Information Privacy & Data Protection (Spring 2026)

Overview

This course is an introduction to information privacy and data protection law and policy. Governments and every sector of the economy collect, use, store, and share personal data. The headlines mirror the ubiquity of data use; nearly every day there is a new story about government surveillance, location tracking, identity theft, corporate data breaches, predictive analytics, or artificial intelligence. As these concerns have grown, so has the body of law surrounding them, from the paradigm-shifting U.S. v. Carpenter case in 2018, to the EU’s General Data Protection Regulation that went into effect in 2018, and the California Privacy Rights Act, passed by ballot initiative in November 2020 as well as various other state laws in recent years.

The course combines a practical approach to the daily problems that a privacy lawyer will face with the theory necessary to understand how the law is developing. We will cover the constitutional, statutory, and common law rules of privacy, as well as federal and state enforcement activity. We will learn about the policy questions arising from data-driven technologies, the theory behind them, and the questions to ask when assessing information practices. We will also examine privacy and data protection law through a critical lens, asking how the concepts interact with questions of discrimination, poverty, due process, and justice.

Course Objectives

At the end of this course you will be able to:

  • Articulate and differentiate the different concepts and values contained within the idea of privacy
  • Understand the basic structure of information privacy and data protection regulation in the United States and European Union
  • Recognize the types of problems a privacy lawyer faces in practice and how one might approach them
  • Critically evaluate the effects of data use and regulation on power relationships in society, including effects on consumers, relationships between individuals and governments, and effects on marginalized populations
  • Anticipate how the legal landscape on data protection is likely to change in the near future

Class Meetings, Review Session, Final Exam

Class: Mondays, Tuesdays, and Thursdays, 10:35–11:50 AM, Room 1310
Review Session: Monday, April 27, 1:00–2:15 PM
Final Exam: Tuesday, May 5. The exam will be open book and open notes, but with no computer access outside the exam software. This means that electronic casebooks will not be usable in the exam, so please plan accordingly.

Materials

The casebook for this course will be McGeveran, Privacy and Data Protection Law, 2d edition. Other readings, handouts, and lecture slides will be made available in the course OneDrive folder, linked to the right, and on BruinLearn.

Attendance

Regular attendance is required for all classes at UCLA Law. Pursuant to our academic standards, students who do not regularly attend class may, at my discretion, be prohibited from sitting for the final exam, resulting in a grade of “F” or being dropped from the class. Students for whom this may be an issue will receive a written warning before this final action, and may need to attend all remaining classes after the written warning is given. If you must miss a class because of a medical need, or serious familial, religious, or professional obligation, please email me at least 2 hours before class to request an excused absence. Class will be recorded and the recordings will be available for review, but watching the recording is not a substitute for attending class sessions.

Grading

Your grade will be based on your performance on the final exam and to a limited degree, your class participation.

Class Participation

I expect you to come prepared to participate in class discussion. Good preparedness requires both reading and thinking about the material before showing up in class. Because this is an upper-level course, we will not necessarily discuss every bit of the reading assignments at length. I do want you to read the material for a full understanding of the topic. I encourage questions about anything you find puzzling.

Please note that you will be assessed on the quality, not the quantity, of your participation (though there is certainly correlation). Quality does not mean giving the “correct” answer; thoughtful discussions are more important than facile answers. We will be exploring many new topics for which the answers may change year to year or even week to week, so the answer today might not be the answer tomorrow; it is much more important to learn how to reason through the issues. The key is to be prepared and engaged. Any poor assessment regarding your participation will be the result of protracted absence from class, unexcused lack of participation, disrespectful comments, or sustained evidence of lack of preparation and engagement.

You are expected to support each other as colleagues in a joint learning community. Each class member is entitled to your respect, your professionalism, and a presumption that their views are being offered in good faith—even if they are views with which you sharply disagree. My hope is that much of the conversation will proceed like a free-flowing seminar, and I expect and encourage respectful disagreement in class discussions. Such disagreement will allow us to more thoroughly address the different topics and will result in better learning opportunities.

Because you are assessed on quality, not quantity, I also ask that you also be cognizant of your speaking time. Some students will be especially keen to volunteer, which I appreciate — but sometimes I will stop calling on frequent speakers to get a diversity of voices. I will also call on students at random, because I do not want a small number of students to do the large majority of the talking. If you find that you are speaking often, please consider making space for others in the room who speak less frequently to have their turn. If you find that you are more hesitant to speak, trust that you will have valuable contributions that we would all benefit from hearing, and please consider engaging directly in the discussion.

Office Hours

My office hours will Mondays, 2-3PM in my office, Room 3370. If you cannot make that time or want to have a private conversation, please email me to schedule another time.

