Collective privacy refers to the privacy interests of a group of people. As AI systems have advanced in capacity to analyze and segment people into groups with predictable behaviors, collective privacy has become increasingly relevant. However, there is a governance gap: while some indigenous governance frameworks such as those of the Māori acknowledge a right to collective privacy, the majority of privacy laws effectuate privacy primarily at an individual level, not a collective level. Europe's GDPR, adopted in some form in most regions of the world, exemplifies an individual privacy approach. This paper defines group privacy and analyzes the complex socio-technical environments underlying the collective privacy gap. The paper examines key case studies highlighting diverse aspects of collective privacy: the Māori algorithm charter with the New Zealand government, the All of US genetic data biobank policies, and the European Court of Human Rights case Lewit v. Austria.

See in detail: