Christopher Hoofnagle

Christopher Hoofnagle Explains Weakness of Online Privacy Policies

– San Francisco Chronicle, September 3, by Deborah Gage
http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2008/09/03/BUP412MNAV.DTL

Often, a privacy policy is merely a statement that a company collects and shares your personal information, like your name, address, telephone number and Social Security number, said Chris Hoofnagle, a senior staff attorney.

– San Francisco Chronicle, The Tech Chronicles blog, September 3, by Deborah Gage
http://www.sfgate.com/cgi-bin/blogs/sfgate/detail?blogid=19&entry_id=29848

One reason for Californians’ reluctance to use the Web for shopping may be that they care more about privacy than the general population, according to Chris Hoofnagle.

Western’s Hesitancy to Disclose Data Breach

Chris Hoofnagle Explains Best Computerworld, August 28, by Jaikumar Vijayan
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9113757&intsrc=hm_ts_head

It’s reasonable for a company whose systems have been breached to make sure it fully understands the extent of what has happened before going public, said Chris Hoofnagle…. “The general rule is that one should not disclose the breach until its scope has been determined,” Hoofnagle said.

Christopher Hoofnagle Study Shows Consumers Unaware Personal Data Is Sold

San Francisco Chronicle, May 15, by Deborah Gage
http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2008/05/15/BUJT10MD33.DTL&type=printable

“Businesses are allowed to sell information unless consumers object,” said Chris Hoofnagle, the [Samuelson] clinic’s associate director and a co-author of the report. “There’s a (significant) gap between people’s understanding of the rules and actual marketplace practices.”

Christopher Hoofnagle Urges Banks to Disclose More Data about Identity Thefts

WSJ.com, MarketWatch, March 17, by Gail Liberman and Alan Lavine
http://www.marketwatch.com/news/story/your-bank-should-doing-protect/story.aspx?guid=%7B8C4ADD11-3644-400B-A02C-D6D283DDFF5C%7D

“Lending institutions should publicly report basic statistical information about identity theft events,” he says. Information they should disclose: The number of identity theft events suffered or avoided; the form of identity theft attempted; the targeted product, such as a mortgage loan or credit card; and the amount of loss suffered.

Christopher Hoofnagle on the Aftermath of HP Pretexting Case

San Francisco Chronicle, June 29, by Jessica Guynn
http://www.law.berkeley.edu/news/mediacoverage/inthenews/June-07.pdf#hoofnagle
“Now an organization has to think twice about the potential blowback from investigating journalists and others who have a right to free speech and should not be harassed…”