Privacy

Per University policy, UCLA Student Conduct Code 102.28 says that expectations of privacy apply, and it specifically prohibits recording without the consent of all recorded parties and prohibits taking photographs where there is a reasonable expectation of privacy. In remote teaching, advising, chatting, and other engagement in course activities remotely there is a reasonable expectation that photographing, screen capture, or other copying methods or recordings will not occur without express permission from all participants. A violation subjects a student to the disciplinary process. Do not record your courses, do not take screen shots of your classes, professors, or classmates, and do not release, post, email, text, or otherwise share or sell course materials to others.

Accommodations

UCLA Law strives to provide accommodations in a way that supports students with disabilities while maintaining their anonymity and the fundamental nature of our law program. As such, students needing academic accommodations should not contact their professors directly, but contact Carmina Ocampo, Director of Student Life or the UCLA Center for Accessible Education (CAE) When possible, students should start this process within the first two weeks of the semester, as reasonable notice is needed to coordinate accommodations. 

Resources for Health and Wellness

Students needing assistance with medical or mental health issues, substance abuse, anxiety or depression or other health-related matters should contact the Office for Student Affairs, UCLA Counseling and Psychological Services (CAPS) at 310-825-0768 (Courtney Walters is the counselor regularly assigned to the law school) or the Ashe Student Health & Wellness Center at 310-825-4073.

Remote Classes

We may have a few remote classes, to accommodate guest speakers or for other reasons. The link to the zoom classroom is in BruinLearn, and scheduled classes will be linked at the Zoom tab on the left side of the course page.

If we have class online, I ask that each of you please turn on your video whenever possible so we can be as fully engaged as possible while in a remote setting. If you must turn your video off for personal reasons or for bandwidth reasons, please let me know in advance where possible, and please limit it to be the exception rather than the rule. Please note that I am requesting camera usage to aid classroom discussion and presence, not as a way to introduce surveillance into the class; if you have a momentary need to turn off your camera for whatever reason, please do so at your own discretion.

Structure of the Course

  • Part I: Foundations
    • Constitutional Law
    • Tort Law
    • Consumer Protection
    • Data Protection
  • Part II: The Life Cycle of Data
    • Collection
    • Processing and Use
    • Storage and Security
    • Disclosures and Transfers
  • Part III: Sector-Specific Regulation
    • National Security
    • Government Data Collection
    • Employment
    • Medical Information
  • Part IV: Privacy and Power (specific topics may change)
  • The Relationality of Data
  • Poverty and State Control
  • Data, Discrimination & Oppression
  • Data & Capitalism

Assignments

Specific reading assignments are below. To account for the different speeds at which different classes move, the list begins with the first several classes, and reading assignments will be updated here as needed to match our pace. Most of the readings will be from the casebook (CB). Other readings will be posted in the course OneDrive folder, along with any other handouts.

The book contains “Practice” problems in many of the sections that are meant to get you thinking about how you might advise a client on the issues presented in that chapter. I suggest that you spend some of your reading time trying to work through them. I cannot promise that we will always discuss them in class, but my intent is to do so with some frequency.

The first two weeks of casebook assignments have been scanned and posted in the OneDrive folder to give you time to buy the book.

Note: We will not meet on February 26 or March 12. Those classes will be rescheduled as soon as possible with the makeup dates and classrooms listed below:

  • Makeup TBD
  • Makeup TBD

Please mark your calendars now.

I’m hopeful that these are the only changes to the schedule, but any further changes will be posted with plenty of notice.

Date (Day)Assignment Topic
1/14 (Wed)CB 1, Skinner-Thompson, Privacy at the Margins, Ch. 1 (pdf)

Before you read, try to come up with your own definition of “privacy.” Then as you read, think about all the ways the concept of privacy is used or expressed in the readings. See if they fit with your definition, and if not, consider how your defintion might change.
Introduction: What Privacy Is and Why It Matters
1/15 (Thu)CB 114–123; Cohen, Configuring the Networked Self Ch. 6 excerpt (pdf); Nissenbaum, Privacy in Context Ch. 7 excerpt (pdf)Introduction: Perspectives on Privacy
1/19 (Mon)NO CLASSMLK DAY
1/20 (Tue)CB 3–21Constitutional Law: Fourth Amendment Foundations
1/22 (Thu)CB 21–44Constitutional Law: Contemporary Fourth Amendment  Challenges
1/26 (Mon)CB 44–78Constitutional Law: First Amendment; Explicit Privacy Rights
1/27 (Tue)CB 79–103, 827–835Constitutional Law: Implicit Privacy Rights
1/29 (The)CB 123–146Tort Law: Intrusion & Disclosure