nondiscrimination Act of 2008 (United States)
- Health Insurance Portability and Accountability Act of 1996 (United States)
- ILL. SB 0318. Use of genetic testing information by employers. (United States, Illinois)
- ILL. SB 1307. The Genetic Information Privacy Act. (United States, Illinois)
- KY. HB 5. The Safety and Security of Personal Information held by Public Agencies. (United States, Kentucky)
- MD. HB 1127. Maryland Financial Consumer Protection Commission. (United States, Maryland)
- MD. SB 613. Consumer Personal Information Privacy. (United States, Maryland)
- MN. H.F. 112. The use of Genetic Information by Government Entities; creating new Consumer Protection Law regarding use of Genetic Information. (United States, Minnesota)
- NH. HB 1586. Student and Teacher Information Protection and Privacy. (United States, New Hampshire)
- NH. HB 536. Biometric Information to The Consumer Protection Act. (United States, New Hampshire)
- NM. HB 369. Genetic Information Privacy Act. (United States, New Mexico)
- NY GBS § 399-DDD Confidentiality of Social Security Account Number (United States, New York)
- OR. STAT. § 807.750 (2009)
- Oregon Consumer Information Protection Act. (United States, Oregon)
- Patient Safety and Quality Improvement Act (United States)
- Personal Data Protection Law (KVKK) (Turkey)
- Personal Responsibility and Work Opportunity Reconciliation Act (United States)
- Privacy Act of 1974 (United States)
- Protection of Pupil Rights Amendment (United States)
- Rhode Island Identity Theft Protection Act of 2015. (United States, Rhode Island)
- Section 308(d) of the Public Health Service Act (United States)
- VT. REG. B-2018-01 (2018) (United States, Vermont)
- VT. REG. IH-2001-01 (United States, Vermont)
- Video Privacy Protection Act (United States)
- WA. HB 2213 (2017) (United States, Washington)
- §10-3-1104.6. Genetic information -limitations on disclosure of information -liability definitions -legislative declaration. (United States, Colorado)
- §13.386. Treatment of Genetic Information held by Government Entities and other persons. (United States, Minnesota)